aed96a9a040a00babf483d4e8cec30122e988e829baee0092b8b8dfa5d82f779

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.exe
Size 1.8MB
Sample260802-wt4h5adq71
SHA256 aed96a9a040a00babf483d4e8cec30122e988e829baee0092b8b8dfa5d82f779
MD5 c8bb02cba8cc46b694971fe6fbcc17d9
SHA1 3266605dc167667c4a120e07f40aa442de535180
SHA512 a5c843e0f05684bfd3cda3792d3edd520e305e881125fea0fc4ef6d162cb616365caa676006ceeba6238577a0693591285a38ea499d17727cf17b284ec3cce8a
SSDEEP 24576:N8kwz8sj6arKdEs9vkoA0y42y3dwCy+nIo1:NFE88drgzrwCVI
TLSH
T1D5954B07BCE158B9C4AA92328A7691527A31BC490F3123DB3F94B77C2F727D06A79744
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 25 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
2948	msedge.exe
4252	msedge.exe
3328	msedge.exe
3344	msedge.exe
2060	msedge.exe
3400	msedge.exe
4860	msedge.exe
2864	msedge.exe
1560	msedge.exe
2280	identity_helper.exe
3504	identity_helper.exe
1988	msedge.exe
5192	msedge.exe
2552	msedge.exe
3812	msedge.exe
5144	msedge.exe
4148	msedge.exe
4800	msedge.exe
5520	msedge.exe
2800	msedge.exe
1408	msedge.exe
3620	msedge.exe
5208	msedge.exe
4856	msedge.exe
2424	msedge.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3328	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134301680356798761"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{0169BA37-C51B-44F4-9F44-0E50B49D9C5A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5192	msedge.exe
5192	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of WriteProcessMemory 55 IoCs

description	pid	Process	procid_target
PID 4588 wrote to memory of 4252	4588	sample.exe	89
PID 4252 wrote to memory of 5248	4252	msedge.exe	91
PID 4252 wrote to memory of 2552	4252	msedge.exe	92
PID 4252 wrote to memory of 3328	4252	msedge.exe	93
PID 4252 wrote to memory of 2552	4252	msedge.exe	92
PID 4252 wrote to memory of 2552	4252	msedge.exe	92
PID 4252 wrote to memory of 5520	4252	msedge.exe	94
PID 4252 wrote to memory of 5520	4252	msedge.exe	94
PID 4252 wrote to memory of 4860	4252	msedge.exe	95
PID 4252 wrote to memory of 2800	4252	msedge.exe	96
PID 4252 wrote to memory of 4860	4252	msedge.exe	95
PID 4252 wrote to memory of 4860	4252	msedge.exe	95
PID 4252 wrote to memory of 2800	4252	msedge.exe	96
PID 4252 wrote to memory of 2800	4252	msedge.exe	96
PID 4252 wrote to memory of 5208	4252	msedge.exe	97
PID 4252 wrote to memory of 4148	4252	msedge.exe	98
PID 4252 wrote to memory of 2060	4252	msedge.exe	100
PID 4252 wrote to memory of 1560	4252	msedge.exe	99
PID 4252 wrote to memory of 5208	4252	msedge.exe	97
PID 4252 wrote to memory of 5208	4252	msedge.exe	97
PID 4252 wrote to memory of 2864	4252	msedge.exe	103
PID 4252 wrote to memory of 3620	4252	msedge.exe	102
PID 4252 wrote to memory of 5144	4252	msedge.exe	101
PID 4252 wrote to memory of 1408	4252	msedge.exe	104
PID 4252 wrote to memory of 4148	4252	msedge.exe	98
PID 4252 wrote to memory of 4148	4252	msedge.exe	98
PID 4252 wrote to memory of 2060	4252	msedge.exe	100
PID 4252 wrote to memory of 2060	4252	msedge.exe	100
PID 4252 wrote to memory of 1560	4252	msedge.exe	99
PID 4252 wrote to memory of 1560	4252	msedge.exe	99
PID 4252 wrote to memory of 2864	4252	msedge.exe	103
PID 4252 wrote to memory of 2864	4252	msedge.exe	103
PID 4252 wrote to memory of 3620	4252	msedge.exe	102
PID 4252 wrote to memory of 3620	4252	msedge.exe	102
PID 4252 wrote to memory of 5144	4252	msedge.exe	101
PID 4252 wrote to memory of 5144	4252	msedge.exe	101
PID 4252 wrote to memory of 3344	4252	msedge.exe	105
PID 4252 wrote to memory of 3812	4252	msedge.exe	106
PID 4252 wrote to memory of 1408	4252	msedge.exe	104
PID 4252 wrote to memory of 1408	4252	msedge.exe	104
PID 4252 wrote to memory of 3344	4252	msedge.exe	105
PID 4252 wrote to memory of 3344	4252	msedge.exe	105
PID 4252 wrote to memory of 3812	4252	msedge.exe	106
PID 4252 wrote to memory of 3812	4252	msedge.exe	106
PID 4252 wrote to memory of 2424	4252	msedge.exe	107
PID 4252 wrote to memory of 4856	4252	msedge.exe	108
PID 4252 wrote to memory of 2424	4252	msedge.exe	107
PID 4252 wrote to memory of 4856	4252	msedge.exe	108
PID 4252 wrote to memory of 3504	4252	msedge.exe	110
PID 4252 wrote to memory of 2948	4252	msedge.exe	112
PID 4252 wrote to memory of 4800	4252	msedge.exe	113
PID 4252 wrote to memory of 3400	4252	msedge.exe	114
PID 4252 wrote to memory of 1988	4252	msedge.exe	115
PID 4252 wrote to memory of 1988	4252	msedge.exe	115
PID 4252 wrote to memory of 5192	4252	msedge.exe	117

