cd20c09ce56e406ca5224e6ed5001e11c9d8ec229edc79397b1ae846ee502fa4

Analysis

user interaction
yes
max time kernel
150s
max time network
155s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
26/04/2026, 04:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
harmless-asset-manager.exe
Size 11.7MB
Sample260426-e4jg9sdt7y
SHA256 cd20c09ce56e406ca5224e6ed5001e11c9d8ec229edc79397b1ae846ee502fa4
MD5 d7c0b5a195b36e125e82a7c479178dc2
SHA1 937b47d64c7789c4f2cb3f64b6eeb83518fa9cce
SHA512 84da48ccc4879b38dd815092a9b12eabd269194565f2bce3ddb85a2a824da5c86cfd067309edc9ca7796b53c10fee2832170f1033fc999876fa735557f5b6a45
SSDEEP 98304:01ftg1eTxh6X/SPXdIZVrTPP6L9HQO7tgrK5fSC/PwHv8sWtbIoEGkeQ7n+V:xqxNsT3SFA8rtbIjBeQb0
TLSH
T114C66B43F78180E9D0AEC174C76B9737BB32F88D4621736B1BE45A212E2AB905F187D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	harmless-asset-manager.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 11 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping848_783260034\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping848_783260034\protocols.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping848_655728269\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping848_655728269\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping848_1210171774\crl-set	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping848_1210171774\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping848_1210171774\manifest.fingerprint	msedgewebview2.exe
File opened for modification	C:\Windows\SystemTemp	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping848_783260034\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping848_655728269\Microsoft.CognitiveServices.Speech.core.dll	msedgewebview2.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1176	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134216514324316349"	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 12 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\Local Settings\MuiCache	MiniSearchHost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\harmless-asset-manager\URL Protocol	harmless-asset-manager.exe
Key created	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\harmless-asset-manager\shell\open	harmless-asset-manager.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\harmless-asset-manager\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\harmless-asset-manager.exe\" \"%1\""	harmless-asset-manager.exe
Key created	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3847269522-1618051987-1942096715-1000\{B57DFDD9-A1BF-4A89-A211-11072DC2E2DA}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\harmless-asset-manager	harmless-asset-manager.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\harmless-asset-manager\ = "URL:com.harmless.asset-manager protocol"	harmless-asset-manager.exe
Key created	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\harmless-asset-manager\DefaultIcon	harmless-asset-manager.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\harmless-asset-manager\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\harmless-asset-manager.exe,0"	harmless-asset-manager.exe
Key created	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\harmless-asset-manager\shell\open\command	harmless-asset-manager.exe
Key created	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\harmless-asset-manager\shell	harmless-asset-manager.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
5616	msedgewebview2.exe
5616	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs

pid	Process
848	msedgewebview2.exe
848	msedgewebview2.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe
Token: SeShutdownPrivilege	2852	chrome.exe
Token: SeCreatePagefilePrivilege	2852	chrome.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
2012	harmless-asset-manager.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe

Suspicious use of SendNotifyMessage 20 IoCs

pid	Process
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe
2852	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4652	MiniSearchHost.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2012 wrote to memory of 848	2012	harmless-asset-manager.exe	80
PID 848 wrote to memory of 1080	848	msedgewebview2.exe	81
PID 848 wrote to memory of 1984	848	msedgewebview2.exe	82
PID 848 wrote to memory of 1984	848	msedgewebview2.exe	82
PID 848 wrote to memory of 1984	848	msedgewebview2.exe	82
PID 848 wrote to memory of 1636	848	msedgewebview2.exe	83
PID 848 wrote to memory of 3064	848	msedgewebview2.exe	84
PID 848 wrote to memory of 3064	848	msedgewebview2.exe	84
PID 848 wrote to memory of 1116	848	msedgewebview2.exe	85
PID 848 wrote to memory of 1116	848	msedgewebview2.exe	85
PID 848 wrote to memory of 1116	848	msedgewebview2.exe	85
PID 848 wrote to memory of 4800	848	msedgewebview2.exe	86
PID 848 wrote to memory of 4800	848	msedgewebview2.exe	86
PID 848 wrote to memory of 4800	848	msedgewebview2.exe	86
PID 2852 wrote to memory of 3920	2852	chrome.exe	89
PID 2852 wrote to memory of 3288	2852	chrome.exe	90
PID 2852 wrote to memory of 3288	2852	chrome.exe	90
PID 2852 wrote to memory of 1176	2852	chrome.exe	91
PID 2852 wrote to memory of 4972	2852	chrome.exe	92
PID 2852 wrote to memory of 4972	2852	chrome.exe	92
PID 2852 wrote to memory of 3376	2852	chrome.exe	93
PID 2852 wrote to memory of 3376	2852	chrome.exe	93
PID 2852 wrote to memory of 1540	2852	chrome.exe	94
PID 2852 wrote to memory of 1540	2852	chrome.exe	94
PID 2852 wrote to memory of 760	2852	chrome.exe	95
PID 2852 wrote to memory of 760	2852	chrome.exe	95
PID 2852 wrote to memory of 3980	2852	chrome.exe	98
PID 2852 wrote to memory of 3980	2852	chrome.exe	98
PID 2852 wrote to memory of 388	2852	chrome.exe	99
PID 2852 wrote to memory of 388	2852	chrome.exe	99
PID 2852 wrote to memory of 4940	2852	chrome.exe	100
PID 2852 wrote to memory of 568	2852	chrome.exe	102
PID 2852 wrote to memory of 568	2852	chrome.exe	102
PID 2852 wrote to memory of 5096	2852	chrome.exe	103
PID 2852 wrote to memory of 5096	2852	chrome.exe	103
PID 2852 wrote to memory of 3084	2852	chrome.exe	104
PID 2852 wrote to memory of 3976	2852	chrome.exe	105
PID 2852 wrote to memory of 2272	2852	chrome.exe	106
PID 2852 wrote to memory of 5172	2852	chrome.exe	108
PID 2852 wrote to memory of 5172	2852	chrome.exe	108
PID 2852 wrote to memory of 5344	2852	chrome.exe	109
PID 2852 wrote to memory of 5344	2852	chrome.exe	109
PID 2852 wrote to memory of 5444	2852	chrome.exe	110
PID 2852 wrote to memory of 5444	2852	chrome.exe	110
PID 2852 wrote to memory of 5500	2852	chrome.exe	111
PID 2852 wrote to memory of 5500	2852	chrome.exe	111
PID 848 wrote to memory of 5576	848	msedgewebview2.exe	112
PID 848 wrote to memory of 5576	848	msedgewebview2.exe	112
PID 2852 wrote to memory of 5776	2852	chrome.exe	113
PID 2852 wrote to memory of 5776	2852	chrome.exe	113
PID 2852 wrote to memory of 5808	2852	chrome.exe	114
PID 2852 wrote to memory of 5808	2852	chrome.exe	114
PID 2852 wrote to memory of 6020	2852	chrome.exe	115
PID 2852 wrote to memory of 6020	2852	chrome.exe	115
PID 848 wrote to memory of 540	848	msedgewebview2.exe	116
PID 848 wrote to memory of 540	848	msedgewebview2.exe	116
PID 2852 wrote to memory of 5960	2852	chrome.exe	117
PID 2852 wrote to memory of 5960	2852	chrome.exe	117
PID 2852 wrote to memory of 6104	2852	chrome.exe	119
PID 2852 wrote to memory of 6100	2852	chrome.exe	118
PID 2852 wrote to memory of 6100	2852	chrome.exe	118
PID 2852 wrote to memory of 1448	2852	chrome.exe	120
PID 2852 wrote to memory of 1448	2852	chrome.exe	120
PID 848 wrote to memory of 5616	848	msedgewebview2.exe	121

C:\Users\Admin\AppData\Local\Temp\harmless-asset-manager.exe
"C:\Users\Admin\AppData\Local\Temp\harmless-asset-manager.exe"
1⤵
- Checks whether UAC is enabled
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2012
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.4.1 --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=2012.1068.11587308755563457735
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:848
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ffb7cc2b078,0x7ffb7cc2b084,0x7ffb7cc2b090
    3⤵
    PID:1080
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --subproc-heap-profiling --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1680,i,15321339221191186567,4532040154380179866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1708 /prefetch:2
    3⤵
    PID:1984
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --subproc-heap-profiling --always-read-main-dll --field-trial-handle=2016,i,15321339221191186567,4532040154380179866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2024 /prefetch:11
    3⤵
    PID:1636
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --subproc-heap-profiling --always-read-main-dll --field-trial-handle=1712,i,15321339221191186567,4532040154380179866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:13
    3⤵
    PID:3064
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --subproc-heap-profiling --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3540,i,15321339221191186567,4532040154380179866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
    3⤵
    PID:1116
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --subproc-heap-profiling --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3984,i,15321339221191186567,4532040154380179866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4004 /prefetch:1
    3⤵
    PID:4800
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --subproc-heap-profiling --always-read-main-dll --field-trial-handle=4252,i,15321339221191186567,4532040154380179866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:14
    3⤵
    PID:5576
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --subproc-heap-profiling --always-read-main-dll --field-trial-handle=752,i,15321339221191186567,4532040154380179866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:14
    3⤵
    PID:540
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --subproc-heap-profiling --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2184,i,15321339221191186567,4532040154380179866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5616
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.4.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --subproc-heap-profiling --always-read-main-dll --field-trial-handle=4796,i,15321339221191186567,4532040154380179866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
    3⤵
    PID:5528

