30ccfb4bf39514f681f171230d78fe5ffb3725ec3bc1ee00f2c3e71b3afa4d11

Analysis

user interaction
yes
max time kernel
2s
max time network
24s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/11/2026, 13:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SolaraV3.exe
Size 19.6MB
Sample261110-qf8ysstwhy
SHA256 30ccfb4bf39514f681f171230d78fe5ffb3725ec3bc1ee00f2c3e71b3afa4d11
MD5 317035e2736d0791f6ff7f9750e1bc15
SHA1 23f914d5877b8e9a0bb6abcb5312943b6a29be5c
SHA512 9d8c5cf4e1e3ad6e74262b9dbb038199035f7ed749192e53f324009da888426133675fa97c0aa40a1f8b3172277d2c0fd5899b544ceb7ac6800496560268a44d
SSDEEP 196608:qsSx9kTwNMdIz7dVDe3SCTUBEfYVw5te8u93eYzmTIeqlst:qDcTwNMdIz7dVDe3SCyVw5seYi0e4st
TLSH
T16727F8607A9B99ACD09AC47483478A720A3130DB0B35B9BF44D496393F6DBF46F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	SolaraV3.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Embeds OpenSSL 1 IoCs

Embeds OpenSSL, may be used to circumvent TLS interception.

resource	yara_rule
behavioral2/files/0x0003000000000434-233.dat	embeds_openssl

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
4120	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3492	SolaraV3.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 3492 wrote to memory of 4120	3492	SolaraV3.exe	90
PID 4120 wrote to memory of 4848	4120	msedgewebview2.exe	91
PID 4120 wrote to memory of 4276	4120	msedgewebview2.exe	92
PID 4120 wrote to memory of 4276	4120	msedgewebview2.exe	92
PID 4120 wrote to memory of 4276	4120	msedgewebview2.exe	92
PID 4120 wrote to memory of 4276	4120	msedgewebview2.exe	92
PID 4120 wrote to memory of 5708	4120	msedgewebview2.exe	93
PID 4120 wrote to memory of 3760	4120	msedgewebview2.exe	94
PID 4120 wrote to memory of 3760	4120	msedgewebview2.exe	94
PID 4120 wrote to memory of 3760	4120	msedgewebview2.exe	94
PID 4120 wrote to memory of 5888	4120	msedgewebview2.exe	95
PID 4120 wrote to memory of 5888	4120	msedgewebview2.exe	95
PID 4120 wrote to memory of 5888	4120	msedgewebview2.exe	95
PID 4120 wrote to memory of 5888	4120	msedgewebview2.exe	95
PID 4120 wrote to memory of 5888	4120	msedgewebview2.exe	95

C:\Users\Admin\AppData\Local\Temp\SolaraV3.exe
"C:\Users\Admin\AppData\Local\Temp\SolaraV3.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:3492
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=3492.5716.2399779187629834047 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4120
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView /prefetch:4 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ff81c7a5fd8,0x7ff81c7a5fe4,0x7ff81c7a5ff0
    3⤵
    PID:4848
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1760 --field-trial-handle=1764,i,11978191606144642273,3843537663296004390,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
    3⤵
    PID:4276
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2156 --field-trial-handle=1764,i,11978191606144642273,3843537663296004390,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
    3⤵
    PID:5708
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2264 --field-trial-handle=1764,i,11978191606144642273,3843537663296004390,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98
    3⤵
    PID:3760
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView" --webview-exe-name=SolaraV3.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3344 --field-trial-handle=1764,i,11978191606144642273,3843537663296004390,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:44a73eecac610e4f54160b0fde5492a4455a6e98 /prefetch:1
    3⤵
    PID:5888

