Overview

overview

7

Static

static

3

2026-11-09...id.exe

windows10-2004-x64

7

2026-11-09...id.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/11/2026, 23:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-11-09_2cf867d3637b1eb5894ec2154d62bdeb_cobalt-strike_glassworm_icedid.exe
  • Size 954KB
  • Sample261110-3vbcasce92
  • SHA256 1b276478cdce3b58ffd1d8cc97edf88b2ebb84b1605a77e3194998711a6aae89
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoverytrojan

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Drops file in Windows directory 3 IoCs
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies registry class 7 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 34 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-09_2cf867d3637b1eb5894ec2154d62bdeb_cobalt-strike_glassworm_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-09_2cf867d3637b1eb5894ec2154d62bdeb_cobalt-strike_glassworm_icedid.exe"
    1⤵
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • Reads the TCP/IP host and domain name from the registry
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1336
    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-11-09_2cf867d3637b1eb5894ec2154d62bdeb_cobalt-strike_glassworm_icedid.exe --webview-exe-version=0.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=1336.1576.13368877674374941061 /pfhostedapp:a22720588408f72464bd52d97175bbff6bb298fa
      2⤵
      • Enumerates system info in registry
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:5200
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView /prefetch:4 /pfhostedapp:a22720588408f72464bd52d97175bbff6bb298fa --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x198,0x19c,0x1a0,0x174,0x1a8,0x7ff888595fd8,0x7ff888595fe4,0x7ff888595ff0
        3⤵
          PID:3564
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView" --webview-exe-name=2026-11-09_2cf867d3637b1eb5894ec2154d62bdeb_cobalt-strike_glassworm_icedid.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2004 --field-trial-handle=2020,i,12133332402774123963,9968508022339802543,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:a22720588408f72464bd52d97175bbff6bb298fa
          3⤵
            PID:1316
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView" --webview-exe-name=2026-11-09_2cf867d3637b1eb5894ec2154d62bdeb_cobalt-strike_glassworm_icedid.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2172 --field-trial-handle=2020,i,12133332402774123963,9968508022339802543,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:a22720588408f72464bd52d97175bbff6bb298fa
            3⤵
              PID:1792
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView" --webview-exe-name=2026-11-09_2cf867d3637b1eb5894ec2154d62bdeb_cobalt-strike_glassworm_icedid.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2444 --field-trial-handle=2020,i,12133332402774123963,9968508022339802543,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:a22720588408f72464bd52d97175bbff6bb298fa
              3⤵
                PID:2736
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView" --webview-exe-name=2026-11-09_2cf867d3637b1eb5894ec2154d62bdeb_cobalt-strike_glassworm_icedid.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3408 --field-trial-handle=2020,i,12133332402774123963,9968508022339802543,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:a22720588408f72464bd52d97175bbff6bb298fa /prefetch:1
                3⤵
                  PID:5528
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-11-09_2cf867d3637b1eb5894ec2154d62bdeb_cobalt-strike_glassworm_icedid.exe --webview-exe-version=0.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=1336.1576.11685239540895137039 /pfhostedapp:a22720588408f72464bd52d97175bbff6bb298fa
                2⤵
                • Drops file in Windows directory
                • Enumerates system info in registry
                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                • Suspicious use of WriteProcessMemory
                PID:4120
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView /prefetch:4 /pfhostedapp:a22720588408f72464bd52d97175bbff6bb298fa --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ff888595fd8,0x7ff888595fe4,0x7ff888595ff0
                  3⤵
                    PID:4504
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView" --webview-exe-name=2026-11-09_2cf867d3637b1eb5894ec2154d62bdeb_cobalt-strike_glassworm_icedid.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1876 --field-trial-handle=1880,i,9203417434440640562,1897067487814107161,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:a22720588408f72464bd52d97175bbff6bb298fa
                    3⤵
                      PID:5312
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView" --webview-exe-name=2026-11-09_2cf867d3637b1eb5894ec2154d62bdeb_cobalt-strike_glassworm_icedid.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2628 --field-trial-handle=1880,i,9203417434440640562,1897067487814107161,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:a22720588408f72464bd52d97175bbff6bb298fa
                      3⤵
                        PID:5020
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView" --webview-exe-name=2026-11-09_2cf867d3637b1eb5894ec2154d62bdeb_cobalt-strike_glassworm_icedid.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2648 --field-trial-handle=1880,i,9203417434440640562,1897067487814107161,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:a22720588408f72464bd52d97175bbff6bb298fa
                        3⤵
                          PID:4492
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView" --webview-exe-name=2026-11-09_2cf867d3637b1eb5894ec2154d62bdeb_cobalt-strike_glassworm_icedid.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3504 --field-trial-handle=1880,i,9203417434440640562,1897067487814107161,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:a22720588408f72464bd52d97175bbff6bb298fa /prefetch:1
                          3⤵
                            PID:3556
                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView" --webview-exe-name=2026-11-09_2cf867d3637b1eb5894ec2154d62bdeb_cobalt-strike_glassworm_icedid.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=816 --field-trial-handle=1880,i,9203417434440640562,1897067487814107161,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:a22720588408f72464bd52d97175bbff6bb298fa
                            3⤵
                              PID:5284
                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView" --webview-exe-name=2026-11-09_2cf867d3637b1eb5894ec2154d62bdeb_cobalt-strike_glassworm_icedid.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4540 --field-trial-handle=1880,i,9203417434440640562,1897067487814107161,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:a22720588408f72464bd52d97175bbff6bb298fa
                              3⤵
                                PID:1840

                          Network

                                MITRE ATT&CK Enterprise v16

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                40483a3b-985b-4310-9f98-554f0bfdae12.tmp
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\40483a3b-985b-4310-9f98-554f0bfdae12.tmp
                                • Size 3KB
                                • SHA256 c4149a8f92a3b564934a01d3fdc73ad7ffa0a2916506998b3a7a578cb08ab5c6
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                settings.dat
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Crashpad\settings.dat
                                • Size 280B
                                • SHA256 3d97c16f52bcfa8a95b7960e0a88e57f8ed86829eea2acc85e977cefafdd44be
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                settings.dat
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Crashpad\settings.dat
                                • Size 280B
                                • SHA256 c25fd19e5f7cb455e6b9265fc30307d38fd1e0109768c81d8a01a7966189d764
                                • MD5 SHA1 SHA512
                                Submit Download

                                settings.dat
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Crashpad\settings.dat
                                • Size 280B
                                • SHA256 8cbdbf5deaea8c7228cd63eaf79ef03eeb623e0e01d787553efbd723fde2b506
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                settings.dat
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Crashpad\settings.dat
                                • Size 280B
                                • SHA256 32df9cce2ce9a16525b902d96950b35cc271f7fb96878f12cd42b5fc6504eaaf
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                settings.dat
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Crashpad\settings.dat
                                • Size 280B
                                • SHA256 14b5bc338cce71f588bb298bd1ab04f1cf5407628e9104a889960c2e529c8e81
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                throttle_store.dat
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Crashpad\throttle_store.dat
                                • Size 20B
                                • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                • MD5 SHA1 SHA512
                                Submit Download

                                04bab98c-a041-41be-ad51-6d9380e8c98a.tmp
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\04bab98c-a041-41be-ad51-6d9380e8c98a.tmp
                                • Size 6KB
                                • SHA256 6254a0d29569e62571d4e0438d2fa75c4df5523a3310b030854e91ad9f3ecdb0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                data_0
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Cache\Cache_Data\data_0
                                • Size 44KB
                                • SHA256 6f7a15fb5e5923a69fbf474a9e04d8e55bd60677daaaa5f8bfe3f4168a15a318
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                data_1
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Cache\Cache_Data\data_1
                                • Size 264KB
                                • SHA256 4833be248311bedad44ad7b71ded62b3019a2f99bf5b9dc3e2f2ca9150b5459b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                index
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Cache\Cache_Data\index
                                • Size 256KB
                                • SHA256 bf124c0fccd83e5248ee2aab6b18d251c639ea3045336c875e56020d23827041
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                the-real-index
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                • Size 48B
                                • SHA256 33c2809ec38de418d44c823d0131329a93e5e6d6f46cc1921ea7a62cca79f488
                                • MD5 SHA1 SHA512
                                Submit Download

                                index
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Code Cache\wasm\index
                                • Size 24B
                                • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                • MD5 SHA1 SHA512
                                Submit Download

                                the-real-index
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index
                                • Size 48B
                                • SHA256 22ebfb141a7111e29c06bd76b58beb2b92a9ca654d2886274e65d8bb02ed8758
                                • MD5 SHA1 SHA512
                                Submit Download

                                MANIFEST-000001
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Extension Rules\MANIFEST-000001
                                • Size 41B
                                • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                • MD5 SHA1 SHA512
                                Submit Download

                                Favicons
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Favicons
                                • Size 20KB
                                • SHA256 2db221a44885c046a4b116717721b688f9a026c4cae3a17cf61ba9bef3ad97f4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                History
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\History
                                • Size 164KB
                                • SHA256 ddcb3462bc474617ea503831532b33fc35767587e00f0823e4dc3029224962ef
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                84305ab4-3775-4c2f-847c-ac3064aa8baa.tmp
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Network\84305ab4-3775-4c2f-847c-ac3064aa8baa.tmp
                                • Size 871B
                                • SHA256 728b54e56d29e6d4ae1689c066b0b27e28a09331e18c55001ee01b17b85b5eb2
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                96d81f77-ecde-4924-b10d-8e3389aeff14.tmp
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Network\96d81f77-ecde-4924-b10d-8e3389aeff14.tmp
                                • Size 356B
                                • SHA256 0e37647638d9527099fec5daca60e40b03bdb98d6ebcfefd9a36f0aa484eb0db
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Network Persistent State
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Network\Network Persistent State
                                • Size 111B
                                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Reporting and NEL
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Network\Reporting and NEL
                                • Size 36KB
                                • SHA256 10ce46995378459151b5a072d6ef1e54867ce57edcc1520ec6a0965b5ff432ff
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SCT Auditing Pending Reports
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Network\SCT Auditing Pending Reports
                                • Size 2B
                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                • MD5 SHA1 SHA512
                                Submit Download

                                TransportSecurity
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Network\TransportSecurity
                                • Size 188B
                                • SHA256 88069823b9ee895a26f6ce30ba08d8b7e320d2f254ff5474d0bc1c0b2e99f039
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Trust Tokens
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Network\Trust Tokens
                                • Size 36KB
                                • SHA256 78a4734f08b47286a3736c88c6fc481f76bd2b1a46e29d0920939f088ce899fd
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Preferences
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Preferences
                                • Size 6KB
                                • SHA256 0fd45322829edb70a2d48dbbe00db816070710515e1400c009172359972e6250
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Safe Browsing Cookies
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
                                • Size 20KB
                                • SHA256 0628922305d2478ba75a48efadf932d439616eaf1ff908be334793f7bde28107
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Secure Preferences
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Secure Preferences
                                • Size 6KB
                                • SHA256 ead0cedcd6604ecbe80ced46569199d808b1089e6ddc368ca208874662af6b14
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                the-real-index
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
                                • Size 48B
                                • SHA256 9ddfe20d7428423b48f10ac8dc564e0d85a3566fc6ffdd4e6c395ce36b30bfd4
                                • MD5 SHA1 SHA512
                                Submit Download

                                db
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Shared Dictionary\db
                                • Size 44KB
                                • SHA256 79b107307408e5ad9a145c87533316174fd13f4ad943497d079522fbe325b3b1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                000003.log
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Site Characteristics Database\000003.log
                                • Size 40B
                                • SHA256 f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8
                                • MD5 SHA1 SHA512
                                Submit Download

                                CURRENT
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Site Characteristics Database\CURRENT
                                • Size 16B
                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                • MD5 SHA1 SHA512
                                Submit Download

                                LOG
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Site Characteristics Database\LOG
                                • Size 303B
                                • SHA256 6a6cc3bb9fe08fc45b0919a5d9dcca0d0e0211bd57df91598bbbeb25735fd98a
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                000003.log
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Sync Data\LevelDB\000003.log
                                • Size 46B
                                • SHA256 a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a
                                • MD5 SHA1 SHA512
                                Submit Download

                                LOG
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Sync Data\LevelDB\LOG
                                • Size 279B
                                • SHA256 85bbf63c0384e9e502e028f0da2d0ee10d11c6375baa37733d805240a551e630
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Visited Links
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Visited Links
                                • Size 128KB
                                • SHA256 a7b7b8b2e52df3a638a631de4d44498f3ca3f3b585dc83b0d27d854148b56206
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Web Data
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\Web Data
                                • Size 210KB
                                • SHA256 db93cc6874e6ae80c9a151c1dd6a326ffee07b127e5899438873c19399c79b85
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                000003.log
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\shared_proto_db\000003.log
                                • Size 100B
                                • SHA256 c83848b49a734f0892972625b70108d27abfc1a5b799d91c3ce11b89d5e51194
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                LOG
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\shared_proto_db\LOG
                                • Size 277B
                                • SHA256 81a4e5a0256c8158aa4fb568621d651a6c2f765ebb94de180b559577be05efa2
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                000003.log
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\shared_proto_db\metadata\000003.log
                                • Size 651B
                                • SHA256 d1a3188297a041403b21ea9a453064bdc621f279509e271abbb204ab5daaa186
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                LOG
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Default\shared_proto_db\metadata\LOG
                                • Size 295B
                                • SHA256 514e5a8e903b7fd11b1eacffdf81fc66912b302e3461b3bb4c50b303337814e5
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                data_0
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\GrShaderCache\data_0
                                • Size 8KB
                                • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                • MD5 SHA1 SHA512 SSDEEP
                                Submit Download

                                data_1
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\GrShaderCache\data_1
                                • Size 264KB
                                • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                • MD5 SHA1 SHA512 SSDEEP
                                Submit Download

                                data_2
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\GrShaderCache\data_2
                                • Size 8KB
                                • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                • MD5 SHA1 SHA512 SSDEEP
                                Submit Download

                                data_3
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\GrShaderCache\data_3
                                • Size 8KB
                                • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                • MD5 SHA1 SHA512 SSDEEP
                                Submit Download

                                Last Version
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Last Version
                                • Size 14B
                                • SHA256 d75607a88bb0f572f8863a3ea4737b635664178e97e0b7cb057887f2736fe3fe
                                • MD5 SHA1 SHA512
                                Submit Download

                                Local State
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Local State
                                • Size 1KB
                                • SHA256 056123347c3ea92b32721df44ccf4681994f39ccf81896bdc177442643b21af1
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                data_1
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\ShaderCache\data_1
                                • Size 264KB
                                • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                • MD5 SHA1 SHA512 SSDEEP
                                Submit Download

                                index
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\ShaderCache\index
                                • Size 256KB
                                • SHA256 641129307137c8520b863abebf2feeaa03483179e15ec3e7af58ae445c7d2ed4
                                • MD5 SHA1 SHA512 SSDEEP
                                Submit Download

                                manifest.json
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Speech Recognition\1.15.0.1\manifest.json
                                • Size 76B
                                • SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Variations
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\Variations
                                • Size 86B
                                • SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                a7197b9f-70a2-4cdc-8406-9269fa0509ec.tmp
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\a7197b9f-70a2-4cdc-8406-9269fa0509ec.tmp
                                • Size 2KB
                                • SHA256 b940eb8e43a4277a219dd1c5ad1f5a83345e2e1fc8fa2d4f523a66720a521eaa
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ff7aa950-5672-44c8-8d76-b01b439f9972.tmp
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\EBWebView\ff7aa950-5672-44c8-8d76-b01b439f9972.tmp
                                • Size 15KB
                                • SHA256 7a076ad550d30ab4d7ea1001412464e2be167d08320aa943bb951e59111d6793
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                discord-rpc.log
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\discord-rpc.log
                                • Size 4KB
                                • SHA256 b05553ed75eddc41878745ac2c92e9663b27999fd85eb8d01f9f490782b9b6f9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Microsoft.Web.WebView2.WinForms.dll
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\runtime\Microsoft.Web.WebView2.WinForms.dll
                                • Size 39KB
                                • SHA256 227b89122b8cdb9c450e1d30df11f737244cda97c4b5f5b18a68bcb899c854f8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                WebView2Loader.dll
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\runtime\WebView2Loader.dll
                                • Size 156KB
                                • SHA256 1a1e1b00e8892cef34828196068e7568c77e1355f167548574698046f535daea
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                splash.html
                                • Path C:\Users\Admin\AppData\Local\SABRLauncher\runtime\splash.html
                                • Size 4KB
                                • SHA256 b5c0ea360e7587c18223bc88ab26bb5cb69ae91860e823edfdd8d3c5dd797b1d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Microsoft.CognitiveServices.Speech.core.dll
                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4120_212438811\Microsoft.CognitiveServices.Speech.core.dll
                                • Size 2.6MB
                                • SHA256 62a13d8459e0992c311dc3551bf3c2d1ce167ea7fa40f0ec62193f3bd760b36e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                manifest.fingerprint
                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4120_212438811\manifest.fingerprint
                                • Size 66B
                                • SHA256 22b55f5d9b1bafb80e00c1304cf5e0d6057a304a2e8757b4f021b416f4397297
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                memory/1316-344-0x000001A2C6120000-0x000001A2C649C000-memory.dmp
                                Download

                                memory/1316-118-0x00007FF8AD950000-0x00007FF8AD951000-memory.dmp
                                Download

                                memory/1336-19-0x00007FF88E5C0000-0x00007FF88EF64000-memory.dmp
                                Download

                                memory/1336-346-0x00007FF88E5C0000-0x00007FF88EF64000-memory.dmp
                                Download

                                memory/1336-194-0x00007FF88E5C0000-0x00007FF88EF64000-memory.dmp
                                Download

                                memory/1336-27-0x00007FF88E5C0000-0x00007FF88EF64000-memory.dmp
                                Download

                                memory/1336-17-0x000000001D790000-0x000000001D81A000-memory.dmp
                                Download

                                memory/1336-28-0x00007FF88E5C0000-0x00007FF88EF64000-memory.dmp
                                Download

                                memory/1336-10-0x0000000001D60000-0x0000000001D6E000-memory.dmp
                                Download

                                memory/1336-0-0x00007FF88E74F000-0x00007FF88E750000-memory.dmp
                                Download

                                memory/1336-36-0x00007FF88E5C0000-0x00007FF88EF64000-memory.dmp
                                Download

                                memory/1336-4-0x00007FF88E5C0000-0x00007FF88EF64000-memory.dmp
                                Download

                                memory/1336-347-0x00007FF88E5C0000-0x00007FF88EF64000-memory.dmp
                                Download

                                memory/1336-3-0x00007FF88E5C0000-0x00007FF88EF64000-memory.dmp
                                Download

                                memory/1336-342-0x00007FF88E5C0000-0x00007FF88EF64000-memory.dmp
                                Download

                                memory/1336-1-0x0000000000D90000-0x0000000000E84000-memory.dmp
                                Download

                                memory/1336-2-0x00007FF88E5C0000-0x00007FF88EF64000-memory.dmp
                                Download

                                memory/1336-18-0x00007FF88E5C0000-0x00007FF88EF64000-memory.dmp
                                Download

                                memory/1840-801-0x000001A938830000-0x000001A938831000-memory.dmp
                                Download

                                memory/1840-803-0x000001A938830000-0x000001A938831000-memory.dmp
                                Download

                                memory/1840-802-0x000001A938830000-0x000001A938831000-memory.dmp
                                Download

                                memory/1840-804-0x000001A938830000-0x000001A938831000-memory.dmp
                                Download

                                memory/1840-805-0x000001A938830000-0x000001A938831000-memory.dmp
                                Download

                                memory/1840-806-0x000001A938830000-0x000001A938831000-memory.dmp
                                Download

                                memory/1840-795-0x000001A938830000-0x000001A938831000-memory.dmp
                                Download

                                memory/1840-797-0x000001A938830000-0x000001A938831000-memory.dmp
                                Download

                                memory/3556-518-0x000002088A000000-0x000002088A37C000-memory.dmp
                                Download

                                memory/5284-736-0x00000265E2020000-0x00000265E204F000-memory.dmp
                                Download

                                memory/5284-722-0x00007FF8AEA60000-0x00007FF8AEA61000-memory.dmp
                                Download

                                memory/5284-721-0x00007FF8AE1B0000-0x00007FF8AE1B1000-memory.dmp
                                Download

                                memory/5312-517-0x00000191BBBD0000-0x00000191BBF4C000-memory.dmp
                                Download

                                memory/5528-161-0x00007FF8AD950000-0x00007FF8AD951000-memory.dmp
                                Download

                                memory/5528-343-0x00000291C6630000-0x00000291C69AC000-memory.dmp
                                Download