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4652

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ffb7ae5c728,0x7ffb7ae5c734,0x7ffb7ae5c740
  2⤵
  PID:3920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,7251198945372721239,17195957452175824198,262144 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1976 /prefetch:2
  2⤵
  PID:3288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1520,i,3099887898505995209,9032239287874224021,524288 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2280 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,11946081706766572318,17252161301097444650,524288 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2564 /prefetch:13
  2⤵
  PID:4972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,14159987947108639002,12469442254151108980,2097152 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:3376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3288,i,8217808583154631217,14823555706690483459,2097152 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:1540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4364,i,15817884330115533266,4775370065322188583,2097152 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4388 /prefetch:9
  2⤵
  PID:760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4652,i,9325204559672317003,10710618052715233636,2097152 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:3980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5368,i,6671881912009339020,9027688201764118217,2097152 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5364 /prefetch:1
  2⤵
  PID:388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5816,i,17750263733538589114,8918856758260022539,524288 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3452 /prefetch:14
  2⤵
  PID:4940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3452,i,16408040165931613507,18337249615178989422,2097152 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5908,i,16098616720958985346,2439161034022608451,2097152 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5916,i,11160595183330964547,11569673751634759598,524288 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5964 /prefetch:14
  2⤵
  PID:3084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5956,i,4780511593491250090,3827050764446636809,524288 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5952 /prefetch:14
  2⤵
  PID:3976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5972,i,3552528388378011208,5672246182528011536,524288 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5092 /prefetch:14
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5080,i,3457925895576948952,15788480374295310421,2097152 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4996 /prefetch:1
  2⤵
  PID:5172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5040,i,1363270493300062855,13169587519002188755,2097152 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5092 /prefetch:1
  2⤵
  PID:5344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5404,i,10575873110286359202,3006074769054018126,2097152 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:5444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5056,i,16093579567561003648,18126862827400709032,2097152 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5416 /prefetch:1
  2⤵
  PID:5500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6164,i,16574342297375328058,11529006722502236522,2097152 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6256 /prefetch:1
  2⤵
  PID:5776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6224,i,6686916410334078517,13469043221312610666,2097152 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6176 /prefetch:1
  2⤵
  PID:5808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6508,i,1308327400111616115,17952590879004842962,2097152 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6548 /prefetch:1
  2⤵
  PID:6020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6464,i,16881904045385330430,9454120538724487658,2097152 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6264 /prefetch:1
  2⤵
  PID:5960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6568,i,2412180263348976534,16428986521658938329,524288 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6204 /prefetch:12
  2⤵
  PID:6100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6472,i,10167486333466892365,8870551718594591426,524288 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  - Modifies registry class
  PID:6104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6768,i,7636471827648196313,18354232364297764867,2097152 --field-trial-handle=1980,i,9874154844931475646,13667464618805556098,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6752 /prefetch:1
  2⤵
  PID:1448