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

DEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\DEBUG.txt
Size 206B
SHA256 b562cb0f2558376de03f7346fcc9acfb41eb611b9ee9a631a9298ca8cb12a3be
MD5 c344c0e3dcc044c31a28d66e0152bfd6
SHA1 aec00afbbd10c12c36b51d083ecbbbbd2ca3ff8e
SHA512 1d58cc95e1823917c851b1434df146c6ae24eae0ab42db4e1721d4c12cb41985ae6aae6cf7bd2e3c842c1303789afbdd1f8ed74e9400db8c402a1ffb1f0eefe0
TLSH
T173D0E910726CE9A253DA61C359795EE05681A4F314644CDC278AC9EEF4149320F9B803
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 767B
SHA256 af0c8524d105671ded36011232e7ddca69bf9bd749a4243e9d6b65058731a8f2
MD5 1aa086edbaf2ea8de14f73743567f13d
SHA1 298ace62840d5d7cf7565adfb4ddd893e1dab7e1
SHA512 7e60345bd01b85941f240013e9297692bcfe228b4d0293c86d13343e0a453554ac21db1d2f968bec1ead6485434c6f2a138c8cc53b9885044396cf6aca30f02e
TLSH
T1ED01BC412A7A02EB4BE054C3423BDDA1C54161B35AB2DECC3283D0E83446E6E8F1BA28
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 2KB
SHA256 f0a2f7d5f5d0c85ac1acae2f84b3e1e964f52f14361ff9896fb9f1b026dd38b0
MD5 f3d9b4492bff6eb26690bb936255b854
SHA1 86a8d1da467c2870b98dc6c6d35af867efc166a0
SHA512 de5f0693bc0af9a2f2fe79eaf7e886de1ec2022137cf1ad4a14994a5170a64c786b07774ea109d210f2344aaecccbf8ca85fba509c9cbeed50d8b5a3a4964cb1
TLSH
T1DC416B15297AD26646E059C3843ECDA18445747B33748DCC7BD2C0ECB512F2A9F2B939
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 2KB
SHA256 f9904e339e7c7fcbad879425696cc5f079fb36a5f6449fa593c834ada8659b9c
MD5 a48cbd6fabb26291c722feb820f4d75a
SHA1 9628a87b8fccb91c156a4dc9ec9ccf840406cbfd
SHA512 f4fcdee12d4beb59b5c103a7d1497389c6128e995f80698a742ce3f62a26740ae75c79a32660fb5a8da8430734821b5cf56b104660e920fad3d53870e763d6fe
TLSH
T140518B15297AD26647E05AC3843ECEA18441347737709ECC7BD2C4ECB516B2A9F1B939
MD5 SHA1 SHA512 TLSH

Submit Download

UIDEBUG.txt

Path C:\Users\Admin\AppData\Local\Temp\bin\UIDEBUG.txt
Size 4KB
SHA256 f77117a5240c71927e270f9e24881bf2245c3af5dea7d570319d62cb6fb470da
MD5 b8828538c214b2c8a6e09dcf9bc9e196
SHA1 6a3cb4a309b1b6df720cbbb3c2074a2cfd2fd73c
SHA512 8a6ab0bf64a5e49459310d3570af4815ceee84bc50e79f549946d1a98cd655110f26451be729f000531fed6889bf099c06a25b66fb371f46973bc10f08e8bdcc
SSDEEP 96:ocG+yoTHYQb98/NqIFRtOvOVDt1ZDEGDMOBumc/WaWz:vG8THYe9A3RNRvNu7Ez
TLSH
T1FB919511387ED62747E00AC384BD8EA4444124BB77719DCCBBD2C8ECB116A2B9F23936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SolaraV3.dll

Path C:\Users\Admin\AppData\Local\Temp\bin\dll\SolaraV3.dll
Size 17.4MB
SHA256 ef0b4e1a6d153b913d36e766d5243481ad7c64bc9f3b75814cb49e26392dceed
MD5 ae39bc307c3321db9b94d87204895687
SHA1 d1362057a6401eb7634dd6e8e6bef101bbf73350
SHA512 31a2539d1d49d71db5302a018e97ca8d26af7a67a05bc4f0bd8a084194de270e151d0f9afcf9e2148081350492cacc9a352317f44351d0a7dea25a62c6ccc7b6
SSDEEP 393216:9QlIAsrKFH6L8arqs+R8/0oVTSh88f3ZX8tcnwn:9QlLsrKli8+qs+2
TLSH
T18E074C9265A640E1C22E8074858A5353F672376B03B417DF766886F52F0378E1E7FBAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

solara-mcp.exe

Path C:\Users\Admin\AppData\Local\Temp\bin\solara-mcp\solara-mcp.exe
Size 398KB
SHA256 2a1be8411d40811117c41bd39762ea8650156fa818def329b886f0f73149811e
MD5 fab5e1294eaf6af9fcde5228875126de
SHA1 c7fb9c799efb3406348a9f7ca48432fd580fd4f3
SHA512 9758e3879959efaeb657aa08fb88f0775a95b92562dc14b097dd02e8e61fb5e99a1000e6e3ae44c41c13dc853b6de5b1837084a0abdac91b6b179bc85aeefe10
SSDEEP 3072:h1vgi/tarz0jZay+3VWpydUpiZIS6eupeIQNM/eqE6Oz2HscRXbfyMm7+YBHcfPt:hUgTQuemeh2hfyv+Gj98OtAbP
TLSH
T1C984F801FF465CA9D05ACC70C30A46639A5538EB1B36FDFF458951283FADAB66F38209
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