C:\Users\Admin\AppData\Local\Temp\sample.exe
"C:\Users\Admin\AppData\Local\Temp\sample.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --app=file:///C:/Users/Admin/AppData/Local/AdBonum/PromptMakerStudioDesktopV3/App/index.html --user-data-dir=C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile --no-first-run --no-default-browser-check --disable-background-mode --disable-extensions --disable-sync --disable-component-update --disable-session-crashed-bubble --disable-features=msEdgeSidebarV2,msEdgeSidebar,EdgeCollections,msEdgeShoppingAssistant --start-maximized
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:4252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x270,0x274,0x278,0x26c,0x2d8,0x7ffc6abdc188,0x7ffc6abdc194,0x7ffc6abdc1a0
    3⤵
    PID:5248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1548,i,4658014825397149513,6821373220018190523,262144 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:2
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:2552
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1648,i,11876591633619877644,4057224985697470288,524288 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:11
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    - System Time Discovery
    PID:3328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,8811696654561982401,7124887159224336712,524288 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:13
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:5520
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3520,i,4484522851327852369,10002877868024282480,2097152 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:4860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3524,i,13287806561544226069,3297600343585043012,2097152 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:2800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,16533704685905060141,4062792058517523261,2097152 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:9
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:5208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4272,i,13363753254506351709,5871140692861747995,2097152 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:1
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:4148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4224,i,3128383758557408793,5983342944132231496,2097152 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:1
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:1560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4288,i,14703498831014593414,8426111801802633058,2097152 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:9
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:2060
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4304,i,3343734465801577257,4370699965693574487,2097152 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:1
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:5144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4260,i,1046800908352407378,16647788134706455800,2097152 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:9
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:3620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,8955800757912484981,2233413337009741043,2097152 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:1
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:2864
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4332,i,7661874231871956130,4826878290295566394,2097152 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:1
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:1408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=4328,i,13390006271221697271,7736861235539855642,2097152 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:9
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:3344
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4316,i,7458478044987385776,8857548349221407679,2097152 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:9
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:3812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4916,i,3628436698014897135,194793990837367572,524288 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:14
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:2424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,11789205339653411081,16819068548922189612,524288 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:14
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:4856
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6880,i,14944270440528425643,15071519456962789001,524288 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=6888 /prefetch:14
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:2280
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6880,i,14944270440528425643,15071519456962789001,524288 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=6888 /prefetch:14
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:3504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,290800726250078838,6412300255217943755,524288 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:14
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:2948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,17339872908696565403,7757603175603024314,524288 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:14
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:4800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,6344614396810100813,16436754559296579892,524288 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:3400
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6552,i,10755581220770457606,490005226770918001,524288 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:14
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:1988
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile" --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7144,i,12753692500372027683,9011525531094636611,262144 --field-trial-handle=2100,i,12866614818636277103,13351813000187724153,262144 --disable-features=EdgeCollections,msEdgeShoppingAssistant,msEdgeSidebar,msEdgeSidebarV2 --variations-seed-version --mojo-platform-channel-handle=616 /prefetch:10
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    - Suspicious behavior: EnumeratesProcesses
    PID:5192

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

index.html

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\App\index.html
Size 56KB
SHA256 64fa6f3780d0fa5b7294d15d270f4319b7d1ac69e862c0b9cde5ada8c374d990
MD5 24e75b0f97e98225d6ba2a6bf79432b2
SHA1 78bbecf915102b2d2d9aaddba636ce3ac0148b4b
SHA512 768cdae4cb2e6833b8fcbd224fa3f08d71a0fedf289d207683aa68ccc3a32d08de5fce78a3f922a7d38f5c07a78dc1d382b25a02f9d063d5f235f65351f03a0e
SSDEEP 768:TdplbfF9SRXePwx3YVZej3jj6Ptbz8+nwajyTJa5fWyBRW4mjhPPQGHaU5pNvr6E:TblbPEXePwxIVUAnljyTJa50hhHZvkU
TLSH
T1C6433B17F1F2022765B740697B970B0BB3B89103F504EC287EDC55888F8EC5999BB66E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Crashpad\settings.dat
Size 280B
SHA256 1c0796f50695302da6c8ebb05b2642f043a4d384b674266b23c816f4a9c1ac9b
MD5 f9851f7b6cd723e6f5e0b516655a890b
SHA1 ae5abad1cde5fa639d954f1a9e8f488693a2bbf2
SHA512 f4d2d52ec69149f791f6bde379fe22ef3d387d6f6d34f34f799f40449b8a5ac66194ea347fbf7f7798e9246490f7a7d5194d6e11e3cdbe65e0f22dda26d5e15b
TLSH
T151D0228BF330ACB0CC288033AC3202008E80CF888C3233B00220E8CE0E80000C0AB0A0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Crashpad\settings.dat
Size 280B
SHA256 117750b661a035bb0091545c2ed280da943fa0d9b2ddae0cc792c9b49623a971
MD5 b28128e49a84ca875576c27d1795a713
SHA1 8974de63f84d66fa7bb5a6c2055e02e2c920f679
SHA512 c888009937b57affa95aa964c11ec35efa0b3dc5120057eabeff2cdcf279b9e0a596cc48e3ef8d6abcfab758e7addcaf945c5f486f1424015c77f8f8f7a3e67f
MD5 SHA1 SHA512

Submit Download

33849c42-d8bd-4da9-85b4-25788b4aa589.tmp

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\33849c42-d8bd-4da9-85b4-25788b4aa589.tmp
Size 24KB
SHA256 144b44e7c6d046674ac25403e828303a62a81c36daa05760c43e7a9d9a5fe966
MD5 d2f09aa76d1ff98b250be957251be98a
SHA1 1a370e1d7e549eebe4c4a6f0604bca00016ab50a
SHA512 be4549d2fa14d9eb4b0ea8154c4362a612f7ff465629530015ab8ffdf9f71e029a486f46ffab61aa8d0709a98a12e47a06e0b17072351b904168e0df594d2722
SSDEEP 768:IHkQCrWDflfzf8F1+UoAYDCx9Tuqh0VfUC9xbog/OVQ0JRsro070w6:IHkQCrWDflfzfu1jaxmR30E
TLSH
T160B2E92F204CCB7F5F804A9D9C557FA76EA801CB96588D504BFA994C03C77EB921A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 f7c94868c45e115272013f3ce456fb186f908bb60f83762ed96910772aa803d1
MD5 ade7bc3e709b9b8fb8743ddd67da262e
SHA1 14259f1b48021a5f65571f82a6bdb9d4ca89e0a4
SHA512 50f138da1ea6898e0c0274b06a143ea476895039bf50f38c6b07962e0f076ebe841a68130132677a92c112ee29c0e8a9fd518fa519d345f7c7c2b3d4c33740c2
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\Code Cache\js\index-dir\the-real-index
Size 384B
SHA256 4fe213d9909d71467a498b5105256f14201e8a54037e12dd57c053234fe08205
MD5 5daab06730ea1a628d0afacc83e772da
SHA1 ee02e6617139aebaf60f63c279b5a5f633d99648
SHA512 a9881698e5ce92038ab16a807fa9819c2c0d1d3ec8b1bf1225f47cd19a9a18f2294147c85f801073ef66030e2c7bcd000f462b053c4b7a6b9bd9589a1dc4896e
TLSH
T1F6E0A79712F12491CF3DD4731614CC68E6494D314D4163AB975264C5852F0FA69404DF
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\DawnGraphiteCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\DawnGraphiteCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\DawnGraphiteCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\Network\Network Persistent State
Size 949B
SHA256 db00a68c47c5eb23c55ae09cc38beb5ca96277921f58c4fc0a5e84964642ef48
MD5 549b2cf26706bedc96c61174e8de5839
SHA1 2aca04f884f367a11b807c13544972fef1e2f693
SHA512 cb7c37bfb31ba4de514ad5c5e192cc91dfc7e4970d1e98e8765a8800eee3ce6c533d20c66fe48710e9e3af23c2b949470ad348ac28ce9f0f8034e93c01974319
TLSH
T133117DF7C7D5856E894516F06A24AE1BCE1D0506422C7D1989D4FF2B93F3475E00255F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\Preferences
Size 9KB
SHA256 3708fd854183fa140a956e6a8bd86cd26c7f71ad3a80fc9317c03ea63d7a701a
MD5 5cea4c5ec6b5512685d9718b887a3c69
SHA1 4c35e561fe54227dd6b2a707188c6e608ff1da10
SHA512 a5067f18082192ddb093cd3b830614a4d7103dc87e5a7dacea2feb3431a27a9af1bd8c60f11b201531be1e2f592e8fdc4b96f9cd807b5081bbef6bf622b781b5
SSDEEP 192:sxR8R53/fyysEnEiuIQpGm/gb+WNVdzSoVJ:sxR873/fyysEnEisd/cV5
TLSH
T13612B752AE386D778DC6E20EBB257B13E2F5502260D40E68E7FCC61C05D6ADD634780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\Preferences
Size 8KB
SHA256 9ffbd0cd1586c2a1a45b8d9e7bf10c122ec9735df06a82e072644ca4ed79a591
MD5 b1852dd38f0e9f16c354be5a339d2c5b
SHA1 f533dcca464b8bfd657b134b03e360c293ddc2a0
SHA512 47c1288c32a71c2608ead1dba42233ecbfb97f144ebc71ada0ca44cc8f7549e82f010ac95cdb05c5017338845a8d1f568f9d2e5cb93e2b792679362b3a4af5da
SSDEEP 192:sxR8R53/fyysEnriuIQpGm/gb+WNVdzZo3J:sxR873/fyysEnrisd/cVm
TLSH
T19012B752AE38697B8DC6D20EBB257B53E2F55021A0D40E68EBFCC51C04D6ADD634780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5957ea.TMP

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\Preferences~RFe5957ea.TMP
Size 8KB
SHA256 fa75a1103cbc7de6f3fc4fc6c6790a4555acd9a530042c6b7f6c61ea87aadff1
MD5 6418a9c1ce3798af3d007f66e171eab7
SHA1 4a7b5c8f2453265d49f2bcaddb6ce222edb5704a
SHA512 19304064127f14f225b0c6e46056bf87fb9317f8c6a30067f274e0ecee209e51db11cc1a35630c13cec26ef74e0a9f39dd753d354cd6f2dbc8a921d1e600cddd
SSDEEP 192:sxR8R53/fyysTnriuIQpGm/gb+WNVdzMo3J:sxR873/fyysTnrisd/cV5
TLSH
T1F202B6526E3869778DCBD20ABB257B13E2F55021A1D41E68EBFCC51C04D6ADD234780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 496bc2fea7f1959f26355adaac3ef6b555d57119e9e4fc1d4c793e1a787f74a3
MD5 03306158b324826f11d0936dbaf5237d
SHA1 435559fbadf6cf314c86da77a19d23db12ed73f0
SHA512 0474d63898a03dd9d273d2fec933993baef7160432450937720bda2013fc9f4b39736b383bee16da154aa5bae5c0cce81991503ca3b3b824b52a99bb1234ea24
TLSH
T12EA0021135D44402CD4BC2B15992555262555C64C51B432757D840EDD95B5E0438105F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595eef.TMP