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4876

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4764

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 52d3da7c382b67cd3b970591daf0c369f625caf10086a28d1fafb093ba71f86d
MD5 c113b7e943ee5e53db446245c61abbd2
SHA1 93fa42ed725d49ef334cb5d706495aa9e48141bb
SHA512 02185387999dacd85debfa5edfce35e164337ce0402bec71bdb97e165cddf1d401ef4135a6ed6b304d54d469f214149bd25cc64ddbdaf1616eb0bf5498bfd27e
TLSH
T16FE022AACC22AD370CFE1B2960688687F750135B2741895F3A3D970C8FB167B4281A6C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 66KB
SHA256 398d2b08a7b49d285fe53ee0339e49113c125ee67c4a6fe51de27bcf138a2337
MD5 44334eab6971cbf5bda184b100196d0b
SHA1 5cb9b2a90f18ee997115f15666b75bc8ff4d054a
SHA512 fa7e3b85c0df77557d2efd5dc6336c7ff481e59d21c59b4412910c1d96e0515211fa04e8a8a64624897664f922c7792458dca81cc3886b75d5545490c1377cfd
SSDEEP 1536:oLz/FOUDvzeagJ1o+gH88rKWfSvawAzTmmQYku8q7z+6GqK97zln:oPFO2qagIH9tKvaw8mJYyq5Lg7l
TLSH
T15263026F4083DD104A7B0DF89927BC256687437A896E1773CC0BA0F97D29418AE94E9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013
Size 361KB
SHA256 02ff49f4431a46d64078b37db37186bd2f8c65655c9a81086ff174ead4486a18
MD5 10f1c35cb246fe221073a913340b48a8
SHA1 8101001026872a40a3653a4ece0da291b90458a5
SHA512 00031ac8af944b437463ef2027fa381873b6e08f68945248e58007a4ef7a5cec37adff6d14f67fcf7de2f5c85ffd1e723c1f1652d6a014eee66f84bdcaad2a6b
SSDEEP 6144:0OJ1vV2jDLDukAPWOlTbj19gCY/tqglNixzN4LtBDRPqyQK6+fWAyU+8tWncBl5y:0OJv2PLKkAPWATbj1ah/cgnAN4LtBDR8
TLSH
T14974236687ED80BD68F6890D1BCC7FA768CF928FF46EC8D9428E5185C408F7921B7611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 2527a1932d7fe0b8e4b31f26a934fe2d9b595f1f28e47317c1aa3914b912eebf
MD5 505aa2cf3c33229c86dbfebb63b3045c
SHA1 6814981294515eb7c315c2966709c30ee40ffaf9
SHA512 55661fb8071a718323c6afab395157ac36fdc82c52c3d8b1c2e269296055889236c44b35c88eee468b84140ece8556dad93201cc2d45c605a5f17af873133b10
TLSH
T179219531E1CFF02CEF27C970A7968B61B09322094C134ED6C4CC81B836C30BAA5E80B1
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 5dd69bcc8ccf744f76f08556e15f26dda0b09d672fcb8462b8364fe95f9de1f0
MD5 ccba0a1eaa0b8e22559541dc14050142
SHA1 3c7aead961f422a1a7707fa02281ece5ce1e3f96
SHA512 5d971a6cca89418760fe2a294c540b92ea85f949aef02bce37feb8e73981a007bfeaafc5278e626e629ea0cb062b5511327ac5b22956379fb1a37efefd66c56e
SSDEEP 192:DqGxs78MvTaIaMFRAidQIZhI9SKHx1KrCG:DqGxs78MvTaIaMFRAidQIZhI9SKHx1Kl
TLSH
T1D1D18CF7C3E8C62D891156F4AB156E1FCE2D1A14432C3C66C9D8AF4B93E2872D21179E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 efabd84a6cf59a864615a7de1ad0de90aa98b318d0961d260821fc0acaf4a4ea
MD5 112de93ac7d611ca7bc2cac8330769ce
SHA1 41ef95b1a8a3fab11e120824f4517bdac9655a31
SHA512 1c330165ae65b4e140156a5fc9fc722219f671df7786544124388b43b6bfba6139a707a5e2aa89e6c6b35b363eff7ecd89f0819764d3ddc100dfa1c3af27f525
SSDEEP 384:WRDmhPYukQm+rX2Wy2bGtONLxuRP2id6e:UmhPYukqw2yDd2E
TLSH
T1BB62E82FB924297B5CD7D22AF825BB67E3F11132A5842E84EAFC891C25E76CD3117007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 35fd8d71c1b5a4887115a056aa48e334728b4fc81f0668d264783e0a10c6edff
MD5 9b6dd8bfa777efafb90a5a1acdbfec89
SHA1 1e0e7e949a88421a04f4281974c112a8698cb974
SHA512 457011f91859c76b60920264653d0682bdbd548fd0da39bc813e3c6fc83502b27c1dfad83ed4f0233ba04769492a572aa5a5ca3dac7d47fe19a5d19973696a96
SSDEEP 192:tR/Py2fMu/+vkv7spAPRp229AHsb+WNnGI7lre02idceuVyIsnAUge:tR/PYuCAgUX92wGMlrP2idKe
TLSH
T1A742E72EB924797B5CCBD22AFD657BA7E7F61031A1842E84EAFC891C14E75CD211700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 67a66b16a030e2a1f0450000c297822cd01551fc29691748a505aeea727ed7a7
MD5 1b5d585607b038316942a07b9fb40251
SHA1 664f128896fee509e04702291fc3d7472a526305
SHA512 1afcf7dea4b7f18d1f3d4ae35e502e4943a3e17c820d1f59801142433d5e07d92a3355ee3b5c1be8aa42198e6ff00c8c1d039fc731371b0665ee66f72475d498
SSDEEP 192:tRDcBzPy2fMu/+vkv7spAPRp2nKb+y9AHsb+WNnGI7zk1Iw+2yie02idceuVyIsH:tRDmzPYuCAgUX1ay2wGMCI2PP2idK8
TLSH
T1D652E72EB924697B5CDBD21AFC257BA7E3F21031A5842E84EAFC891C24E79CD3117007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 922a6e38ded0ef2c9f5b250cc251c8377f0ec3e4930c312c05f895135100fec8
MD5 8b4254e0b461805d38f0592751bfc367
SHA1 44cd43f5b278b0f4eb07d6f50adf1b300125d152
SHA512 8a2f7a3ecf5d6b499fe9e8d4319677ce8d89633bd7751793ed96028261fdad1c1184d8c12fe84b238aec1faf493599a63c16b3b869dc7bb140c21a67c317e41a
SSDEEP 192:gRDcBzPy2fMu/+Pmqv7spAPRp2nKb+y9AHsb+WNnTIGqaIveNe02idceYVyIsnAq:gRDmzPYuqmmgUX1ay2wTR1keNP2idYe
TLSH
T1DB52E82EB924697B5CDBD21AF8257B57E3F11132A1842E84EAFCC91C24EB9CD311B007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 7361e008e2eb886e96c57422fc1d184a373c2ce46a77989541f78705d91c6dba
MD5 787e0f495ff4a0b44d7c501ba81a37b3
SHA1 15f7274e1a7effade89c44251b9fb92162c82a5f
SHA512 b13f8dececcb9412348887d111cfdeb19630dd4ff2cfead14a3ba0c3cf688d1dfa31d3477ff9085e9f495945cc76821dc9c25c447ea66b07b85db1af2038cab6
SSDEEP 384:WRDmzPYukomgBX4JaEy2bG8ONLpkeUP2idYe:UmzPYuk0j2yn82Y
TLSH
T15952F82EB9246A7B5CDBC216F8257B67E3F11132A5842E84EAFCC91C25EB6CD3117407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 5330bbf7a1078cb9d779fd3801b2763534c56c8c54c558cfe9168d561fe04ddd
MD5 e5bc003d7e9708e8661f0d724d5ce027
SHA1 8813b685cb58bf097281355b9fbff46e7d9d9355
SHA512 f81c9e7fa1257ca444e465f2318ca75f76ce60b34231fdb332aadb9dbe4f370f9a0cb826ff401cff3bd442964a8c9ea855ec17d3b07b913955e23e4ab51220ae
SSDEEP 384:WRDmzPYukQmgrX2JDEy2bG8ONLAvEvP2id6e:UmzPYukMG2yF32E
TLSH
T13652F82FB924297B5CDBD225F825BB67E3F11132A5842E84EAFC891C25EB6CD3117407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 5ab444414a02d4891c7cbb4db3735bec720facb3265bdedc915a68f6beef1cd9
MD5 191a425abbe14997e55d6c34d96395de
SHA1 567b4a799716eb9b3db36abe7163a0aaec1148fd
SHA512 d0c7f690ea61add197a2dbd706250b5de93bf454a11e6e82e25faa2759a36b7158f1e02247d411bcd65234e3d4eb5605c539a97b277b15db18786f9fbc17ab4a
SSDEEP 384:UujAr7KxkXqKf/pUZNCgVLH2Hfgsl+m7pLuLcifmnXODAH+ErU3xWHGWmvhxVtfC:UeAr7KxkXqKf/pUZNCgVLH2Hfgsgm7p/
TLSH
T15D720A677C4C9E770F94CACCD8167A4FADF6024B65E9889583FA982903C5ACF11061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 6596abff581f857ef561df647fcddb92fe1dae3cd6c26fe0eaf06ccd9917dfbe
MD5 7d487ac79a0884b8c6b9b4b714d6e214
SHA1 ebb9d36f50b9e291271d2ce400350b8ae918de00
SHA512 a52315b0ca516fec46851d0c1efcb4440d3bb016a64495dcf03cdb1f8c3ba5feaa61b52198d5cc285f3ab0c5c51ed6a6a7165664282d2564339178936b32fd1c
TLSH
T146B012508451A611C04303B02183048831145F1587051B8553E46AB1D82A1A14014250
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ed2a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ed2a.TMP
Size 96B
SHA256 2acff1e5d49f9affa4acae640411ff8cea20f7d8888373a7d4796350a9f1745e
MD5 bb0529d4c581642a0a9542f6a6853b09
SHA1 6cb3f2dd529d28834ab721a4cf46e5e24ec19d51
SHA512 2ffbf94df43610b4abb32e89a2f8bd9a2fde9d09a8aff2f347c42ac575b80a27c18450a8928c566402c6923d724bbfd3e214036a9f12ec10cd3457ea89dd9547
TLSH
T181B002A9C347AAA2C44203F03A99D7D87160DF35C6031B1297F11A66DC2967955255A1
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 150B
SHA256 407d6849500ec32d877c8806d964800b6e4de04c26d22962c02e8a1d1742422d
MD5 91302c180c2b2e8ce1694241ab01f762
SHA1 c39fd4d4fb66ff72f1fbbdcf5e1a6b588cc6660f
SHA512 071fc184fac5aa25216a4e1a4b6a0670a1fe7d2d125713cfa4749c0c5265517b7b9516ba5aec33290cd417394a5ca813035a889862a63cc2e4139e37e7db5ece
TLSH
T1A9C02BE708208C4F8AB0EFCC3118363DE04BC18C8CE0CCFCD804625A1038D378001578
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a030e.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5a030e.TMP
Size 157B
SHA256 449bc1cd14d696735a7b654e6c6bbc056edae110b612cd76d7b09bc5ecb69f0f
MD5 db66d36185a90981a6be5bf6eaf9547a
SHA1 5f79094bb32cedf0d86920e083edeae994366f4f
SHA512 916d5405d69a7809afc48b638345a7041c4002b2f6da20cc86817206e1becb2de98e7ba6f157b7de7c6a3622a181e804ef672ddb994e2f8e7ec8ce030321b5a2
TLSH
T138C08CE70820088B8B70AAC92128365DE05B8C8C8CD0CCF89805725A20389278100568
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 59f472e2538d6155aba9ad03c963953a8a30af5223f727ac5f3958d46b9b60e4
MD5 061a3a446853ca46fda019d64dbe0387
SHA1 170505cf060952eb2e935a729fbc1e555e83d8b9
SHA512 1082851d1088be3a05a1ef1fb89541b8086b4bfe836aaf9c3b26ff5d2b811921cbacab07029d8314151ef380f9203d780dd780a9f86e088736e00539ab20ee6b
SSDEEP 1536:4LvP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNxZ:gX++J3qUQm08KMWF0bFTcVHr6zgZ
TLSH
T1439302B9991F7D39636ED396A0079CAC8CD3DCCE1510217C30C76F0E14BA3A2A35B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 196KB
SHA256 d6c2e12c4cc3d1b18e5abe871dcd4c7ce5d703d7af6a8a3c956601d2ff028111
MD5 6b188271eabb151a344da1d7bb9f32e6
SHA1 eada787978f23bbf7ff4456f83e1f707d4744a86
SHA512 e34ee05172425645d833537841b5cdfb699fb8998bbf35f3b5cfa3f449c1da39f28e00c70767fc0448dc07f69efc7df926d633bb7be3209da9ea8e9f91ffedfd
SSDEEP 6144:+4Rqe7NvoXMZjC+a+lAFqBMQt++JjcMW2VcVLl+:+4YY8GjC+28MQvOMWj+
TLSH
T1A11413A79F297C79274EDB779033ACAD4CD3CCED2114686C51993F0A25DCB82236A8D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 196KB
SHA256 f35d39b75597d5f6dd726326c8212e9f751e407fb531be676f947115cc081798
MD5 1054da20c6d6c8fdd61a9226f366b4e7
SHA1 5eef99be76bffd6665b53be8c6eb2fe46f9c0556
SHA512 80ff9dcc076b8f306c42fff64a6e573546884d6dd9e1af2b3e210f46e696f5b74e322cd67f32acd7148828d3363f406e885c4f8bda2f8282772d91eea07ad797
SSDEEP 6144:+vRqe7NvoXMZjC+a+lAFqBMQt++JjcMW2VcVLl+:+vYY8GjC+28MQvOMWj+
TLSH
T1881413A79F297C79274DDB769033ACAD4CD3CCED2114686C51992F0A25DCB82236E8D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 4cb4dcc77ccc6db37b9a23593540ac1a047f1b49eb78b1a6cffa180ef379deb3
MD5 61943e8b29400d4e7651c617b22db5e4
SHA1 affb7a5ac4d9a655582ff5f38a296f80e7edd419
SHA512 8e2db5b78d326a5a9868f9e5877449f2096763358fa840791c990cd00e273f1526a5c3888b969664cb1b1a7b8209615e2f432d1495b2cc693af7b2ecd6afc3ca
SSDEEP 1536:KLyP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNGZ:+4++J3qUQm08KMWF0bFTcVHr6z7Z
TLSH
T1629302B9991E7C3963AFD3A6A0079CED8CE3DC8E1514557C31C75F0E14BA392A34B8A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 197KB
SHA256 6e1937d2a620abcd69a09c546b37d750d5cb869f6ba56328e9c3c49da1011451
MD5 2ae2ef7ccf07c612fca10c51c1240651
SHA1 9f3641717d56db8720e5543cc8b49e1629f772e0
SHA512 db849175503e0c69206e77e6cae6ccd9b7333b1331e1e527de9326365ba08ff4baadbffffde768fc14823523ec2ac727982f538313b0ee48915822cd4d9c0ba2
SSDEEP 6144:+PRqe7NvoXMZjC+a+lAFqBMQt++JjcMW2VcVLl+:+PYY8GjC+28MQvOMWj+
TLSH
T1221413B79F296D6E271EDB769023AC5D4CD3CCEF21046C1C61993F0A219C682276F8D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchHoverUnifiedTileModelCache.dat

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
Size 20KB
SHA256 5f27a4b38973aa761cefabd239b31ca0beaedae11254dd8d9d6ae4248c15a774
MD5 0001056ea3a86f72eaa315a8516bcb1a
SHA1 1b4f14467ff1940c80fa5f550ef7b7847bb644f9
SHA512 73a8e3e3798b22cb22050d1ef0b47384cdc3523e2864994db3c62deccdbc5dcb2098f0cf62100798d43e14003444cf1fdfa750b39aa9c54b5115c6d710bfec9a
SSDEEP 384:KJWJbVca12krtuJxpmXmlJVjeQ8RJoorgh1jUdwWV5P1m5m+GDa50m/Sc73a:C+bVcWrql8RJ7rgjjUdwQym+GDa50m/4
TLSH
T14E924A7436F41315F3B29F749EF1A96A653AB866AC00DB5D0162028D0977D92CDB0F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

crl-set

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 b6dd6e9e1042288ffe65789fab81118436239257a52093b97107a98a3d377d63
MD5 3878eb534a7aeb1a0a100ac21d3eb3be
SHA1 a3a82132a191309b437508a35ac1b0cb87b0bbf2
SHA512 61f84c9432455adac68ea0f3e64e3f528576a37a47878279099cc6419d8d5494a63f6c49a53b7a4fdfd27cbef57bf56f644f10c11fca44569228fbdc3975df16
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 665e6c021b87f77c425d882f737fd253e6dcc6edcdeb53fc9748540ae58acf04
MD5 6b6d240cae506b61673d4cbba2303c0a
SHA1 9074ef39398761842ad32749a0210df81196180c
SHA512 507f35f2923cac4c7e9c6ff222947595e51204e004da7e4e8d4cdd140b47fc2789aed5868c6d0246f014148876357cd5ab8de4593fbbfc0e9e0504c9fd95d3bb
TLSH
T1F2D01223F2810534C4652033110269081850CA0B800544006C28862E5A084901902442
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 07bd880c85733e7af254613cc4e6d7f4739ee578c253694caf78653e0266009a
MD5 36e84d4eb855a7f28c678f84a7fc92b7
SHA1 633255add6ee1b85d17c84de154bdd40549eef9f
SHA512 536df44748251a7289242a211cfc94c26fdf1c7f0386b58f78caf8bee418a2e04f1bd00ebc02a5bc8f6f57e6130448b172d19813521db2fc7739d0b549126587
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 9c9064df81437dc90ffb8a8cc1dd8a26e0a4c841299bbf5fd8161c3db308a262
MD5 22ffdd6d5d7c9c6ff96c27959f788888
SHA1 9b2aff4501a8df1e1ea0a9a138e7d01b4d8edddf
SHA512 dd8d4d2a9b1e9d418eeb163c31c4f2581f910b0712f368055c61c44973853065d4f841aab8afec8cf7d00bd51de3bd94d29588222ee13d8c791da5efe9ea6a0d
TLSH
T19FB002296CD6D80AF31897B010CA26A035B55D5A2B031BD683E624FCDC607F64A4B51C
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\DawnGraphiteCache\index
Size 256KB
SHA256 a15874bb860a6da5901086f3b434acadcd44986f33a15bbfcf054507e886269f
MD5 21ff55ef74f469375d945e8c0df7cf09
SHA1 320d5bf4464cdea70c90a19edf18f603968fbe3e
SHA512 9cda0b61667c9ab867cdbf06b8831005cccbd26085ab353122fe51faf38ec45be564f1e424320ad8ddceac138d2fd494aea0d562a5e4991010eea1c1c2b2e53f
SSDEEP 3:LstlNllkll/lS:LsX3lEt
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Network\Network Persistent State
Size 589B
SHA256 f54d2b1e7ad561bd140c1e4feaad0934cca77e83e23dcb416193692e2a38aa40
MD5 ec436240a61e42c787d1a8d7c3eabfec
SHA1 1ca627d667c8ce0be9ced4e1f300daa8dd17768a
SHA512 1afea068195e7338181ef028d83a397da29e8c378170f3ed6c5224bbf614eb1d25fc4a946007cbf977d0e4a96fbf738333cf269784960e8de87d00f383ef2df5
TLSH
T1B4F0ACD1E5E882BE4A4213E536357853C83D0805421C3E339DE9E79947E1034C10214E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe593fbe.TMP

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Network\Network Persistent State~RFe593fbe.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Network\TransportSecurity
Size 355B
SHA256 402e6d265fb6d7c803aaefac38f775df8e74e5676ee2ef065c989398c10597e9
MD5 46857e6cefdc01881ab8cfdee001b6b3
SHA1 a415a233f71a56e24a734a30fac70200d89b58db
SHA512 1f37e1c51827b44c690b7a57ce262ba0b817611f5f315579064949dcd4ddae9ae6829ff5d9455936f4a507970a035b466d686e3450016af8861451d4f133108b
TLSH
T106E0D892617AB47A717C093E2A4878452A3DB434029064E4CE67456D60945F65B13262
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe589d74.TMP

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Network\TransportSecurity~RFe589d74.TMP
Size 355B
SHA256 54fd8bc66a390f334cfe1f303698f8c993e6b2102b6b19de97eddc85bff04ea8
MD5 b87ba05ef0150facb721b05f4dcddd62
SHA1 f6d9bedef8f1988d39220b6fd9734820cd4a6ecd
SHA512 f2b2d368ec29cda1693294279cd2e7cdb67bd70f8e1a7bbbf9323b4d999d3424cf2031ae4948287e77de70d3baf75b4977390055ce4dae05b1b92fdfdaf92875
TLSH
T188E02092727EA47A317C053E2D487D452E3DF834028075E4CF6B457E70945FB5703262
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Preferences
Size 6KB
SHA256 0d5f89e13226213d2a798d901500cc6da3bf94af75b1575c971eff6048c9506e
MD5 1f367f612e60d34b8a1651f915fceed2
SHA1 dee58b8e78e9d1384ef826c56fde5776c1822bb7
SHA512 d1eead0cc092d2c573abc06d4a5d7e666c2dc1b389e81b16766625415383c7e587128330a0014e8181aefb577a4565324901161308cc0d5fc4e898f2726cf5e5
SSDEEP 192:st+203jFj/fMKZ8paIN/S+WiT42wdTPfpMC:st+D3jFj/U9h/VRwsC
TLSH
T1D8E1A7079E286D774CC7F6197D35BB92E6F91162A2D40E58AFFD8A0C09D66CC230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe58ada0.TMP

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Preferences~RFe58ada0.TMP
Size 6KB
SHA256 56cb1c05477c00117a6573f418dad3c739a1002a4eeaeeeeabd75df691ed4b31
MD5 f733b1acafd376c04d843ffee75579d3
SHA1 21071fe9f5280ba54c430f9cc4a50e7db9025280
SHA512 bf5dc40bb89bef4537ca6e931a1f7f3ec658f694db46503e82092ce012f059cf105c5f7cb95a6846b19f96ab59709b6c0d0e34e3f87d338aa3cd7712b6d30435
SSDEEP 192:st+203jFjpfMKZ8paIN/S+WiT42wdTPbpM8:st+D3jFjpU9h/VRww8
TLSH
T14BD1A8075E38AD774CC7E6197E35BB92D6FA1162A2D40E58AFFD861C08D66CC230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State
Size 1KB
SHA256 e6541bf1f8ad5099c1cd80d20d65736840f213b9d6909bf0060da5f6478bc508
MD5 71bed3ccfc02a85dad6eada1541a1fbf
SHA1 989dbc62a556c9487f90156e494b1b6691a6a354
SHA512 cf2e83196e3edea2c8386c4b8c8a743849ca6186d61b1f65453832b060a300aa097b5f15a53496991b30dd3557475b3e499755a7d97cf797b3164c364c74fc59
TLSH
T108316533E4B45F336C92A34576466ADB6D601127C2A05F4862DE4F1C11EB58CE93AD37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State
Size 2KB
SHA256 55b7cada6880d4bf2711176be7366298484ccea01006a5d4c7865eadd5df1c7d
MD5 01c8f6c99cef8f39b4936b77df12e212
SHA1 8b24c4bc1981e0e1284c5e522de4e58f6e506bcc
SHA512 47b2546eeaaf5b41e0e9d7167de865d8b9d85b984bc5b297fb3277af26e3caf432d073b456e710ffbf8d7378bf115454757b92d47e5289c7e9741f029a82cb72
TLSH
T1C551C733B8649B3748E387447D4A3F979D715222CBA12F905ADE0F0C00EB55C2712C2B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State
Size 3KB
SHA256 fec0a2e551e89a87f66f3d3f5868e9ea10572f19df1ade99332bd9904b656b09
MD5 470cfe376f66ae37e50e4b44d92b9b19
SHA1 3a2267a272c37fcbe394f251dd2b337cc5cbbbcf
SHA512 b0da942e47a5e483b993af98ab925e9507fef7e249674e908e252891e3bc291413686714c72a234dce6702c26ea5c641451fc4936c463ea2fa30a352cfc41c76
TLSH
T14171A737A9749A374DE39604BC862B57BAA11127D6D03F98DAED0F0C01DB2982351C1B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State
Size 16KB
SHA256 95075d5018a09fcebe650688b8a251cb1753e04857651be28c079656fc373a88
MD5 25d18aafd76d6f8ba74e7d27194eef17
SHA1 307ebb3bfe7f0d1f1c3989c0dd8e6d07dd2a861e
SHA512 ecf3f492d52f42494201858d9ccb5097161bae488483c09cbecd11361abfd0234f21abf730a9a6ebc056df839866391ed48c28f672536d25eb887e91ca2d6053
SSDEEP 384:zqfRE5BdEZfr0kuh9Rt/nP9yxNbDrjkqiDXuWQt:ORkurqhNsE7DJQt
TLSH
T1A972AF6389309D376CE782093D0A6B47A9F4854A96E26A947CDD2F0C07D77C91363E23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State
Size 16KB
SHA256 da787eebe68e7ae9652aa9bc182d7f0d0124e8f1f563ebb50b9214d87e7b27f7
MD5 5c69746b63a98c47703307e55979dfa0
SHA1 4f0ab59f8ebf3083146425df25536762ea2fbcc2
SHA512 1764809c514d6ec6b5b6945e7e5fb266f2e605831edf64d9d9e47e4f5010fe26f41d16972a35b69a5400c14837c943ace7639b1ad2110a36099df5f5578f972b
SSDEEP 384:zVfRE5BdEZfr0kuh9Rt/nP9yTNb0rjkqiDXuWQt:1RkurqhNsF7DJQt
TLSH
T114729E6389319D376CE78209790A6B47A9B8854A96E22F9478DD2F0C07D77C91363E23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe582882.TMP

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State~RFe582882.TMP
Size 1KB
SHA256 6f85485286e52da934dc9b7d436a578b39777763a8071cde62c182d271c2be88
MD5 e20403c4e2aecac335c1ecac48ff336c
SHA1 2a9364b97ce9238dde32b4d2019d1c913b6239e6
SHA512 8a9f52936d21d13e38ea95e8883753adc1f4cb3d62fc26609374c13048bf52adec4712edc9ecf2ed2037e7397186d4cdb7b74767bd2aee63294e224c662107e2
TLSH
T1A4216533D4F85F326C9292057612BACB2D90522782605F0C62CE0B1C01EB98CD63AC37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping848_1210171774\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping848_655728269\manifest.json
Size 76B
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
TLSH
T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping848_783260034\manifest.fingerprint
Size 66B
SHA256 c236a2ac7741d48e1c56980652331cb3f1f12baf937baf0b280600fbafb143e3
MD5 c28ffa45708f10e3a35143ed2708782f
SHA1 84a03f2615333c9311dbf79d6f58f56b5c009163
SHA512 beac0eacff45a152eb2a50f4d72db2933b8f8ba97e6f0a9f6811abe866fef5c7c83068151915dbdffaccaee5d0cd335d182671f44dbab6da2222266ff8a28ff0
TLSH
T169A022F3F000F02030022F8A80203C00C8A23BA80C8020808000BEE0200322A3A0C820
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping848_783260034\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

memory/848-212-0x0000021A30040000-0x0000021A304AC000-memory.dmp

Download

memory/1116-132-0x00007FFB9AD10000-0x00007FFB9AD11000-memory.dmp

Download

memory/1984-25-0x00007FFB9AD10000-0x00007FFB9AD11000-memory.dmp

Download

memory/1984-229-0x0000027040380000-0x000002704052C000-memory.dmp

Download

memory/5616-752-0x00000267A4530000-0x00000267A4531000-memory.dmp

Download

memory/5616-757-0x00000267A4530000-0x00000267A4531000-memory.dmp

Download

memory/5616-761-0x00000267A4530000-0x00000267A4531000-memory.dmp

Download

memory/5616-759-0x00000267A4530000-0x00000267A4531000-memory.dmp

Download

memory/5616-758-0x00000267A4530000-0x00000267A4531000-memory.dmp

Download

memory/5616-760-0x00000267A4530000-0x00000267A4531000-memory.dmp

Download

memory/5616-763-0x00000267A4530000-0x00000267A4531000-memory.dmp

Download

memory/5616-762-0x00000267A4530000-0x00000267A4531000-memory.dmp

Download

memory/5616-753-0x00000267A4530000-0x00000267A4531000-memory.dmp

Download

memory/5616-751-0x00000267A4530000-0x00000267A4531000-memory.dmp

Download