14c2ee88-48a9-43ad-bdd3-d480f659abe0.tmp

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\14c2ee88-48a9-43ad-bdd3-d480f659abe0.tmp
Size 3KB
SHA256 b62e42bef053f291533a10d9d5999bce7f5e5f6bc12d2a148a00f92bdcd2d458
MD5 f68b732e2acf21a5a9d612507145f4e4
SHA1 56dc19a216e94d0eda3bc6008300844e9a0d6496
SHA512 a16a9ceed3a28f5254847d9cc680c1925f3b1620673e3e8a62d67f5bbd25eaeb2240f444fa905a29743b0ff2362d05137ea2ef28286181a1fa2f309b6d5dc9dd
TLSH
T19A7184236A70B9375DB2DA09BD863B03ABB59067A5957F98D9EC1F0C01E728C0382C12
MD5 SHA1 SHA512 TLSH

Submit Download

551d9915-866e-41f0-857f-ca06647c4fd8.tmp

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\551d9915-866e-41f0-857f-ca06647c4fd8.tmp
Size 2KB
SHA256 a64fb257ddc682c77f4246cbacc90e5c520fce5e9a006c67f71fe33f976f091d
MD5 6c001920476799a4d25fcc05ecb5541d
SHA1 355abbcb16ee09fe19949bf0e1fac9f05561cdd0
SHA512 dd1245c06afd96e8e9c990b26b5ebd34513e041443149cafc9b02e3a45229eb93593730e5cc444d1c09693f4908729162f84cc06fd8e01d91401d423d9d45abc
TLSH
T16151A5737E20BA7399E287187E4B3B13DE3590A5AA612F50AADD1F4C00E755C1381C32
MD5 SHA1 SHA512 TLSH

Submit Download

5c4b82cc-2f41-4135-9386-220734de15fa.tmp

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\5c4b82cc-2f41-4135-9386-220734de15fa.tmp
Size 3KB
SHA256 353e8b425bd3cc5affc72925d4e6663c70f97a521c4bd214f76a1ac10cec0406
MD5 86c21a8d14ac4faf7b5d45779a7e4c53
SHA1 b221ff98aa4dbd667c73fca80a99381a26d49b30
SHA512 2af0db396349d995374179678dc7763af28078df800f9e228b456392a49b63c9398ae37252b1a2cdd64b1cedaa228e07b8db7898c4cef29e0b24a756fb371e9b
TLSH
T17B6193736A70B9779EE2DA04BD863B07EAB55027E5953F95DAEC0F0C01E729C1381C22
MD5 SHA1 SHA512 TLSH

