cb67bf4123318602a77c8e4f64297c1a1a44c0715e2b5e39b3c0518057e2e857

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 03:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Arcana.exe
Size 11.7MB
Sample261110-eham8syxct
SHA256 cb67bf4123318602a77c8e4f64297c1a1a44c0715e2b5e39b3c0518057e2e857
MD5 7cb52aa05db66a6d74aa7c39b10bca2e
SHA1 778bec3ab757a7fa24564608505c1556e36c70ed
SHA512 c879678bd470a7485332ee952d73eb7e9bf8d3b982a9971e4b4f51ddfaaf6f515b4fe4ed5481eb5192ed63d4f26643087ed4ebfed4dfc803ae36c5933f84df33
SSDEEP 196608:SM+LStLE8rjHlDUcYr60MTZ3dpvREMq8H9z02M0S6wC1BHsLZZN3YdZA:SCB/l4pMNnhjHrM04C1BMlZN3YdZ
TLSH
T1EDC69D43F7A290E8C56AC034935A6232FA317C4947357AEB2BE44B253F65F906B3DB14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution trojan

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
17	4936	Arcana.exe

Deletes itself 1 TTPs 1 IoCs

defense_evasion

File Deletion

T1070.004

pid	Process
1872	.Arcana.zuwyoismqjmgmguxhnrjoybeygbypngj.__selfdelete__.exe

Executes dropped EXE 2 IoCs

pid	Process
1872	.Arcana.zuwyoismqjmgmguxhnrjoybeygbypngj.__selfdelete__.exe
1580	Arcana.exe

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Arcana.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Arcana.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 10 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3280_45051051\crs.pb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3280_45051051\ct_config.pb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3280_45051051\kp_pinslist.pb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3280_45051051\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3280_1696897180\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3280_1696897180\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3280_1132110982\crl-set	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3280_45051051\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3280_1132110982\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3280_1132110982\manifest.fingerprint	msedgewebview2.exe

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
1828	cmd.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Arcana.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Arcana.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1780	msedgewebview2.exe
1780	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4732	msedgewebview2.exe
4732	msedgewebview2.exe
3280	msedgewebview2.exe
3280	msedgewebview2.exe

Suspicious behavior: RenamesItself 2 IoCs

pid	Process
4936	Arcana.exe
4936	Arcana.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4936	Arcana.exe
1580	Arcana.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 4936 wrote to memory of 4732	4936	Arcana.exe	84
PID 4732 wrote to memory of 3064	4732	msedgewebview2.exe	85
PID 4732 wrote to memory of 4216	4732	msedgewebview2.exe	86
PID 4732 wrote to memory of 4216	4732	msedgewebview2.exe	86
PID 4732 wrote to memory of 4216	4732	msedgewebview2.exe	86
PID 4732 wrote to memory of 4100	4732	msedgewebview2.exe	87
PID 4732 wrote to memory of 1676	4732	msedgewebview2.exe	88
PID 4732 wrote to memory of 1676	4732	msedgewebview2.exe	88
PID 4732 wrote to memory of 4412	4732	msedgewebview2.exe	89
PID 4732 wrote to memory of 4412	4732	msedgewebview2.exe	89
PID 4732 wrote to memory of 4412	4732	msedgewebview2.exe	89
PID 4732 wrote to memory of 4112	4732	msedgewebview2.exe	90
PID 4732 wrote to memory of 4112	4732	msedgewebview2.exe	90
PID 4732 wrote to memory of 4112	4732	msedgewebview2.exe	90
PID 4936 wrote to memory of 3476	4936	Arcana.exe	91
PID 4936 wrote to memory of 1872	4936	Arcana.exe	94
PID 4936 wrote to memory of 1580	4936	Arcana.exe	95
PID 1872 wrote to memory of 1828	1872	.Arcana.zuwyoismqjmgmguxhnrjoybeygbypngj.__selfdelete__.exe	96
PID 1580 wrote to memory of 3280	1580	Arcana.exe	104
PID 3280 wrote to memory of 716	3280	msedgewebview2.exe	105
PID 3280 wrote to memory of 2200	3280	msedgewebview2.exe	106
PID 3280 wrote to memory of 2200	3280	msedgewebview2.exe	106
PID 3280 wrote to memory of 2200	3280	msedgewebview2.exe	106
PID 3280 wrote to memory of 2960	3280	msedgewebview2.exe	107
PID 3280 wrote to memory of 4136	3280	msedgewebview2.exe	108
PID 3280 wrote to memory of 4136	3280	msedgewebview2.exe	108
PID 3280 wrote to memory of 1332	3280	msedgewebview2.exe	109
PID 3280 wrote to memory of 1332	3280	msedgewebview2.exe	109
PID 3280 wrote to memory of 1332	3280	msedgewebview2.exe	109
PID 3280 wrote to memory of 4336	3280	msedgewebview2.exe	110
PID 3280 wrote to memory of 4336	3280	msedgewebview2.exe	110
PID 3280 wrote to memory of 4336	3280	msedgewebview2.exe	110
PID 3280 wrote to memory of 2096	3280	msedgewebview2.exe	117
PID 3280 wrote to memory of 2096	3280	msedgewebview2.exe	117
PID 3280 wrote to memory of 3080	3280	msedgewebview2.exe	118
PID 3280 wrote to memory of 3080	3280	msedgewebview2.exe	118
PID 3280 wrote to memory of 1780	3280	msedgewebview2.exe	119
PID 3280 wrote to memory of 4992	3280	msedgewebview2.exe	120
PID 3280 wrote to memory of 4992	3280	msedgewebview2.exe	120

C:\Users\Admin\AppData\Local\Temp\Arcana.exe
"C:\Users\Admin\AppData\Local\Temp\Arcana.exe"
1⤵
- Downloads MZ/PE file
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: RenamesItself
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4936
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Arcana.exe --webview-exe-version=0.11.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=4936.4544.8891864288401754443
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4732
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffbe910b078,0x7ffbe910b084,0x7ffbe910b090
    3⤵
    PID:3064
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView" --webview-exe-name=Arcana.exe --webview-exe-version=0.11.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1724,i,17643544216564755736,5465169864406245836,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1716 /prefetch:2
    3⤵
    PID:4216
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView" --webview-exe-name=Arcana.exe --webview-exe-version=0.11.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2036,i,17643544216564755736,5465169864406245836,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2040 /prefetch:3
    3⤵
    PID:4100
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView" --webview-exe-name=Arcana.exe --webview-exe-version=0.11.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2376,i,17643544216564755736,5465169864406245836,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:8
    3⤵
    PID:1676
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView" --webview-exe-name=Arcana.exe --webview-exe-version=0.11.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3612,i,17643544216564755736,5465169864406245836,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
    3⤵
    PID:4412
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView" --webview-exe-name=Arcana.exe --webview-exe-version=0.11.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3852,i,17643544216564755736,5465169864406245836,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3900 /prefetch:1
    3⤵
    PID:4112
- C:\Windows\system32\reg.exe
  "reg" query "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable
  2⤵
  PID:3476
- C:\Users\Admin\AppData\Local\Temp\.Arcana.zuwyoismqjmgmguxhnrjoybeygbypngj.__selfdelete__.exe
  "C:\Users\Admin\AppData\Local\Temp\.Arcana.zuwyoismqjmgmguxhnrjoybeygbypngj.__selfdelete__.exe" 1892 C:\Users\Admin\AppData\Local\Temp\.Arcana.jlvsgjlqzamharzspqezzkbjzlhxzjdf.__relocated__.exe
  2⤵
  - Deletes itself
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:1872
- - C:\Windows\SYSTEM32\cmd.exe
    cmd.exe /c exit
    3⤵
    - Executes a command shell one-liner
    PID:1828
- C:\Users\Admin\AppData\Local\Temp\Arcana.exe
  "C:\Users\Admin\AppData\Local\Temp\Arcana.exe" --after-update
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1580
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Arcana.exe --webview-exe-version=0.11.4 --user-data-dir="C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=1580.1672.13839390187803402163
    3⤵
    - Drops file in Program Files directory
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:3280
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x19c,0x7ffbe910b078,0x7ffbe910b084,0x7ffbe910b090
      4⤵
      PID:716
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView" --webview-exe-name=Arcana.exe --webview-exe-version=0.11.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1764,i,16786429761043795589,8748087481158509042,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1760 /prefetch:2
      4⤵
      PID:2200
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView" --webview-exe-name=Arcana.exe --webview-exe-version=0.11.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1828,i,16786429761043795589,8748087481158509042,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1832 /prefetch:3
      4⤵
      PID:2960
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView" --webview-exe-name=Arcana.exe --webview-exe-version=0.11.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2296,i,16786429761043795589,8748087481158509042,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:8
      4⤵
      PID:4136
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView" --webview-exe-name=Arcana.exe --webview-exe-version=0.11.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3472,i,16786429761043795589,8748087481158509042,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
      4⤵
      PID:1332
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView" --webview-exe-name=Arcana.exe --webview-exe-version=0.11.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4048,i,16786429761043795589,8748087481158509042,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4032 /prefetch:1
      4⤵
      PID:4336
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView" --webview-exe-name=Arcana.exe --webview-exe-version=0.11.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4932,i,16786429761043795589,8748087481158509042,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:8
      4⤵
      PID:2096
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView" --webview-exe-name=Arcana.exe --webview-exe-version=0.11.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4800,i,16786429761043795589,8748087481158509042,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:8
      4⤵
      PID:3080
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView" --webview-exe-name=Arcana.exe --webview-exe-version=0.11.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4984,i,16786429761043795589,8748087481158509042,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:8
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1780
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView" --webview-exe-name=Arcana.exe --webview-exe-version=0.11.4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5088,i,16786429761043795589,8748087481158509042,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
      4⤵
      PID:4992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

crl-set

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3280_1132110982\crl-set
Size 13KB
SHA256 b85327be29f5d0a5be4a47da5bf5062f5115bda5e9827db40ac4776d829ccd18
MD5 5111ab39b220749a299b5bb7cd25c730
SHA1 970c9013ee629ded1b5d2a058cd147950c3544ab
SHA512 37caae776f5d9365367e12a6ca13e07761f09b3cf6d1f9ea9523af89e6f2579afdd148d3942822358a49ac597a544c30bdf070aee051d69d8a0adab6f6af708a
SSDEEP 384:oeYPnEDMU2kk0yu7uCnglcJUoCzL4pv2W9cBTgE:ojPEoMk67R1UoCwV2W0cE
TLSH
T16152AF4FDDC4A62AF03911AE982262A412794A8552554B731B6C3A64BCFB28D4E38C3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3280_1132110982\manifest.fingerprint
Size 66B
SHA256 7ad6d17bd7b1bf49425f7efe322f4a9065446eca71d3ea1ebe0a838efcb08e95
MD5 fa32cf839f99432676ca9acccd8a0550
SHA1 9a869d2475f9840495188509e12ce9ca5a9e7189
SHA512 b1e901d92adecc46f96f52ac38954688f0a2514710041109785656ffe694766448cdbafcda397e9edb196763997d952537ebfefb4e5d128954576024f8856c04
TLSH
T1C5A00216AEA0E812F29486DEC4254B6A14372BF9AE76008979E8E4819C87260815B8D5
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3280_1696897180\manifest.fingerprint
Size 66B
SHA256 946f3a9e019b0d80f5671de782f295132341f663f74aebad7628f22e528d6d52
MD5 3fb5233616491df0ec229ba9f42efdb8
SHA1 18a8116e2df9805accd7901d2321c3fa92da1af4
SHA512 e9b17ac626bf6508db9a686825411e90d316a0f1dacbf63dbec5baaaf6b96af4dbc9a7332975b6d5c16c43757d79fddca6b888ea97bc07a8dffb1b3a06366b4d
TLSH
T1F8A022A0C302202228A00E0A82E20223200EA80CE880002328AC8E2A080833B00A8200
MD5 SHA1 SHA512 TLSH

Submit Download

ct_config.pb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3280_45051051\ct_config.pb
Size 24KB
SHA256 a7371e9e40f287ebfd8c444633ff1eef0cc3050b015f761dd16ed5ae8fa1f35f
MD5 84a749aff1727eb9f4c907b1fb1ab051
SHA1 117b3ada2b80e5e03c560fe4b8eef5e8e6a7d760
SHA512 dfc2c3c565cfd5194be7029184db9a5cf5ee50b3a510da52e509e7e630ec963107ff57d65324aac9983f67158b6cacf8c6d03113cae79dbb37b2a413b57627d3
SSDEEP 768:8oIO1NNHA5uAbuOCri7GrZ7gl3u6ksYCjMPI:c+OuAbXGjhsYCQQ
TLSH
T142B2A7BF61159F001753D50896F52BB6E133A3D6C8F3697DB1E28008F1872E961E867B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3280_45051051\kp_pinslist.pb
Size 10KB
SHA256 71798e7f16d50ccfe2428fbc868f81949f592fbf7b8a64db4753e3fbba8a0d57
MD5 25b685289453d58201e61d13670b7105
SHA1 e3305c5defd136f91236ef6f06cc1536bceb4f38
SHA512 9fb8df9033e7ffb5a47b7a54b8f497a68a839976894a682d21d9d7e52ee8bd3bbc048ac2fb7a53b69d9ca807b42d1feeb17ad1e5eddacd27b46e72dc149dbeaa
SSDEEP 96:nxleRkDB0rBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gNn:3/DCrBnYQ5jlMacFwn2c9x
TLSH
T1A722F1B37904F99390E7E0BE1041F49AE937436540ADF98A528C4A7635F1F0729BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3280_45051051\manifest.fingerprint
Size 66B
SHA256 d6eff41b92a45577a8985604359af6d1bdbac85d6e9dfe19438e8efc1bf01f9c
MD5 f6f7a2d4983e6c4b8331d71d5a6a7acb
SHA1 b62c452a4627992b16959d022e0cee50c0a0f294
SHA512 ac5b99ca8f28cab92572bfb5a9c3f4369ce2581d450f5f39d3f16e742f291e275e110f35be78596387e8ef4ac66117d0d878b47ef813df76c5259393c869f18f
TLSH
T1D5A0228B0E20A883300C300EE888B002332B030000882A0CF0F08EC0E8B80C8032E830
MD5 SHA1 SHA512 TLSH

Submit Download

.Arcana.zuwyoismqjmgmguxhnrjoybeygbypngj.__selfdelete__.exe

Path C:\Users\Admin\AppData\Local\Temp\.Arcana.zuwyoismqjmgmguxhnrjoybeygbypngj.__selfdelete__.exe
Size 11.7MB
SHA256 cb67bf4123318602a77c8e4f64297c1a1a44c0715e2b5e39b3c0518057e2e857
MD5 7cb52aa05db66a6d74aa7c39b10bca2e
SHA1 778bec3ab757a7fa24564608505c1556e36c70ed
SHA512 c879678bd470a7485332ee952d73eb7e9bf8d3b982a9971e4b4f51ddfaaf6f515b4fe4ed5481eb5192ed63d4f26643087ed4ebfed4dfc803ae36c5933f84df33
SSDEEP 196608:SM+LStLE8rjHlDUcYr60MTZ3dpvREMq8H9z02M0S6wC1BHsLZZN3YdZA:SCB/l4pMNnhjHrM04C1BMlZN3YdZ
TLSH
T1EDC69D43F7A290E8C56AC034935A6232FA317C4947357AEB2BE44B253F65F906B3DB14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Arcana-0.11.4.exe

Path C:\Users\Admin\AppData\Local\Temp\Arcana-0.11.4.exe
Size 11.7MB
SHA256 2ff6d6c1f73f2832db950a980cf3258bd41b9e410667c08ca0c084c4bcd5c4d8
MD5 3573264dc1eabba6ee13776a24400c13
SHA1 6907fa662741fb04098900a850aa1371c3ec09e6
SHA512 b5ac85e7713c8c6fd1d605c991f1b15392c1eca7abcdc9a0b5c8ebb104cdae2b80c8457218fccf6561cdf7545c956cbe06f6201016bb26d0a1077596e32dc3f2
SSDEEP 196608:4lBj8H+e2D5DUcYr60MTZ3dpvREMq8H9z02M0S6wC1BHsL4ZN8cKCHNap:sQHo54pMNnhjHrM04C1BM8ZNVbHI
TLSH
T122C69D43F6A291E8C16AC035935A6233FA317C4907357AEB2BE44B213F65F906B3DB54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

005ec0f8-36c7-4203-a5e0-318fe3845355.tmp

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\005ec0f8-36c7-4203-a5e0-318fe3845355.tmp
Size 16KB
SHA256 2be94a6367285ffc636974a6e1a989b38be24a8d24dfdd658ef7c1c41fa97209
MD5 35d34742c94d9f85efbe9c6f89e49e6a
SHA1 db35282fad48be3d10dd28acb88c7a6cdaafdede
SHA512 90d464c155b652565054125910217ed9afab60949146d194fb69261f7f15d9a0249fd0d4fb8b1965fee33d4509e2653d9aa1dd2543c5e7b0009e26f77618ca47
SSDEEP 384:z3+OBqImmJvGBLx3NaFMJF1Z3NbwFHHlK3Wg6rj:6cvGtlN1ZiNYA/
TLSH
T17D729E761C717A272CFBC549BA892B4BDA751253C0D16FE9CDFD8F0E01AB1842352D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1888c1d5-ba1d-4744-85e6-d0c8349c42bb.tmp

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\1888c1d5-ba1d-4744-85e6-d0c8349c42bb.tmp
Size 1KB
SHA256 bb7c3efe0017178dd31ceb0d545bc3400f5889e05418bd2ff98387f7065001c2
MD5 98c9f50f63a6d10344eb3a7e188ac7df
SHA1 93db6b1404d15516813c23e8e50fc77b19b6c2a7
SHA512 ee77c5ecadae0d330c6707e8c234aeb6ec50c0f8bd35950c1d5107c2d771b3e7dee0e36da82003981a404d509937c46325d54705c92eb82b6458cb8e8a87627a
TLSH
T1553187B1E8B0FBB26C929706B6466B9B6D31015590114E0862DD4B1903E36DC677BD37
MD5 SHA1 SHA512 TLSH

Submit Download

2bf22fa8-cb87-4e7e-986c-38c344c2af28.tmp

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\2bf22fa8-cb87-4e7e-986c-38c344c2af28.tmp
Size 4KB
SHA256 f32a4d0a522a998998eb39bb0cf0c038536e8540841de34374ced196145c317c
MD5 2345c4b344142aa7638fc5b7e66ecff7
SHA1 6cd5ad1fec9bc322fe096f3faedf5322b88bfefd
SHA512 095a4e1330d7dedcf200017bdd77bf242bd85305b4b508cebdd96c5a75d3134552a3d7c517a9f6f754dce56b7d005a89f2a6550b1b99a7825f62e7da3fe6b2a5
SSDEEP 96:zu0z3NkCE4fevALa/pG8Frh/cInURoDotoN5fQFDqBlBebJ6S4ZR60ZrTMSlxa:z9z3Nb28aooDUaIt6lBA86U3y
TLSH
T126918532A870EA775DF2DA05B9453F47B6B54122D4912FA8D6EC0F1D01DB39C2396C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4302caf6-531f-4093-ac5d-328564d223d8.tmp

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\4302caf6-531f-4093-ac5d-328564d223d8.tmp
Size 3KB
SHA256 433b3f3f9664607d777495467e6e7282fe0738cfa12784dac04686a4b4fe3c53
MD5 e501a5949c931ba43937404503b1caba
SHA1 2078f634c0fb36d60af7e6ce137e301c4ee6e6f3
SHA512 bcaed9b1f11e6032eccd538cae3b9338ca00f7c1066013bd2ec00c8ef379f271b3c71122e0956f4ddae9c684f2874ff21a45f9ce9ffd9a0e464de83143eb0576
TLSH
T14C718672A874FA775DF39A05BD852B07B6710126E4912FA8D6EC0F1C02D73D81392C17
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\CertificateRevocation\6498.2026.10.20\manifest.json
Size 118B
SHA256 cc33e26f3b2efe862336389207db045cc7a916940213b9d33d845c82c12c8712
MD5 acb0c12cc7e5345764763e37bcebbec8
SHA1 4147b2615955c51a6054c807c2397e4d7d10ee03
SHA512 6777da8af66a77c28049eaf1b49ba7cdfaa08a8f381c27dad4af0e980e8d5a7ea0df0c3f1fd0cbc0cbe93a83a07d130ae24dc4057471de830fac60036b1c2f3a
TLSH
T10EB09222DC80D832697693A84E2246D0F238234B2568AA493630048C0B2E2F182A2721
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 64ab883e014e3f164db465dacf472dac3793a98bd7082bd6c4b96f63db9e0d39
MD5 303fd128f6b9529d27e1a45eff847fbc
SHA1 1cac34b3f081a5f358f7d43c3e4692d9d2157aba
SHA512 4443172823a2d0d287f3f0db7d119608216f489751bfef297385530e7180e5748f4b4a4410db4671eee034d10421311c994e484519079b4fced29398adb1898b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 e532d9eb90f2609a08b209e9db062e1ec4983c8ea62008e022c53543027f2f97
MD5 aed287bae53e7f52ac0e93feb9ea50bc
SHA1 2ddff51a575a816b4a2ad2096fd4cb7246311a51
SHA512 416be3277df354ab1b092e24502a84ca124cfd34c7b1ad1da90757e2eb5ab10246aab683d4f50a7fd0d13911683684eb9ef4b08372dbd505005ee5a6e66e1246
TLSH
T1C8D012167E21C174C03022720211A18D0600D01A51068100543DC56D2E440600953482
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 c7bc921f16f124ccac063edf55bc347b446c1ce77e3825046fcf8599516dc092
MD5 18a0cd3a9d0732311b1d03295a739e2f
SHA1 6c1e43591b8b528fde1c3b174ba104b4393436cb
SHA512 c9483a57c0ca0f97ad826ca8bd6315a853ee0ff8904ee2f28a2d5b34754c4d1f6f185fe6c80550939c08184b4fdfcd630f106f253c3b01d9739c258f6c930f18
TLSH
T1F0D012167A21C174C03021730212A18D0500D11B50068000543DD55D2A440600913482
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

2a427bdb-76fd-42fa-9a22-8d1ffc834a10.tmp

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\2a427bdb-76fd-42fa-9a22-8d1ffc834a10.tmp
Size 6KB
SHA256 a122a41f4113ad281556e0439bc23867d23e5ff88751431538b3a0356326fd98
MD5 c14e43b72ce2c457c06173a60d3ccf56
SHA1 d79b5675521bf98e31785b2ca54f0566982b8bfd
SHA512 b89337542b3e61da44b4bace94bf396d58b69610667adb89d6ec5512269e2f7b1de3927cf520fd75c76b44fa88f1cd58426e0749d01b7f02ade613e988a1644b
SSDEEP 192:st1Y0UbifbZ8pauy/S+WiTjOqdRqPlIRnM8:st1BQiKS/VeqTVe8
TLSH
T1D8E186429E28B97B4CCBE619BE35BB56E2FA102275D40E58EBFC851C04D66DC2307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2d9cbf51-33fa-400a-b55e-8e44c80c7b0e.tmp

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\2d9cbf51-33fa-400a-b55e-8e44c80c7b0e.tmp
Size 6KB
SHA256 ed9c8ae8b03fc32ea02dde41de6595aff0384dde5beb5b68760be812dacaf09b
MD5 97feb2294ab37b77341cc78c98a63da2
SHA1 231ec5adb00c54611b203b6c7a7dfb40688b429e
SHA512 5e1a8186b3082304e96d3c9469316fde60b22bd524c6ec08a39fb12ed51cbf5c829cf7a2bba41b8e72cdfd69d8f76a813166efcd8bbaf27bd6abfa3aeec9d843
SSDEEP 192:st1Y0UbSfbZ8pauy/S+WiTjOqdRqPrIRnMC:st1BQSKS/VeqT1eC
TLSH
T10AE1A8429E28B97B5CCBE6197E35BB56E2FA102265C50E48EBFC851C04E76CD2307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

087e5ef36615a694_0

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Code Cache\js\087e5ef36615a694_0
Size 1KB
SHA256 d9f3eee2927975d668926a2eb48b45bdea4f9fe03740253c7a44cc838fc9189c
MD5 80fb5b680fc1b301653d9cdf5ff5115b
SHA1 7eb76b09ec6218ae7387b7f5ca19d3279eed65bb
SHA512 cae8f4f86d843d7bf5303d006cc90c93e443ad5b407129f962d8468a3e09df51bb749c338071f6033082cb44cbcb5b37290676afcf0ab4496220644911c5049e
TLSH
T14231965DAB014501C13902F44BEB8727BB37A06D5F86E3512355F22B2D8A7D09986E15
MD5 SHA1 SHA512 TLSH

Submit Download

4f2c6535d4818c9a_0

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Code Cache\js\4f2c6535d4818c9a_0
Size 241B
SHA256 ec70cac4b9add54cb2b312a48ebd01713b5dca690b7ef9a5433520c41cdb0450
MD5 930e9d222d1a9a9ca9251c896a72a50d
SHA1 1f5c3f034c2e96cabb00ad3648735cff07f30b29
SHA512 67bd1d27139d1467a4b81d1a0233be23cf17b2753eac5b937f63674bc82871330c014974c0755b2a26c242f69d8899bec604535af59179a6cd95ca65539b5d77
TLSH
T118D0234F04A55484C1746BF4D7FF8D5A4303C4F0455C957320B6FC71596156CF116B05
MD5 SHA1 SHA512 TLSH

Submit Download

63511b4e0f0712e0_0

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Code Cache\js\63511b4e0f0712e0_0
Size 243B
SHA256 bd41cfd38c45b76d59a77b42964253fad58133014383e223459c40cad52acf13
MD5 96b941cab6e35b7a5d9ee8cfb5d27997
SHA1 336911e03e213a0cd7ff2ccf61806f656055d974
SHA512 4649b96de97f5d710b2cf4492598633aceb467bf7a9459a71537cc7533af0d4903b98213b3323ad7b4ab89376faeaedf5bc9f1f2ea98d0b78cb5ff7cfefb43d2
TLSH
T199D0A74FC5919004C668EAF4AFFE596D8342D0E00709D5130011CCA530C2A783498A49
MD5 SHA1 SHA512 TLSH

Submit Download

73df65b64a9fc4a6_0

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Code Cache\js\73df65b64a9fc4a6_0
Size 245B
SHA256 67d66f452141d7abc796f4fad49b5a425f69878c9af5cea53fdeee9da0ba8a07
MD5 cc7c9a91d2c2248ba7b88e1a24938e47
SHA1 449e534b54ffa390160a9e32476e280143e25958
SHA512 a0f7aad29667dc864213552b112a516b8018f394575c98f8fa4d464d8224bf70fa8d64f99c8690171f4fd823d62d5c5628e23bbe50a8619a2e1dfe8080d1df80
TLSH
T1F2D0238D87765C20D5689AF4DBDF4D7EC315C0E4016CA4031406DD7550876F8762C311
MD5 SHA1 SHA512 TLSH

Submit Download

7f35871c7dd0c632_0

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Code Cache\js\7f35871c7dd0c632_0
Size 243B
SHA256 6dfb59cdf27f476d4ae712fb741ffbc5b7c41f3c7530ba21b18db4193c7795dd
MD5 d572d8e161d679f38e486fb4ddb70e90
SHA1 131c2aff24d1aaf055c5f434b25e976f84bedc0f
SHA512 cfe8769b958a75a444c4337a49e2c462b3912023f3a58cbb51b5021f19443650e1bf8b312ddf4f1862ae9c2e9db77ea4fa97865a36cbaab77ba2b3e2f17785d3
TLSH
T1A2D0A75E41B0180CC5B08FF0AAEF89599336E1D253589C535486E4D122C5618B02F214
MD5 SHA1 SHA512 TLSH

Submit Download

843f8e394496a9dd_0

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Code Cache\js\843f8e394496a9dd_0
Size 5KB
SHA256 9f4bc03ff08e153efb67af37584c580f09aa1a9cf7d239d53bf316dd653fb26a
MD5 9624b3c46a06d07850827064cd0f3b45
SHA1 b1c60f852bc49d5f230dad76affbbebe1764cdb0
SHA512 0fbc4f575c532a1f1d93462fbdfa0f869f63a0b5f3f967b3e5711fd59f92be9afcba85dbb29f2a5ca6c7641f97596877106d8e07c707106ec621eca1cbf43db2
SSDEEP 96:Jwj0697U+0yONzLsRzBtDITrfOVzpeIzPpKzudJpM29/f5j:yj0W7rclsfpIsMudJpv9J
TLSH
T1CEB13591B708DF10C7710BF543574A693B798D9C2D86A30376A0E7361C4E6D6ADC8E0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a46cc49349f10b19_0

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Code Cache\js\a46cc49349f10b19_0
Size 246B
SHA256 dfa592a8c88db5f3ec9cebac01642de6fdc2d6e57c392bd79ea419a7329d405e
MD5 d262974db3d429b3f49e9d21daaab8ef
SHA1 03f83ed56b7c985e23ee5ede8c36737cf8cbe069
SHA512 ccfad9b9707e938e0cdacec6ab7b25356204fafac9f783c6e326522342321c5798ca376bf62d3fc6e95ca9191aa9ac2af6cc4b1a6d891a0f18dd9e79cd111e91
TLSH
T17CD0A7CE4635D608C09566F0FAEE9A59830AD0F0025D95269004D451659067C711965D
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 48B
SHA256 ec2b08e59a4c25ea0a28b1e45091b9f954a9defa6bce6656d0d5af82e7fb0aa6
MD5 425935eb1337b5936eb8bacbf63f5f66
SHA1 ce4af69f797ef69d378492810d6e40fe28ce6b73
SHA512 fcfc9cc3cded014ae2d5f63eef200316974affcc786f436a80b51156f5542385e81e79d17ea2e576a48481934ade686b4488ac060b7633710099044efebfe831
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 216B
SHA256 93b3668e21c8eb37088697a3de348a2b09c469789d3a2b2b6277f9e748dc6c74
MD5 4876a931989841531890a42e7ae02d43
SHA1 12cba1d9d9adddebc0104309400c0ae4b9f1acb9
SHA512 ce01be465b050febd3e7fd1241e84b7d046e12d17250b3cd68280f10b4f73440ce26c2dff80523a07f1aa2ddef5764db6e52cee4ff8a2a01986a3b5329ec3f90
TLSH
T1A5D08C10D87E9AA0C35181B110E17A8B72375C700B733F114DEFEA3089B231C619A842
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 216B
SHA256 ccc04dd44ba2b0a9ad8622caa8d45a58e921f8a83dab6caf1e99b6bb9a8a7b03
MD5 b3b8b3218414cf276da3a5786bce11ed
SHA1 dab2d8583492184265bf7bea1913d9ed3635d883
SHA512 eb673f55ad80eb7897de007f6ec8c739f0a02117324da8bee1bf23f6eb357df38fbffb0e066c89bf36143a3102d5d6609339873021d546dc115b4465d4686c48
TLSH
T10FD0801DFC7EC670CF51C2706551551B99631CF10F501711C8EF95438B757445131435
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\DawnWebGPUCache\index
Size 256KB
SHA256 53115dd564780355005accd5f128098e20c6340d3c2267a3c18ad93ad642d8df
MD5 9117754d2efcfb6faefedb32483e1fcb
SHA1 212f41d605286a678b63abc5f44480953f6ed023
SHA512 64dc14a6ab0bc9517ed890995daa6240d10c46c73440cd90699cb88ee128b03749610262388d76c6cbd97316258f7366f957beb389878c638b68608a211afee9
SSDEEP 3:LstlNllkll/lQS/ll:LsX3lEtQS//
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\DawnWebGPUCache\index
Size 256KB
SHA256 1560d51861fa2d6115fc1c18d28ca88a4718778e3b8ff4257dbde30df72c3e7b
MD5 9f63470c53928fc757db516190990b40
SHA1 8f63261f8a7209fcb766774002873d2f1ad691fc
SHA512 882ae5fcb132c67991f3eba7201c1464f5a85b7e4788d94eb57c4700a9b0ce905fec6f12751d940237dd10abd48dca14d5fdd2e78a8ad73f98d7908af63fcddc
SSDEEP 3:LsOllllkll/lQS/ll:LsUlEtQS//
MD5 SHA1 SHA512 SSDEEP

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Favicons
Size 20KB
SHA256 46b5ecada4edb2585f87953f7847aefc938be2404b9d9455c772b97295b7b1cb
MD5 babd43551f1b29eb82e221460676126a
SHA1 e9bff307613a14b35830893bdb6d1ecc931b425d
SHA512 5ab681c170dbd1d374bd66edd02cbe21272819ef7389ad1e886bcba112deb91eb68fa930747986da5ca794881939570013e38edd9f8e6f718f7d202e74a82f41
SSDEEP 24:LLipxh0GY/l1rWR1PmCx9fZjsBX+T6UwcE85fBmI:UBmw6fU1zBmI
TLSH
T1C292EE075E383407DBA10E7D366B18768E3FE26C5FA29C94347410618CF9482D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\GPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

History

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\History
Size 184KB
SHA256 bbc13caa2e50ffa3e696327d70a2b6a21ef5981eeace5df9ad5ebec13038405b
MD5 69222635a9d802cb0478287540350ee3
SHA1 c281eb024700d30ced47bf94720c11489fe83718
SHA512 3d3d3608292be9cb41584651d4488434a2b1561e2a0783a2c024dd4a551298262316d26173cdbb2ab840599effc9ab3e4611a32649ec1f4d55c698e221a260f9
SSDEEP 96:HBKvejzH+bF+UIYysX0fxQp97dEHt/DfLjLqL/XeoibgI4VgNr2jWRk/E0O:HBK6H+bF+UI3iWGVdWN3qL/PVgZQW3j
TLSH
T189041E1E6F243202CDBD913669E645F3987DF03F87236A856C6108B1CEE2652B02D5FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
MD5 4203aba60fd9de5b4232fc624db3f817
SHA1 1f07dfc552d6b509c83c36cb05986007ce29e250
SHA512 6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1
SSDEEP 24:TL33lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TL31DtX5nDOvyKDhU1cSB
TLSH
T15EF2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Preferences
Size 6KB
SHA256 af5225bd8e1618f36df3df098527d8590049a65e0d96f6c1fcbae46e28e9a9ae
MD5 2ae716311dc6e15a98b86f266d4f7f27
SHA1 8b75bf6215faf1e776a6d89c62a82e47fc27208d
SHA512 ea0f266c0a435ec57f3c93c99fa00d38681c753ab2e28a5eec3f1c7a77fae91d151fc6686127d72a9a724cbeeb2f951d8260a63eac5ca92776c96c085582b1f0
SSDEEP 192:st1Y0UbpDfbZ8pat7/S+WiTGFQdRqP+IrK8:st1BQxK2/VcQTmm8
TLSH
T1EED1A7429E28B9774CCBE2197E35BB56E2F9106265C40E88EBFC851C04E66DC234BD0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
MD5 a156bfab7f06800d5287d4616d6f8733
SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
TLSH
T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 463a296f506aa0384144af463be7317525e1bf75f576d77988f4e20fe450dbca
MD5 1cdf37f905d8d39445fa41a244dcfae6
SHA1 a1aeec6834b1d91b83eae3a60f79be91d02a5db6
SHA512 408769e03cd94db85fbdcda29edad5408b1ee10b9cf4682862e01bfe1cd2b9f60908c31d44a9b4c3bc39344a40426b60472985e4b4a0cb9ca6b6f94fef7e26f4
SSDEEP 96:HlAi8Plf/ROoKOpkF5d1eiz7sMaTEv9V5h5pg5+eexp3DQQ8kmYV4ho1j:HzoWG6v9lbxQ8mYz1j
TLSH
T12BD1B5A30529C574AF449BEBDC387ECBD9A6019F98D6490696E6C04806C2EFC11DE4C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 95a0206d128e77b908cc9ed166e2e906f602a1201c2d206e8a8d9b9da306934d
MD5 9fb8c1c707aac4e7d8419cf084d16631
SHA1 23df60e13de4eaa9cb46d4c09dd8fc0c25f197d0
SHA512 c3738bc3ffbc5e5bdc9ac74f2eb72cc9f9e2c452827a1a3785de22957e7d639250d784fad02d61e186bea301e6c52eebd8c6738703d98386ba8f86f3a7dac24e
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
MD5 b581f0ff8f8aa3371ae47b48c95329e8
SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
TLSH
T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SharedStorage

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\SharedStorage
Size 4KB
SHA256 1fe8f6113488865c546d2faa55b21482662ce4be19d4f505eeefa09bc3131489
MD5 b9263bbf24428aaca95d04d04f3aeb6f
SHA1 5346015345f6df766df4bc9b42da076f6fdd440f
SHA512 5bc2978bc96e1347500db552e2a2dfd9e5df25c8e16d3ab57e5519de43cb9c08f5aeefd1a6f6947d7fa253505918763b932f622636fc2a7a429fa72a5b49c7cc
TLSH
T1EE810440534000F1D05407F755D1130C0F07D3D4D5410F0355010041CC51D445C70FC4
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 76266b743305c2ab0cbc4f334f80fe3fe43609ad538cc799ec60e0869f2de8cf
MD5 b73337e8a7631fdbcf1b7cdb1d7fdda0
SHA1 73d9a516d0d5d92f217c3f13d4b07c37dc95c21e
SHA512 2cf4594afb934de32f87f45dac611dfa841b43b3491a1932739e6c9a231197d784fd9174eaeea5e6f4f5c71032f1375c3827326c7760d7413fb458feb22480e2
TLSH
T128B012847B40E53FC4D80E3E83C4C7E06320E203A90115034884CF211FF63F52E408D5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Site Characteristics Database\LOG
Size 313B
SHA256 7c1a7697aa66a4d24c59a8c6b16f5197d045e285be89d421cc14e6e02219e3cf
MD5 1f8856b51b599cbaec2abe715a071512
SHA1 06344d7b4d6b79ea4e59e1191923724b109adac8
SHA512 2d0543bcccdd19042ac167c7185ae7c4ee44faf6e583beb1ce901c717628c876fd45d1b52591434ef8f2f92bc82ada9e8076b667730d14015373a8d8b4fbd600
TLSH
T1CBE02620A5C98637138A04EF1572E30CC666B011FBDD17560F94EE4C698B484B952B00
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Sync Data\LevelDB\000003.log
Size 46B
SHA256 a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a
MD5 90881c9c26f29fca29815a08ba858544
SHA1 06fee974987b91d82c2839a4bb12991fa99e1bdd
SHA512 15f7f8197b4fc46c4c5c2570fb1f6dd73cb125f9ee53dfa67f5a0d944543c5347bdab5cce95e91dd6c948c9023e23c7f9d76cff990e623178c92f8d49150a625
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Sync Data\LevelDB\LOG
Size 287B
SHA256 2d65d72b9ce1c5f06f9b3e3e00524b83626fcadad014c1bf7ce30d3db3a5daa4
MD5 f877c5d407dbbfdd4b8d1ac15286c9ca
SHA1 b9c04eea70291c4f4adc20928a80da914ddd2839
SHA512 0117ba0a4e2cfbf5b3c9f47503817c5553f27ffaeaf57d02bc8bc49cb25922cf3365e2f48bf0c10f3da1676a8150a6cded71600ecc1efd447c52c1f7c03d52fd
TLSH
T107D0C271E5C486360694C5DB4AB5A71DC6B0B855FBCD3BCA4B88ED482887549FA30741
MD5 SHA1 SHA512 TLSH

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Visited Links
Size 128KB
SHA256 f023df3bacfb27ef76779e3deeafb0b95a28d681f28ddfd33ddc62397d8dfb2e
MD5 d775ecc67bed250513cdd98e3182da2f
SHA1 ad5d71f48d3c59cdfbd4143a0ecb6c552704df20
SHA512 dec67715353828beecbc9014532b3d288d5555043633f49b5bed5f1a5c6318b33a59e6c7971ab53d9bb2aa2541a21e07c0f8df34e11a9ccbf130ba16cec348d8
SSDEEP 3:ImtVfN/wlXGPXs4l:IiVSXGP8o
TLSH
T1DBD302454C016841D1A1063C0A840869ACB447411462514923B84C6182A29072541855
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\Web Data
Size 216KB
SHA256 2a7b3bb5ac287c4d5fd81c76626b1e8e15f32f34d2b37738fdc98fa6ad43baaf
MD5 4ebc7325aec489f53e4635ea414d14a5
SHA1 c85641375cd9bd4a26922883598a02e8861a6bec
SHA512 a2ad8a907e9d3405fefc533ef4ae65fcb32615914163af646c6af02a412df1d3a2250d0ec8e04ab5d04b6d8453122d43d97aa3340358fe5e7c748e9e2117fb74
SSDEEP 192:njQLsS6Xuv9PhDnLUMjA03VpQYouZtuQKIqJZWTVTdhsrV0dwe:nEL3CuvrDnwMjA0FpQY5Z0QKIqJE6K
TLSH
T14924440A7B746001EDA6E9721CB080771D3C61AD8F22E6826DB254694DF6853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\shared_proto_db\LOG
Size 285B
SHA256 ffe71832810d4cf6b6d65196658a6c54647b97d7b5fc5a074c4bffd368400d30
MD5 f68c0a5ef24ae88668efc723185954bc
SHA1 0f08e4c065669ee3ca3e1846a2595724cdb4d676
SHA512 01d1fae5b7dc8d2b1ce5b9c0eaeb0e3b5a58bb08eb9e03d11ebd91c98008c435f04c33a3fe2a626e5885e106ce338d4e01dd9210ec537fd6e9ed429d536ed602
TLSH
T120D0C211F8D4846F56AC499B14B6534ACB583456FF9D2A4E0F81ED4C284654ABD20342
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\shared_proto_db\metadata\000003.log
Size 450B
SHA256 c52d7c4202130b3e8d742a8eb35284ba30a8c083288be09fbfce12e4f3563368
MD5 80f1bf7c0f7f7d157a56526c2a4f06de
SHA1 7ca80008ac102760fe8269ff4e8196819c282aac
SHA512 f9b63210ee3172dd1d2a72ed92b3419b51a72daa3ad295bd9c0b6f258cc87dc75f13008aa0bd6ada4dbd6fd193fc53126dfe81b419becba92d032cb15569c64a
TLSH
T1BBF08C2AF320C008D05B527A606AAB1253B4D8119FB8DD0B8C3BA4251F73A141D9B3E0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Default\shared_proto_db\metadata\LOG
Size 303B
SHA256 395607569110073552c85809660fcefad9b7c3640c5cb2a111cacb16e26aca1e
MD5 656ea3e0cdc229731af8e5ef6851d3dc
SHA1 b67717afaf4c3dfe107cc040d56a5e893a17a444
SHA512 619a85af02e7dc908877e5eff86c0e5a541a6d8c46bb23a53f9a7211bd207d6b698ec2e03f56ef4d4a6de61ba612ff1fc59fcc8bec9eeef077078c82431828fa
TLSH
T161E0CD10F894846F4658459704B5538DC7653456FF9D1F4B0F81DD4C584658BB915341
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Last Version
Size 14B
SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
MD5 96fb5f155aee0f8cd88274656c58ca83
SHA1 1fe86d9df188b0f86ae2d8da8f7c1ef663258baf
SHA512 fee0061ef23ef3fc35d050501b47db921f490c2aec2a016304c9f27228d3ecf7df9641fd681d9babd275ffd3dbd20e33e38fa5bf583c2852ffcd4b04bedf015c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Local State
Size 1KB
SHA256 ed8e21c71cc0f72259c8fac9b0af344253829525983d47a463b5c872763ed3d7
MD5 0b6edc366a2aead81deefa56fade5317
SHA1 edae0ab86bd697558ab3fd69b6157b3aefcde562
SHA512 48cf9d43ec8d980db3e85ad39f75be2120e9147e7515b57fb2d1b47fdcfd2bda40f26f7c48fc4716ab7a06f4c72ef7b150706bd146089a16c6281c090f4a0553
TLSH
T10B216572D8B0FBB279965606F652AB8B2D310254A0144F1CA2DD0B2903D79EC577BC37
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\OriginTrials\0.0.1.7\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

crs.pb

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\PKIMetadata\72.0.0.0\crs.pb
Size 284KB
SHA256 340643d368df6700a082071385780ba1d8212f35696137b0a44dd8538fa25ee1
MD5 280a97fbbf2e4b70813f616b487143d5
SHA1 804cd67da601cc1a9c248ee59ecb3585e7a0a625
SHA512 47beb2b1f2bd640d24e7793c313c38b42e3e394be9a4eb88c94ac261c5131a1585b39a2431e39326c9197aea29198fc0f60e1c737d354d71cc0f7e0a57c5cf68
SSDEEP 6144:KKqggR3NpUvYpVW+J2aKH66k8G1nT+uuBw1hhd0piFlXGq9V9t:KWsNpUvC2pIYTsTGG7
TLSH
T1C554CF960F383D12BFD2DEE466CCE93B3D79B6E06A6928162111C4F159927E07D8C42F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\PKIMetadata\72.0.0.0\manifest.json
Size 102B
SHA256 0ed889bea99f74fede865222f4cacca4277c63023db98efa666d42ba1f7f9502
MD5 329ad25b265a82c711c72c02a553a353
SHA1 a9a666d4182caad82edd399fdab141473670c5a7
SHA512 b81005847e76dc513b255b36704dec0ae84c922d23dc152cc42bb3eec9e18cb083e601bb90562b3f3c9b2ac540e801866f59277b9c43c0b97fd3e90b688f26c5
TLSH
T178B01220EC10B4B3000403AC0C6CC3C063372F032C4079180DE59F84E80D9DBE071E29
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\ShaderCache\index
Size 256KB
SHA256 7d64c54c40997b6571b7034bd54999847c2278f8e9e8c00b3fadc26859adc5fe
MD5 eb5e63f752c50f749e87b932c02a772c
SHA1 949022f533d2274eea80e329d42b92d5556a3dde
SHA512 b920e8a9f5998bd7bce9f6769b767724f3908ddcc0e6dd364c2f9093fe0d0105551d8195f2516b9e361e427c7df75eebde5f7e17b321b153e96d77a2ba55557a
SSDEEP 3:LsOllllklkXlOEyill:LsUlPOEyi/
TLSH
T134440401D3540445C71041744144C3401314C1110705C307401541151C117C44F01040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

e7ff11a9-b742-4acc-920c-bbaefa3acd9f.tmp

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\e7ff11a9-b742-4acc-920c-bbaefa3acd9f.tmp
Size 4KB
SHA256 258d6c89204f1d49b70446cb07e562d83c98496067648bced75eafedcdbc68dd
MD5 e308c385b94c280d78c80976a1e6d433
SHA1 f4ba593059b3d6c57c960a7cdf72b0b51e177afe
SHA512 704af86781ffc4e0a9ab4a6ac496e6c817f196ccd7b5ffaf1cdaeb8b9d8051cdc35b22ace89a3d79fe6b9e0bf7379a756ed3a86cbaa9bfb5acabb06faa2ed917
SSDEEP 96:zu0z3NkCE4fevALa/pG8Frh/cInURLl8DotoN5fQtDqBlBebJ6S4ZR60ZriAlxa:z9z3Nb28aoiDUaI16lBA86UWz
TLSH
T16E919532A870EA775DF2DA05B9463F07B6B14122A0912FA8DAEC0F1D01D739C1392C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f2f06d5b-9eef-4b34-8b08-adf4ca303dbe.tmp

Path C:\Users\Admin\AppData\Local\com.erone.arcana\EBWebView\f2f06d5b-9eef-4b34-8b08-adf4ca303dbe.tmp
Size 2KB
SHA256 beb92609a96679aec880d1106c54af7ee84ed21572debba6b9f4c564481f445a
MD5 1c1778cddc501255605bf55319ca987a
SHA1 c464b3a1f1d5ab2d4a2d670cd3b5823c333211ea
SHA512 64425a77e1947893ebaefd0925a146c8681ffd05186830deb45213c1569489f2451f375dfaf8bb05645f310ca623db221cc04d4d812bcd953f37365f491efe85
TLSH
T1DA51C772AC64FB7799E39704BD4A3F13E932025195621F6096ED0F1C02DB69C2796C3B
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1676-68-0x00007FFC05150000-0x00007FFC05151000-memory.dmp

Download

memory/1676-398-0x000001DB94330000-0x000001DB94360000-memory.dmp

Download

memory/1676-69-0x00007FFC03E80000-0x00007FFC03E81000-memory.dmp

Download

memory/1780-682-0x00000296E8990000-0x00000296E8991000-memory.dmp

Download

memory/1780-688-0x00000296E8990000-0x00000296E8991000-memory.dmp

Download

memory/1780-690-0x00000296E8990000-0x00000296E8991000-memory.dmp

Download

memory/1780-691-0x00000296E8990000-0x00000296E8991000-memory.dmp

Download

memory/1780-681-0x00000296E8990000-0x00000296E8991000-memory.dmp

Download

memory/1780-692-0x00000296E8990000-0x00000296E8991000-memory.dmp

Download

memory/1780-683-0x00000296E8990000-0x00000296E8991000-memory.dmp

Download

memory/1780-687-0x00000296E8990000-0x00000296E8991000-memory.dmp

Download

memory/1780-689-0x00000296E8990000-0x00000296E8991000-memory.dmp

Download

memory/1780-693-0x00000296E8990000-0x00000296E8991000-memory.dmp

Download

memory/1872-362-0x00007FF7E7C30000-0x00007FF7E87E5000-memory.dmp

Download

memory/2096-628-0x0000014A02D30000-0x0000014A02D60000-memory.dmp

Download

memory/3080-670-0x00000169DF7E0000-0x00000169DF810000-memory.dmp

Download

memory/4136-568-0x000001FC04CD0000-0x000001FC04D00000-memory.dmp

Download

memory/4216-26-0x00007FFC03640000-0x00007FFC03641000-memory.dmp

Download

memory/4412-140-0x00007FFC03640000-0x00007FFC03641000-memory.dmp

Download

memory/4936-261-0x00007FF782390000-0x00007FF782F45000-memory.dmp

Download

memory/4992-709-0x0000024002D30000-0x0000024002D60000-memory.dmp

Download