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\js\index-dir\the-real-index~RFe595eef.TMP
Size 48B
SHA256 3a0bdf006e4970df6e1c42f7eacbd362d9f2b80d6cbaf107c2f173722297c21f
MD5 93753f4656637a9989057f5d513b3bb0
SHA1 f57953359920b2c67469a1f3a03926dc8a6d762a
SHA512 41a64b9bf5722aff6a3c6409526eb2369ec96885d1b44a99560bd5c0b0fb3ad3f830f2353ef4e4e3ebc06d94458bf0562b2143d73e90ed0d005d23d6685fc744
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

b8692d52-4186-40e6-a4aa-37b570f8d3d5.tmp

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\b8692d52-4186-40e6-a4aa-37b570f8d3d5.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59f737.TMP

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Edge Cloud Config\OperationConfig~RFe59f737.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Local State
Size 14KB
SHA256 cd1e79255d3f9cdfee26cfd0422ee58415deb20cfa0f7b6bfd36dcb77195db17
MD5 0ba3366ed083293143252c6d36b1045f
SHA1 c4a43fe3b3e82fcb07b4b5a2807befd2d45be880
SHA512 1ead16c93ba95317e13e2ccfdf344c177c729d50285047881342b81a4abc181395f1b98fdfa082d043ea6bb3662906a8e41d53d0d2a0fb48a36ff78829cd5525
SSDEEP 192:uuk+xasuheOwQxMo8NrYz39pSMooDUud50hMydkqck/LKwBwngWTF8INZslblx48:sZcIj8NrkHfo7BTKwBODNZOCgWy
TLSH
T1FF626E7169386D779EF6DE05FD4922078EF8A177E0E02EA8DADDAB1C00636941306C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Local State
Size 14KB
SHA256 98c615285bd60f8c4c6369777082ce2a63c7ed41bcff87b2ba672dfb3cb1f3fc
MD5 d618ebb5b147c91d6c8968247caeac8e
SHA1 ca2c30814cd75ea2dc62e7bd20df2fcaef3e5eeb
SHA512 95e5dd217d02a81a3ce0531e6eb36a5dc5c8da35780e68343624bee9dc3a64366fc041b84a0e3b0b7842f7075a3285e36dfe90466b9edd1d876b90cd68435b08
SSDEEP 192:uum+xasuheOwQxMo8NrU39pSMooDUud50hMydkqck/LKwBwngWTF8INZslblx4tK:yZcIj8Nr4Hfo7BTKwBODNZOCgWy
TLSH
T1B6627E7169386D779EF5DE05FD4926078EF8A177E0E03EA8DADDAB1C00636941307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Local State
Size 17KB
SHA256 74ac170deb04d05be1211eae18133ec77e64df2ed56a51a8dc41c5add0411686
MD5 7a75f9df9ecc9a9ca19db28fb0151d77
SHA1 fe0a73e915585ee57fe5c8653f3ef110e08eb4b2
SHA512 69dbeb4a44dca78df4f8668eee31635a804051ed6ef43096a60c8bc966345715cfa65d1ffc9fabd9bcec85df7de9435dd1a3d19dd56a2ac8f72e22595263f9c4
SSDEEP 384:ahiFcZcIw8Nl8TUNTUlIVtHfo7BTKwBODNZOCgWy:aIFKw0wgPQBewBKZOZWy
TLSH
T180826B735868997BAEF69F45FE493202CEF891B7D4E07AB4E7DCAA0800635981347C21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Local State
Size 3KB
SHA256 6c0bd9d471c977339f4becf6d365825b8bc1e4073c1c6690cce647fd215a241d
MD5 fa1a42292f8931f23e138eff1a58b876
SHA1 64f34bc0d7f144cc04e6aaec2f1da5eadd04242d
SHA512 dda661fc3e75e79021f649840bb04f88f4b1e4297304a024cc4a10150a2002bf940999e069308d99002011896f1fa74cae3867d27df79075d227b102c1b25149
TLSH
T10781C671A4387C77DBF18F45B54A36038FB4712B95A13EA4EAD9121C04E7AAC2305C36
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Local State
Size 4KB
SHA256 bf2539236ecaad3cf5e7ff9634d6114a437d989e452e28d321c078fb22a9a31d
MD5 f9ac12f2a75c111c6d60952bd5ebe02a
SHA1 bb39d63f5f6bd131e167fdb95d66bbe1147c10dd
SHA512 da0347e6744415381ae7ab695e26892003f38b7d82ae794c83494662c8a4ebeac3920219a989ff3b2368ec2a9b260c7279471dd0a1ec8cd37917bb0c4331a01e
SSDEEP 96:gqGNkCQsFfaE39gR358Frh/cInURoDotovCWDeBx4vHRQvAk0eUn3+EmAoq4a:LGNqU391ooDUwlevvAkqca
TLSH
T172A1B771A438BC679FF2DE05B5863603AFB4213BE4A53FA8DAD8190C04E77982345C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Local State
Size 15KB
SHA256 0fdd60c21f9fc01bd4bdbe400efc7ba0d36c54c19ed0a0f1325b60202786010a
MD5 51dff28b2710ea6a7a7bfc641115a234
SHA1 a16d0638dd74edab71cb00fb362eedd4751ce404
SHA512 1eccd4e2c83e3e1f2e8f2d4f9e4eb149a436fde38c4b975310aa9157af85ae82eff2fb1f762e287cdd81c36c1f9e96897c9d26a69ec33f66e9ed5cae39515895
SSDEEP 192:ulk+xasuheOwQxMo8NrYE39pSMooDUud50hMydkqck/LKwBwngWTF8INZslblx48:FZcIj8NrtHfo7BTKwBODNZOCgWy
TLSH
T10E627E7169386D679EF6DD05FD4922078EF8A077F0E02EA8DAEDAB1C00536541307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe590b51.TMP

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\Local State~RFe590b51.TMP
Size 1KB
SHA256 e35000fdd50a104588f32fd0b910afe50719037910582aa9c2ee2ff8339a8477
MD5 2f8c538c3cb196c11b53e362f9f41e29
SHA1 02ac1104bfbfdc00fd3ae94e979067cda74e7fe8
SHA512 1d72d7fde3ae8b756a2f99ac56f15404d266bf95db9831fe256dc531fa527c819616a24b55856989d7d829ec3de294ca653635bb5938bbb80e5909f24bcef918
TLSH
T1633197B1E4683C77EEE1C64AA249BB435D34A17290612E9852ED250C05F36DC7216C3B
MD5 SHA1 SHA512 TLSH

Submit Download

1d10218a-5ee6-4498-be19-793bb060ea19.tmp

Path C:\Users\Admin\AppData\Local\AdBonum\PromptMakerStudioDesktopV3\Profile\extensions_crx_cache\1d10218a-5ee6-4498-be19-793bb060ea19.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 4KB
SHA256 9b39f189a4bd8cac06bb9fcce61e43bacd98ffa36f2477be06bcac46b0f264d5
MD5 579714c6869f1dfdc8925570cc207d0f
SHA1 be6386373a016262fe90d806571f417c0da1c724
SHA512 3ce1649ab2ab1b56b0525d7bed5258f018f54e64ec70b303d94b824786b925eba4bb7e5fe0ff706b9639ba3081feadf1e401515f185a5e829a41561bb78180cc
SSDEEP 48:D1/vdO+/fjk4ZJ9z3YlfdLXuHiyVT8pn8/vdO+/fjk4ZJ9z2YlUgdLXuHiyVT23:DpvJ3I1uTVT81evJ2IUIuTVy
TLSH
T1BD91FF01AFE61E0AF3F7AD7155B22711AA7BFD095B08CA0E018591080D73B18D6F9FA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download