Submit Download

62c08e18-81f0-4a55-9463-50c37b068666.tmp

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\62c08e18-81f0-4a55-9463-50c37b068666.tmp
Size 15KB
SHA256 80094c96c530921a58bc265371c73726e9a75b736222fe3901e087499baba737
MD5 c6ff6e931b26136805a088f76edfcbe9
SHA1 f628a70832c7d3b5730867d2c325014127c97cac
SHA512 eb42ecf2bd8e14218dfa002a6244e20f81cce329e1ca24dbd16c9c129c6dec1faa32146cbbda7f99a4bdf9fef947b43ae0294493369d06a4d5acd12bcf1b1d2a
SSDEEP 384:R+OBqImmJvGBLx3NaFMJFNNBSxag2pWl/g6r6:ccvGtlNYpSWnO
TLSH
T187729E772D656E632CB7C649BE8A234BCB616293C1D57BD8DDEC5F0E01BB4441392811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 93c6b0d4e402e8d086753a944bac60fdbbafb8b1408f70bb66661374b2fa38c5
MD5 dc00c5b21c6e0e0f55c669ab72398fe6
SHA1 6424492abec80fd766c36fc709cc96b62a17262d
SHA512 f8b3d9ea8b81756c148b5d2ec2d91ed47317b9c1879b227efecad990010177130ee8a96db861080344d2ee5a81435ffa6d8259360b45cd359bc8e711a2e8700c
TLSH
T1BCD012123E910634C0102073014265480500E51B54454000642A865D6A044F01912842
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 a770f157f79ff89f6dd2ced3798b680ddde57994d93c381002996d5809701583
MD5 07a74b10169a979aaa188c26e25f8026
SHA1 dde35cbd741ab1ce2ad70ffb550c1647eb5611e9
SHA512 547d5da3379dcb6536945583961451b7ee4db0fc15cda509e231490e7ab6cf84c5543d90e9a97aa411fd896f826accd5dd45dec860f8d4baf79f6d8cab0c81c3
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 240B
SHA256 c07386c76b4e13ec54d8eab1a39cc66dcb6a53f8c258005d58f15a0555dffaa6
MD5 c1612e68241d24f8a4ca47900eaf0d7a
SHA1 5cd4935f241c6f1fa208debec1de1e7055c829da
SHA512 9c5e6d50ca0198cd7044e320184cc4502398d06c02f669a364c49d9317241db06b65473b883417780f0ba94d7cb418ae7832f48af03c4a5ec552ab3986c90c89
TLSH
T1AED0122081AF820FDF215672C2C97BCB3AB2CA2053378F1304CB247763083B085831E8
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Code Cache\wasm\index-dir\temp-index
Size 48B
SHA256 0287ed157a005692db294f8077ee5fe29ece0badd8a5e1d7ee9d467780194cc5
MD5 806072774b05044461540fd5ef44d57c
SHA1 0dd2f490507fdc16c817a8e64e2802553dcc0d4d
SHA512 d097a623314f4309d40781b3f0fd96a3db4f9028b7ca048107efb59ae600648440ef52de7e15d9fc1de5fe768d1028bb792d182d5b28bc28d525b74e643e9788
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\Preferences
Size 5KB
SHA256 e8539820fff75b39bcb9aaa0a462c6fb704e707dc33a390d8c39017e08f64e06
MD5 f008539b6d61cb0b1466ad38369a7ebc
SHA1 1b3149a4bc49c47456ca776ec17c2c5efef744f5
SHA512 1ba08f2fafd44737f854de42ce687f5cccd49e4d2171ceafabf41f3b65596b7d14a35e77c153453eeeb9c99ff5dc17273c6d3ba4d36eb6ec78d2de3b9dbf95a4
SSDEEP 96:rK/dva/xb9Dk+mldo616Z0Ps7/x+6MhmuecJ7OS1ejeqK+gBp28XM1C7K:ryp8Go6PsV+Fd75QjSjpG6K
TLSH
T1CBC1A6065F24B9BB4CC6E108BE397A57E2F6506165D52E58E7F84A2C04E76CD7307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eab06e3c-c6d4-4e4a-9c37-cc13b5ed7b05.tmp

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\eab06e3c-c6d4-4e4a-9c37-cc13b5ed7b05.tmp
Size 6KB
SHA256 a49e439f898a3d3898426c971d0f1f9b48f72f020466ead841fb2428d1f96c94
MD5 4ffc62872a326ecd6b54c196f8711dab
SHA1 186390b008a5294980d92a520ff5e254d5816a1a
SHA512 f3eba6eae87b090208774715c05ee9f5ad0de293a8a14e1ef7637347ee8b927b814642c8cea30bc0f1d9c44b190c61b16a1cec55c323ada9671c338fc859ad8f
SSDEEP 96:stK/dva/xb9Dk+m5o5h16Z0Ps7/x+6MhmuecJ7OS1ejeqK+gBp28XM1C7K:styp8+onPsV+Fd75QjSjpG6K
TLSH
T18BD1A6025F24B8BB4CC7E108BE39BA57E2F5606164D51E58EBF84A1C04E76CD630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.solara.v3\EBWebView\Local State
Size 1KB
SHA256 ec488f2f320e59f08cbf958d90439550ab1f0051d48c0139610951d507e3f188
MD5 6e242ece60d6e05872b045247548da92
SHA1 7fe424810d782d787ef0763234a4f973b3cce119
SHA512 32bf47a4b53109d8f1e30590076c6c82f92d80db5f37d931a07531a2d8b7fce32feae1cff5d9fc68b1d40c14d777764c681516bf32c2c50c02ed096ca17b612f
TLSH
T1B32168F3B7606F31BC81A71626423657AD3050AB52544F0065DE4F9D01F715C9296C32
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3492-251-0x00007FF8192D0000-0x00007FF81A44D000-memory.dmp

Download

memory/4276-30-0x00007FF83DA60000-0x00007FF83DA61000-memory.dmp

Download

memory/5888-109-0x00007FF83DA60000-0x00007FF83DA61000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads