hxxps://harmlesscreations[.]com/

Analysis

user interaction
yes
max time kernel
173s
max time network
176s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 04:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://harmlesscreations.com/
Sample260905-e88b7atvby

Score

10^/10

defense_evasion discovery trojan

Malware Config

Signatures

Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs

description	pid	Process	procid_target
PID 2372 created 3140	2372	Harmless Asset Manager_3.8.0_x64-setup.exe	56

Downloads MZ/PE file 1 IoCs

flow	pid	Process
63	1736	msedge.exe

Executes dropped EXE 2 IoCs

pid	Process
2372	Harmless Asset Manager_3.8.0_x64-setup.exe
1184	harmless-asset-manager.exe

Loads dropped DLL 7 IoCs

pid	Process
2372	Harmless Asset Manager_3.8.0_x64-setup.exe
2372	Harmless Asset Manager_3.8.0_x64-setup.exe
2372	Harmless Asset Manager_3.8.0_x64-setup.exe
2372	Harmless Asset Manager_3.8.0_x64-setup.exe
2372	Harmless Asset Manager_3.8.0_x64-setup.exe
2372	Harmless Asset Manager_3.8.0_x64-setup.exe
2372	Harmless Asset Manager_3.8.0_x64-setup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	harmless-asset-manager.exe

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
113	discord.com
114	discord.com
116	discord.com

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 61 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_409543254\crl-set	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-as.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-eu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-kn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-uk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-de-ch-1901.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-gu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-mr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-cy.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-fr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-ka.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-sk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-de-1901.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-hu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-lv.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-hr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-lt.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-sl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-hy.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-ml.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_227495129\protocols.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-af.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-la.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-en-gb.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-cs.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_227495129\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-sq.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-und-ethi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-sv.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-bn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-nb.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-te.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-de-1996.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-mul-ethi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-ta.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-pt.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-be.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-da.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-et.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-gl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-nl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_409543254\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-hi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-tk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_227495129\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_409543254\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-el.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-es.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-it.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-or.hyb	msedgewebview2.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Harmless Asset Manager_3.8.0_x64-setup.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1736	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134330566777139317"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe

Modifies registry class 20 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\harmless-asset-manager\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Harmless Asset Manager\\harmless-asset-manager.exe\" \"%1\""	Harmless Asset Manager_3.8.0_x64-setup.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{4CE7A29D-C08A-4077-A3EA-F8543A744651}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\harmless-asset-manager\ = "URL:com.harmless.asset-manager protocol"	Harmless Asset Manager_3.8.0_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\harmless-asset-manager\DefaultIcon	Harmless Asset Manager_3.8.0_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\harmless-asset-manager\shell	Harmless Asset Manager_3.8.0_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\harmless-asset-manager\DefaultIcon	harmless-asset-manager.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\harmless-asset-manager\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Harmless Asset Manager\\harmless-asset-manager.exe,0"	harmless-asset-manager.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{21E28253-C120-4AC0-A168-997D8910339C}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\harmless-asset-manager\URL Protocol	harmless-asset-manager.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\harmless-asset-manager\shell\open\command	harmless-asset-manager.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\harmless-asset-manager\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Harmless Asset Manager\\harmless-asset-manager.exe\" \"%1\""	harmless-asset-manager.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\harmless-asset-manager	harmless-asset-manager.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\harmless-asset-manager\ = "URL:com.harmless.asset-manager protocol"	harmless-asset-manager.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\harmless-asset-manager\URL Protocol	Harmless Asset Manager_3.8.0_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\harmless-asset-manager\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\Harmless Asset Manager\\harmless-asset-manager.exe\",0"	Harmless Asset Manager_3.8.0_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\harmless-asset-manager\shell\open\command	Harmless Asset Manager_3.8.0_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\harmless-asset-manager\shell\open	Harmless Asset Manager_3.8.0_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\harmless-asset-manager	Harmless Asset Manager_3.8.0_x64-setup.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2372	Harmless Asset Manager_3.8.0_x64-setup.exe
2372	Harmless Asset Manager_3.8.0_x64-setup.exe
6628	msedge.exe
6628	msedge.exe
7084	msedgewebview2.exe
7084	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
3900	msedgewebview2.exe
3900	msedgewebview2.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe

Suspicious use of FindShellTrayWindow 52 IoCs

pid	Process
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
1184	harmless-asset-manager.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2748 wrote to memory of 1828	2748	msedge.exe	86
PID 2748 wrote to memory of 1736	2748	msedge.exe	87
PID 2748 wrote to memory of 1152	2748	msedge.exe	88
PID 2748 wrote to memory of 1152	2748	msedge.exe	88
PID 2748 wrote to memory of 1152	2748	msedge.exe	88
PID 2748 wrote to memory of 2408	2748	msedge.exe	90
PID 2748 wrote to memory of 2408	2748	msedge.exe	90
PID 2748 wrote to memory of 4264	2748	msedge.exe	91
PID 2748 wrote to memory of 4264	2748	msedge.exe	91
PID 2748 wrote to memory of 4264	2748	msedge.exe	91
PID 2748 wrote to memory of 980	2748	msedge.exe	92
PID 2748 wrote to memory of 980	2748	msedge.exe	92
PID 2748 wrote to memory of 980	2748	msedge.exe	92
PID 2748 wrote to memory of 116	2748	msedge.exe	93
PID 2748 wrote to memory of 1232	2748	msedge.exe	94
PID 2748 wrote to memory of 116	2748	msedge.exe	93
PID 2748 wrote to memory of 116	2748	msedge.exe	93
PID 2748 wrote to memory of 1232	2748	msedge.exe	94
PID 2748 wrote to memory of 1232	2748	msedge.exe	94
PID 2748 wrote to memory of 1616	2748	msedge.exe	98
PID 2748 wrote to memory of 4664	2748	msedge.exe	99
PID 2748 wrote to memory of 1616	2748	msedge.exe	98
PID 2748 wrote to memory of 4664	2748	msedge.exe	99
PID 2748 wrote to memory of 3204	2748	msedge.exe	101
PID 2748 wrote to memory of 1104	2748	msedge.exe	111
PID 2748 wrote to memory of 2056	2748	msedge.exe	112
PID 2748 wrote to memory of 1104	2748	msedge.exe	111
PID 2748 wrote to memory of 2056	2748	msedge.exe	112
PID 2748 wrote to memory of 2056	2748	msedge.exe	112
PID 2748 wrote to memory of 1584	2748	msedge.exe	113
PID 2748 wrote to memory of 1916	2748	msedge.exe	116
PID 2748 wrote to memory of 4700	2748	msedge.exe	117
PID 2748 wrote to memory of 4188	2748	msedge.exe	118
PID 2748 wrote to memory of 2372	2748	msedge.exe	119
PID 2372 wrote to memory of 1184	2372	Harmless Asset Manager_3.8.0_x64-setup.exe	122
PID 1184 wrote to memory of 3900	1184	harmless-asset-manager.exe	123
PID 3900 wrote to memory of 4728	3900	msedgewebview2.exe	124
PID 3900 wrote to memory of 4772	3900	msedgewebview2.exe	126
PID 3900 wrote to memory of 4772	3900	msedgewebview2.exe	126
PID 3900 wrote to memory of 4772	3900	msedgewebview2.exe	126
PID 3900 wrote to memory of 4280	3900	msedgewebview2.exe	127
PID 3900 wrote to memory of 5144	3900	msedgewebview2.exe	128
PID 3900 wrote to memory of 5144	3900	msedgewebview2.exe	128
PID 3900 wrote to memory of 5704	3900	msedgewebview2.exe	130
PID 3900 wrote to memory of 5704	3900	msedgewebview2.exe	130
PID 3900 wrote to memory of 5704	3900	msedgewebview2.exe	130
PID 3900 wrote to memory of 6072	3900	msedgewebview2.exe	131
PID 3900 wrote to memory of 6072	3900	msedgewebview2.exe	131
PID 3900 wrote to memory of 6072	3900	msedgewebview2.exe	131
PID 1184 wrote to memory of 5552	1184	harmless-asset-manager.exe	134
PID 5552 wrote to memory of 5596	5552	msedge.exe	135
PID 2748 wrote to memory of 5632	2748	msedge.exe	136
PID 2748 wrote to memory of 5632	2748	msedge.exe	136
PID 2748 wrote to memory of 5632	2748	msedge.exe	136
PID 2748 wrote to memory of 5820	2748	msedge.exe	137
PID 2748 wrote to memory of 5820	2748	msedge.exe	137
PID 2748 wrote to memory of 1176	2748	msedge.exe	138
PID 2748 wrote to memory of 4856	2748	msedge.exe	139
PID 2748 wrote to memory of 4856	2748	msedge.exe	139
PID 2748 wrote to memory of 6124	2748	msedge.exe	140
PID 2748 wrote to memory of 6124	2748	msedge.exe	140
PID 2748 wrote to memory of 6124	2748	msedge.exe	140
PID 2748 wrote to memory of 5236	2748	msedge.exe	141
PID 1184 wrote to memory of 1964	1184	harmless-asset-manager.exe	142

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://harmlesscreations.com/
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:2748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffa0844c188,0x7ffa0844c194,0x7ffa0844c1a0
    3⤵
    PID:1828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,10443024997418055719,4114940614097739632,524288 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:3
    3⤵
    - Downloads MZ/PE file
    - System Time Discovery
    PID:1736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,6096730348327470460,1783218057695542453,262144 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
    3⤵
    PID:1152
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2360,i,6212397639158421655,8738055604103224148,524288 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:8
    3⤵
    PID:2408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,12929488638206519305,6526831721883816700,2097152 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
    3⤵
    PID:4264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,4149048315856918468,13076834999400319598,2097152 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
    3⤵
    PID:980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,13563268665326115268,16917269081763925510,2097152 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
    3⤵
    PID:116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,12764791971332224782,5131607120013009635,2097152 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
    3⤵
    PID:1232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,9498095779987329824,12274391384302325958,524288 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
    3⤵
    PID:1616
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,8188787131739608073,7760865373523276609,524288 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
    3⤵
    PID:4664
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,17734897564975158413,7851977097019582137,524288 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
    3⤵
    PID:4464
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,17734897564975158413,7851977097019582137,524288 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
    3⤵
    PID:3204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,16420673922474967927,14914014723800611840,524288 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
    3⤵
    PID:1104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4228,i,1524708531006598361,7025829950287312737,2097152 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:1
    3⤵
    PID:2056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6440,i,5176717203414608162,4335977345798512586,524288 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
    3⤵
    PID:1584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,4843941911289773549,5349252333092063918,524288 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:8
    3⤵
    PID:1916
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6632,i,11434056106678003516,2459719366946913463,524288 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:8
    3⤵
    PID:4700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6624,i,11405410881956941121,7893448496723337794,524288 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:8
    3⤵
    PID:4188
- - C:\Users\Admin\Downloads\Harmless Asset Manager_3.8.0_x64-setup.exe
    "C:\Users\Admin\Downloads\Harmless Asset Manager_3.8.0_x64-setup.exe"
    3⤵
    - Suspicious use of NtCreateUserProcessOtherParentProcess
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:2372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5908,i,12193420820639208728,7897270761222876068,2097152 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:1
    3⤵
    PID:5632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,881501308926392780,9357198114114214419,524288 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
    3⤵
    PID:5820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6796,i,4247339878479156652,14073097151603820999,524288 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:8
    3⤵
    - Modifies registry class
    PID:1176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4208,i,7212524183737191996,3007253109189856895,524288 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
    3⤵
    PID:4856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4564,i,6750349540575445419,9717106714126259861,2097152 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:1
    3⤵
    PID:6124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7096,i,7799114141963496076,10533561252945168229,524288 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=7160 /prefetch:8
    3⤵
    PID:5236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7028,i,7992593945182886865,3137223199478179335,2097152 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
    3⤵
    PID:5956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6248,i,6779922823751940201,5552919947071003655,2097152 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:1
    3⤵
    PID:6252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7128,i,278232123340436637,15323783785692000662,262144 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=7220 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:6628
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5312,i,12848427072157553925,13007844535582670267,2097152 --field-trial-handle=2344,i,5254394548549606798,1351385699155561275,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:1
    3⤵
    PID:5940
- C:\Users\Admin\AppData\Local\Harmless Asset Manager\harmless-asset-manager.exe
  "C:\Users\Admin\AppData\Local\Harmless Asset Manager\harmless-asset-manager.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Modifies registry class
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1184
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=1184.3892.1131444636293594172
    3⤵
    - Drops file in Program Files directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:3900
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x17c,0x180,0x184,0x158,0x94,0x7ffa048fb078,0x7ffa048fb084,0x7ffa048fb090
      4⤵
      PID:4728
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1752,i,10721441688655083860,3159610345565328243,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1768 /prefetch:2
      4⤵
      PID:4772
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2088,i,10721441688655083860,3159610345565328243,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2100 /prefetch:3
      4⤵
      PID:4280
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2416,i,10721441688655083860,3159610345565328243,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:8
      4⤵
      PID:5144
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3600,i,10721441688655083860,3159610345565328243,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
      4⤵
      PID:5704
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3940,i,10721441688655083860,3159610345565328243,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:1
      4⤵
      PID:6072
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4256,i,10721441688655083860,3159610345565328243,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:8
      4⤵
      PID:6820
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=796,i,10721441688655083860,3159610345565328243,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:8
      4⤵
      PID:7148
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4768,i,10721441688655083860,3159610345565328243,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:8
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:7084
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4316,i,10721441688655083860,3159610345565328243,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:8
      4⤵
      PID:2320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.com/oauth2/authorize?client_id=1404156965248307261&response_type=code&redirect_uri=https%3A%2F%2Fdsc-oauth.harmlesscreations.com%2Foauth%2Fcallback&scope=identify%20guilds.members.read
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:5552
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://discord.com/oauth2/authorize?client_id=1404156965248307261&response_type=code&redirect_uri=https%3A%2F%2Fdsc-oauth.harmlesscreations.com%2Foauth%2Fcallback&scope=identify%20guilds.members.read
      4⤵
      PID:5596
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.com/oauth2/authorize?client_id=1404156965248307261&response_type=code&redirect_uri=https%3A%2F%2Fdsc-oauth.harmlesscreations.com%2Foauth%2Fcallback&scope=identify%20guilds.members.read
    3⤵
    PID:1964
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://discord.com/oauth2/authorize?client_id=1404156965248307261&response_type=code&redirect_uri=https%3A%2F%2Fdsc-oauth.harmlesscreations.com%2Foauth%2Fcallback&scope=identify%20guilds.members.read
      4⤵
      PID:5748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.com/oauth2/authorize?client_id=1404156965248307261&response_type=code&redirect_uri=https%3A%2F%2Fdsc-oauth.harmlesscreations.com%2Foauth%2Fcallback&scope=identify%20guilds.members.read
    3⤵
    PID:2044
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://discord.com/oauth2/authorize?client_id=1404156965248307261&response_type=code&redirect_uri=https%3A%2F%2Fdsc-oauth.harmlesscreations.com%2Foauth%2Fcallback&scope=identify%20guilds.members.read
      4⤵
      PID:2000

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2332

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

hyph-as.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3900_225617396\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3900_227495129\manifest.fingerprint
Size 66B
SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
MD5 06d2b48de0edcb3e022ed639f0fb0085
SHA1 32f93d5a76998c407087269794026d1ea028828f
SHA512 3c883d4c342f95f28e4a76c73ce7151e8a76d6f5b2c86f90a9ee7f9976ae7e1be94c963489b326d2ff5f7c6423b29552d9aa09b65c17396c2f66ce271fe19506
TLSH
T1F3A022E32CE8880EACEC0AAB020A0AFA0ECC8000020280C80008080220028F0008CA8C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3900_227495129\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3900_409543254\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

harmless-asset-manager.exe

Path C:\Users\Admin\AppData\Local\Harmless Asset Manager\harmless-asset-manager.exe
Size 11.9MB
SHA256 ec23f530ddb783c446387176d9ce9f5940a2c6d92fb0d3df5def3d34e46d9316
MD5 0d1c0e4f1524e700c94bd75390bfd8a8
SHA1 c5421200362cbfeb97e03db2bb80989150e971d9
SHA512 fdf4df4ae785080d2837fcdfc624c2a970f227ef84ba16190a8ebdcc43d7ce8f7a88d7909cd82e0589b78aca36a2e33990461a57766d8d5f5f6fe945c25d6c12
SSDEEP 98304:f/iV854u2QoMajpH3YtWlf9X0959SRwvvmH8VmsDBHjwN7bAF40ETHT/BBSn+:f+uMtYkf9s5UicAFSTHT/BC
TLSH
T11BC67B43F38184E9D0AEC574C76B9B72BB32F88D4521735B1BE44A222E1AB905F1C7D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 edcc8ba061856d3ff4167fddab141c3a57d85f9251e54e9dc95d515fcb56235b
MD5 0793ce1580b79e4299d8b0e010473beb
SHA1 055430ef6e1f80b14d71b6f3ee5f257422fab6ed
SHA512 6c025ba3506afd15b5b50c119a4529297bdad05a25c7ecf5ac10dc697a011556e0e3d9c7511e41365b02f1f3887ce9003c1f67626f1b99f631d8f0cc06977546
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P76:fwUQC5VwBIiElEd2K57P76
TLSH
T12EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9aeab2c92c5f26a8ca39382cf1bb4652de05a24b8d0a9ed661920c6197bf4c98
MD5 722151c3c2c9d1bf9273dad578c24b92
SHA1 8c73ee2f65f9c7a61550c77f0ff7f3b2e262dbdd
SHA512 2d701005e69967e2b1d86e637b7e1011658167d340aa89a1d8a3826c1a0cd883f9a6d2e8ff8530362b27f034273eb9c1e432fc1a63348092e3fcfc9ecd12dada
TLSH
T19ED012323A18644AE656A1F0A413CB411637516624535B21B215949D9AA80D562C6192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 46246483d08868ff03d5f9bb48e547ca61f651c3e59a4138f5a5da74c69b3ae0
MD5 c70fc44a424269679b1300a5be3376a5
SHA1 6162f1576d71e2726435c2e688415ae394c1369f
SHA512 c7fe73655fb22ef9d6d3620fa11cc8586300f67f906224e15b5de9802f495a10b66f3fdb475a44e7ed7af1a7d84be1c87f05f52d39641755f33237ede51a6e35
TLSH
T1F9D012323A58684AE656A1F0A412CB411637516624539B21B215949D8AA80D562C6192
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 32KB
SHA256 3c44f4c59fe37ca58351d20a7b030b3f6ac4307827d183c1049b92628ac02ef6
MD5 e540dbf14f82900cf675c1f3925277fb
SHA1 1c935a83f13f7378cb65577d0f77e2509feecd0c
SHA512 013ad49c124b2a440a115f2d00256f35e64716e4aecc34db22e63b018cf7d530bce01708d66a0ea8d4cdfa5ee4c7f660ee28c857682961fbc4effc3f823fda16
SSDEEP 768:4X/4xTkPRDs00I3RolADpDhzzKgiIH4FriQAQ1hyo2zokcD/WaPp9U5:4X/4xis00IQAZ1zCmEeVQ1hN2zokcD+h
TLSH
T1DEE2F1423B29C213D3A42673EB90B057499FEBC93A3C68C334685479DBEF127494657E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 29KB
SHA256 2ac9e300790d3424fd8c25193cd41e4b34bf44044a287233201e25db04e4d9dc
MD5 820629a88b5be55bd307882bf56d6c8a
SHA1 1af9ed89587d0b7cb2d2d98167b5831210e2cdb4
SHA512 afe496335877007d3f52babd89714c9089e61c4c560d1521d4163ac936afb3f68e22cec492722b241e341b1de1f295164ecc2f7af20c283ea5af41daf34734b0
SSDEEP 768:OlE0+pyeNGinjSvSlimetURgkXmFiA2K6hXLr:c+8eIijSvyfeuR3XmWVN3
TLSH
T106D2E13D4C6B0841222F477E641A12BBB51204B319BB4ED6F7662BCDF949339188E6E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 68KB
SHA256 18bc912642f61eeb977d23cb3bf2bd24ba4e30ff6323fea12aa8c44d5b094565
MD5 c08c1719d3656d01a0a123df1719e752
SHA1 cc5e2dcbf6ace59eeb3c70184695f06249fe58fd
SHA512 594bfa9ebe355cf2ce32789e1ca93a0b9fee77b7658433320c37c1fbef33850e1ff7a7addc5b9cf2a7bd5917389ac60e29dd92f4622ec8cef550e71b799fd398
SSDEEP 1536:/ZIiP08yA3EUVtYMGtDtiP/aJ4PsOSjQ58y5lm:/f0A0a6tiPfP/l58ym
TLSH
T1D363F177D3907E43199910B2AE9E9A49F009AAB60E0FF35400AD045F733D8876DD57BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
Size 73KB
SHA256 274c3674c18579b04bc7d1067d2e336abfae70ca70b3465aa8dd44073cfa9dfa
MD5 c32b5cbe39e0da8282b6f58d2ce860a6
SHA1 0c2d3dac247f2eb12569ac90048ac482d8517514
SHA512 8f3c1eb1095f08f11964d5421d8239df737415996e2beb78b3aae40487f8667ec0b29d86397161987adba84173d86637945645dfd1bd3c847214b98f7ba71d00
SSDEEP 1536:ey8IkQNJDHiDsWV9q5+Jyn9BWYXQkYAgLOnqy3OAeZjVAsk:erOviDr9JJyn9BWWVYFoleAkVAsk
TLSH
T1877301CA147F06C744EC0670B24391A1548AD3C3E0599F24AB278E29B5AE47B1DBB7DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000073

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
Size 335KB
SHA256 78a97888000ab26497c25dd19cef764fd03827715894148f3cf7bacd4db20f18
MD5 4dd00e7fa107b39032b2977f6a461aba
SHA1 f76c24288ac26c70d18bdd0a31468ac0e9bada0f
SHA512 655486a0c3cc02d8924e7dc368cc917d5e1de61894d2a35b2d498a4ab874e63067cbbd412468791aaf444106fb5d294b2f42f9bb54b8df3d8642b173746dfcc7
SSDEEP 6144:il5ibLiIJ9vZPmk73iWYlYMH3OXq4/azcZ2x2PB23rw/vfUpqFLf:iGV9RTW6rXfScZPB4rXpqVf
TLSH
T16274237195C272E8CDC5DFB7B27B990521672724730F3D118688CEEA05B2F6D4DA8A43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000074

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
Size 198KB
SHA256 728db47fc1bb7392e5fc30066d6a9674eaab264ce9bed557ff24360cfa4ca97c
MD5 3475085a1d184565c9c99c1a40b77ea9
SHA1 6b6949f0e543c9ea02b69c12d044aff40a24d2d1
SHA512 52059e0c53a7b0ce9460000bad18f6480454694367987896720dd1e28cb15305e96ae8ac15737d31d2f8f61c670df33003b79b1e04bfe1198626a713357b42d6
SSDEEP 6144:e//R+K5wnWC7ymPTvh1eg/7Y8/OHLoiBd:e/p+KqXOmzhr//OHLoiBd
TLSH
T1E81412BE9EB429B03628DA65DFEC92D220B0579C29DA7140E7FD230D5E7752189C883C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
Size 163KB
SHA256 88358436846f4b47a72799ed949dd497e723698f799a999c5ada1cd1a850e226
MD5 ddab536ed78e10242942b89b37e4e9f8
SHA1 848ce61874048c5f4ff1d8d9f152be59aa8697d5
SHA512 4b6f22331199119f7eb6e4fd2c929ac19d14a52d8581088f12823d89cb4044c00273ec578b2092c271a9c809291f7aa2e7e742e292c4d205a694243ae15cf1e8
SSDEEP 3072:EM2xNSyfxgCgmlDVFpAivB2JHyeN8SpRf4G8VMmlv2gCV3OfO:EMiRpnlpbVvOfFckVWO
TLSH
T106F3126146BA96FF6AD050A7A59D33C4F627A888B312043CC10367D93D436F7B87B92D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000076

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
Size 3.0MB
SHA256 d32c276b44215916e027c26b197a4462190d8f5b2517285af1109538b84587cd
MD5 419348782de7dc6c013c8b6d37f70749
SHA1 2058f9e7baee78d566eee480e56a8b47221ba88f
SHA512 f8fd9a92023d51355c3a7c6419fd0dd6e93247192c29ea32007aa6b49a05f75dfa1ea0685e35678b474015ddb0b5f2ac5fe25b4ae7e929dc2710497ccf95135c
SSDEEP 98304:APuTGGFrLdAM1kypSnQqjKw3RYxHjh9y6HNfSIc:uuTGQ/dHkyEnQqK7j3JlSIc
TLSH
T17DE533D2F209C4746D10EA7A63D971E1CD6C9F0A86F6A6F92A2604108D3F45216FC7BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
Size 16KB
SHA256 5ddbed511cf2f337af46c2237ec6a56f9acf833d0c751383acbc087bf670711a
MD5 eeaedc997aa1206067bd615eb2cb44d6
SHA1 f7bacc6fae1b0f610eda363659a0faeba9e48793
SHA512 addfeb111dcc16a5e0999b6d3604323ea3c06545caaf49177b48faa08b725f07f6307c3b554dbf28ad53332e0827aadf5295392593ab7ba3775b50d35b5a06b6
SSDEEP 384:BAhARP+ZzW5XEtCjNRUMai2IRBP19FXmiQ/Sv7kpPPY9gaXzfqMD:BAhARotyNFBBP1nmibjkputXzB
TLSH
T1CC72D1D795EF38B12B8A5A239F35F4DC33B84ACBEF941456B8262CF200355519F06AD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000078

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
Size 62KB
SHA256 42573d9095789a5ac2f5f38bc361c0b5ac31a575e7fc940138282ac49bea7aa4
MD5 d7dd448d84777c3fb52021b0918c27b0
SHA1 438f3d716dea8bb09f53fbe3616e0737be68a97c
SHA512 7af30955d05562b5e8fa0c635ad93211e7a5efc1b952921bc18404611002d61e918e67e01f12fcaac0c69c2513282038181ba3b62cd61d6fd544391ed1c895cd
SSDEEP 1536:YokLMfJWUL0QvcYD4aLUkCHUBMFkl27o+7zi7S:YVSp0yDnLdMFklKo+zi+
TLSH
T187530293CC46451B38033A6B265AF8279759735926086CBDA9DF8E9D1E53AC03FF1DC0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000079

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
Size 109KB
SHA256 40d026939eba2aa724ee26b067e0089b5b0ffd22e843b0a21f37887517bf8d40
MD5 1ccbe0413b1f25edaf6b15d638978ac6
SHA1 5c43d08c0f86e50103aeade1957bde40f41a3c11
SHA512 59229c9f213fa43641e2fcfcf93fa2c2e7d043990d6201389128307c8c720b7fa49fe1a273eb0ea92cee1f0190c2eeb75e8e150876a789fee2df1d71f827062c
SSDEEP 3072:UsmC8vYwm//jDxakq2Rdgp3i/LXI4nN4bUbMl:r8v3ADxC2Rdgp3+cQbMl
TLSH
T107B3123D98A17F890C9961652AF1ECD1EBB35273C6197AFD7C6BC7C03814A3408D136A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 405KB
SHA256 b13f04be550b3053ad88c8f386451fed41558be9eff4fc40d5ae4ea22289c06e
MD5 bc7de7630538317381e997d8fc61397d
SHA1 4e55cb381600ea1b208bcdbc4cb2ab3f37364233
SHA512 b8434434d0da83b09583294da853b810eeb140522b809218d1afe4329ad236ee1dd8a45bab8246a4c8dad13cc692eca809109745583f63e4e586bb3c27a81099
SSDEEP 12288:lOqfWYp5ZDJBkdhb2Qr+v5YcVz6q6UmupPHxw:ZJZ9kj6v51JUl+Rw
TLSH
T1AC94230C2119A1B1FF81400EEE6F75E91DCED6326DAB2ED20E2AC5D5997B45B2030F5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
Size 37KB
SHA256 8e401b056dc1eb48d44a01407ceb54372bbc44797d3259069ce96a96dfd8c104
MD5 3d6549bf2f38372c054eafb93fa358a9
SHA1 e7a50f91c7ec5d5d896b55fa964f57ee47e11a1b
SHA512 4bde638a4111b0d056464ce4fd45861208d1669c117e2632768acd620fcd924ab6384b3133e4baf7d537872166eb50ca48899b3909d9dbf2a111a7713322fad4
SSDEEP 768:YLYEgWfC/zlP948Q4NxhBiMwYatzdYZyXSihSZ9ia6UBJlly12m9U:YLYEszTFQyxfiMwYmxYZ1p9ia6U7r4U
TLSH
T17C03F2A4977838297C5335AC14A12A4FF94104FE67EDF4FDF206251418C36269857FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
Size 442KB
SHA256 31dfac6c78169374599d01a38f703a90a7601b1586e01ab6e7b5b5ff8a6d34a3
MD5 0addbaa672f788b303f561f318f9bc8a
SHA1 17b081d84f8e86b46faab4f1b365602e337952b5
SHA512 fb82a2d6d977a1d440bf4ad3893732d89cc30787faeea7615f656da3202a164d07c6a82eeef4d034e40fa38003291f13081a03bfdbd82ce294d47d9fe27a3143
SSDEEP 12288:O+aB+4vRLDZDAvdghRwZ3EKCR+FSYZtmLQDld68DDqCE:Oy8D1JRwZJbHUQpd5Q
TLSH
T1B0A4232AF49BEB87351BB34B608F4790C4EC92F876556F504C3A2A5F5D2A0E47B0B6D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
Size 20KB
SHA256 e142e9e9f9526fe022a49e22d7fbb4e944f0934b7de352f829ea08d7c4eca54d
MD5 96facb452ba015d00b0bcf906f12264e
SHA1 772d77e4cb1a3fe135383a1fdabc85d00b43020c
SHA512 fd28ea886d9e1195bc34dbf03a77c80a314707697139a8491847c26d709b930a7fdb0a2f65827dae4764feebff76ce3a9836b99bba53953459d9813ededf685b
SSDEEP 384:qJUPofOxfjVIIDE/hE19JG1JYWJ3p/Ku+6hxq/p2EH1NlJ:qJUPI+j+eEpaGAWJ3ch6hxUp2EHPlJ
TLSH
T19292E0F9CDCE21104BA47A80CC35D01DF2268FCF66956F3685AA3F43A8C6519B476BE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 38KB
SHA256 ae99aaede2f373187a4fe442a2cb0ab9c2945efbab01cf33e01be517c0c4f813
MD5 71d3e9dc2bcb8e91225ba9fab588c8f2
SHA1 d7e38ee4c245f64b78eb18e6ecd7b9f53b3254a8
SHA512 deda05ebd575d413aa2277876991ecc2ea238907390753485ba1b487ede2f432363c46daad5f3f240eaaf8d3258150829a3ae3d2d9c420ea59567cfd440361a6
SSDEEP 768:90TMDBOLlFMKbQDweRs+mkq4oY+VT6p+0t5LMXTkfm7s/U2Uq:6TppGKMDwtN4orTAHjMDja
TLSH
T17103023ECBD95DEDE717731B5C822B05683C2B18D0BD9C498995A2D04ADBD01F8CB2CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 38KB
SHA256 440ad8b1449985479bc37265e9912bbf2bf56fe9ffd14709358a8e9c2d5f8e5b
MD5 7f63813838e283aea62f1a68ef1732c2
SHA1 c855806cb7c3cc1d29546e3e6446732197e25e93
SHA512 aaea9683eb6c4a24107fc0576eb68e9002adb0c58d3b2c88b3f78d833eb24cecdd9ff5c20dabe7438506a44913870a1254416e2c86ec9acbbcc545bf40ea6d48
SSDEEP 768:RtWd6RsrMjeX+oUMPzo4niAVyynUFTyEatQHzV2h2TzpLJD5JoswdZB:/y6RsbDRzookyncNMQHzAALRovL
TLSH
T1FB03028CF413FEE931468F269BB700857442C457F997A72A30F5BD02D98B6286214FC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5625c4912ba30e0394bc03d45890bd2d3a9e6e901e4ee395c5454fd5a0d801d9
MD5 e6aac23163fa672ae3bfdc917bee08c4
SHA1 b732afec79b833e682c2fddcbf74744e9bb714b5
SHA512 0e2aaa99e6f52918feb506d9a2e6577d01734e7b38bb876c37d1b8f18f9dda8ad049d63ecbbfc69729cd09d0824b197f2a543c529114e45e68589e1580a4bc9c
TLSH
T1D2613D7DC66244A1F3B15239E0DF067279360FC9FC275E7611E0EA7436E6B62C15288A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 f0d65fba5c9f4e95064c6fddcc60a37cf07596251ab361de28d1d3219ba4447a
MD5 fbf05b84b6374123c56373cf87020c8f
SHA1 01a96b8b639614649f2c87d7295c4d7e862fef63
SHA512 66f83d5d832b3a1283c5ff72a26bd4ac1363cd0e60e8a4736c174da81c5761859d1f22780974752ba88d0afd7ee4d41f3e17a59137c53286b542d050e90b49da
SSDEEP 192:W08lm8io1fQ+1PyvoVO7+oZXPK5C1/jrkNexO4/0:WloofQ+1Pyvogyo9CM/vxxY
TLSH
T1743275F481801D27EB6601B8D2EBC1A339BD4BCCE87B1F7518E1D67D3295F42A4CA5A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 d4f374b7df0b129e789163aa2457124783c0cf72acf03e806eb9754e3637ff45
MD5 0da2883aa1022b95e84a972a0c94e391
SHA1 136e5613c8d7b3f7cac050e802007d8cdd6d7b06
SHA512 9c45eb799892d839d949031d52e86f274aa10b666f5bc55e6a675e844e2b83b6dbe88801f2d9e8c0ec1352feaaf5a07ec19ad45a06cccd31fde83c94e299d064
SSDEEP 192:g8lm8io1fQB1PyvoV+7+oZXPK5C1/jqkNexOp/M:hoofQB1Pyvocyo9CM/2xxZ
TLSH
T1D33274F491801D27EB6A01B8D2DBC1A33DBD4ACCE87B1F7518E1D67D3291F42A4CA5A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 11f9d81ed196b4cdc3e3952eec4d7697830acdb09c2c6a9c2855a6313ef8f7a1
MD5 0a0ddf260531a5021c9c4e3f00a8589b
SHA1 5d4b880f4d0a39e2e8d60522b8f735691a6ed9f2
SHA512 ccb434e2093fcae46c98dd56fe0bedc482c62088d5b1a3da6c056c32578fe31525ce31416165cae425a69fdb4a148c2c66f7f5d368948c24d97ed6d3395b1adf
TLSH
T146614D7DC66244A1F3B04238E0DF067279360FC9FC275E7611E0EA7436DAB61C052889
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c3d8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c3d8.TMP
Size 3KB
SHA256 01db2c71ea675e24a1302e1d87964eabc704b04faf2057b449702a867d5a5247
MD5 211a3783ab0afa14064f389b99daad6f
SHA1 de5fb34e1eb64e9e20c1d8a307c7a56fe38ac7df
SHA512 03d104631e61db194bf062b736176faa1a7250bdfe14475ba51b693cfca1cca59c6adc3b6c1403b184a67a8eb2ee613d9468833a303a8e294a525abe7aa67008
TLSH
T182613B7DC65244A1F3B05238E0DF06B279360EC9FC275E7611E0EA7436E7B62C05288A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 a5fd486423b1b01ac7c1fec2c25fa108d7abdcfa4cc379214614b44e6bf44380
MD5 545ae306acef60b7b7958210c29a047b
SHA1 395d3a762835e1b3e17182b8760c2c921380c244
SHA512 e68c60d25320bcad1d76bafedf76cae387bac3c4400eec261fa2160449af90e5db48dcd865e70ed3ea27bf02e4598045f2f6b0547234cc8626440634bb299963
TLSH
T17F6190F6C7D9826DCD465AF0AB15BE27CF290D14422C3D1D89E8DE4BA3D2071D10264F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 0fcf5104f14f5fc8f69b544ec747a8cd0090cc165124d5180b58a28091fd7a85
MD5 989167e45c7ad24aa8c7af7961a75f4a
SHA1 434394676239c7c1cb2768edcbce99a146fb3479
SHA512 61616c99ae8496a2fcc7f574d734ba67da00f212d343ec7a7871c100d16a71c58667aeb05dd776801734298238a6d8d789b9e9218cd4c1a0bfe4140a1b81c21f
SSDEEP 96:DrOsTgYuAxuduiu0JzeRJY6bJ8M5JWJ2Jluqw7u9u6uCZu6BHuM:DSsTgYxxwDLCDYS8MrsMluqSChnrHx
TLSH
T14CB19DF7C7E9836DCD1256F09A197E2BCE291D54432C3D2E88E8DE4BA3D2171E14164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e0dc1a8ee02810bfada8a174d8ba7be33e2102ece316bde892797359e14f4ee8
MD5 6397786a7c51231bcb8048045bc8698b
SHA1 94dbc053850eccba1d8dfba2f033790fc0536273
SHA512 bc6b597b48f44a10a42cf1d6bfdfd2556159abfe7a2193361156c325260f0ec3e4835c64766600a1d7de6fab743bdbd69ef0a115f45c017827cb76b2dd7891ba
SSDEEP 192:sxZZR1iyM/jK1Ml8Mkx/f5sh0VUPIdpJHW6+WNGY9Iopa5IgrJ:sxZZaMx/f5s+VFJHbG19
TLSH
T13142F8126A346977CCDBD309FA457F93D6F90572A2900E58A9FCCA1C04E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f72b0aa949bdbedc61a317a0a6720d473152a291bee1bd6d2bf252605f7f41c5
MD5 9b85ee714419ab8f4f81d2cf2668df4c
SHA1 97890ab558489818eb6044d98557c645c61653d8
SHA512 e359e6775727822bf2aa0cac7c10e3266292d01b1c4e38f0c04d7b31052423ed57746980248f32a0635b0851cf4927bf807d1ac58dac908086f2bd90e272fe2a
SSDEEP 192:sxZxR1iyMojK1Ml8UQE9x/f5sH0/HPIdp+bZHW6+WNis5P5aO/Y9IhK/q5Ig5YJ:sxZxhqix/f5sU/AIHbHp/Z2
TLSH
T1D162C612AA345D77DCDBD20DB945BF93E6F9057292900E44AAFC8A1C04E6BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 03a79b8f6bcc65d5819b8b2e54ef8ed6ccdd800443d5c3319ce33997c2beea85
MD5 21e343fe8e7515d74bd4cedeef6572db
SHA1 3af2b96050dbb36786c0e905c0e855835bbe8f51
SHA512 50f92adde22aa59f01b3da9e37041cfdaf4a73743e12afb5415ce875e4600cc0cfd11ef7e3c5b0ad1eb992d053fe43952cd97de75a15c2631ec6dbfc880d686b
SSDEEP 192:sxZZR1iyM/jK1Ml8M9x/f5sH0/HPIdpHZHW6+WNMaO/Y9Ilva5Ig5YJ:sxZZS1x/f5sU/A5Hbw/M2
TLSH
T10752E8166A346977DCDBD209BA45BF93D6F9057292900E44AAFCCA1C04E7BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 66382974318c4a11d8a09473d815f56caf07d4e19a0c3279989f4d483fe8fa16
MD5 ca0d81d94f0f0e1d7ea4511b015b7f7b
SHA1 3c88a6d923b6d89d82c38a48ab8cfa7a6fb8d663
SHA512 df59bbcd4d530e14af378e54719f9b7d6b1b64db3bd123f4c14d8986475681d54bfef95a9e16a351f98281da77de35fd8e0c56951c9fecb67d4eaeb3811e14ba
SSDEEP 192:sxZqR1iyMojK1Ml8UQE9x/f5sH0/QPIdp+2ZHW6+WNiEpojwXaO/Y9InK/q5Ig58:sxZqhqix/f5sU/RHHbhLr//2
TLSH
T19962E612AA345D77DCDBD20DB945BF93E2F9147292900E54AAFC8A1C04E6BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 34ff3b3f125e3ece2de9fdf48ff0cd0b71b253a1eee185d44d371d9056310e09
MD5 723b89ee265afcd64690b42288c17563
SHA1 08272f22fbadf22048de9f8fb88a75b00abdaf81
SHA512 93a3470952280c759a092cfb17b8816a5a106eeefca9c4059290bcf13d98e93040f5f7378c6c296c0c8a04529433c0ad153e93cdd9ebe6e312e282f030a7d997
SSDEEP 192:sxZ9R1iyMojK1Ml8UQE9x/f5sH0/HPIdp+bZHW6+WNis/IQpaO/Y9IMnK/q5Ig58:sxZ9hqix/f5sU/AIHbJbZ/k32
TLSH
T1C562D712AA345D77DCDBD20DB945BF93E6F9057292900E44AAFC8A1C04E6BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 57683cc40dbf743f99d484baf67f79c029c77ac1d98d2c2a4af0addc4a1757c4
MD5 bcd5e2b05e68443a3875ad08bd3a7409
SHA1 acaf0e1393f4e7ad2810adcd5314e1f9110799a0
SHA512 7f70188e67991049e933ef28e441bafea57b1ac73149f197ae0f53dfc405e9899f2e60bb7d7b8c954bfe7c9e01ee17e49ac002a36cd493316b0119fbc70f90ee
SSDEEP 768:1Gcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNaroBg6ni:1Gcv21wWvu+Z+u1jaeFLeRNRBy
TLSH
T1D8D20A2B280CCB7E0F841E9CED2A6F966DD801CB5B988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\964eff9c-3844-4db2-a759-7d82428bdfbe\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 5acbb46a204dbb9641672c48122af60a10e32820b79ad21259ea7cd8337a919b
MD5 8cd48dde650349aa3fb7bbc6ac93c642
SHA1 d8ed54da788222e92d94ca90dc2941469d7d1af9
SHA512 de569b0e60e4e5d769baf2a12a4e09c756b925e21c17a2e1ed89fafd8188368bfd7e3791f8c376f8f15124b71231d49473f6c113cde987b7634cb3eb104a0824
TLSH
T11ED0A72BA0044590F67BCBD31A32556A87343C8414D49898655245299C41B976222FB6
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 0ffed143dfc63a8e2817a187e13112c656ed0030eb5059021cf2421624bf324c
MD5 825e38a45017d64502bfb8b09bbc4876
SHA1 0ec677364aa4984938a7d39bbd1bcc37945bf97d
SHA512 83bc530e51172aaf0c4238da44e492b694af84531601ced7c1c03498275896bc83bb136432e3d5cb0963db8c633364de4107e90fa7f155d7c14a92c9481fa22a
TLSH
T16BD0A72BE4140490E76B8BD35A32559B47343C8454C4A898A912692DA871B97A221EB6
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe596651.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe596651.TMP
Size 138B
SHA256 193cf364e4619335228e4b6ca3ae448ac8e8d81109c328ecf316dbbb584068fd
MD5 fc140c0eeab1145e88b7922d64ed5b0d
SHA1 ac2b7d0e82cc2501231e35e8ede033e24081292b
SHA512 01bd9afa66589e057bf50cad1680e858a4d43b19a50c457a94d87676aa2068fe62a793b101023565f625e5cfdbf5a81c3712fc5b387f121b21fbf5f27affc5f9
TLSH
T10AC02B6BF1040160AB2603410333414D43113CCC18C5C05C600330242430F232202FF1
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4dbe9edc4c7b7552fd02b194de58288b15637a77e5194418725ff2aa2e61cdae
MD5 1130826c41611ffada124a42c1982d0e
SHA1 1fdf21c3f6679a9f3641c3049b822c857015135a
SHA512 dba02a1bddb62b8cd21d2c76e1ee6f3b61f8beac162886d0198a1024dc1900ac0b3e10163d21b4dba520ae2b4cd2160cb6a43763a9f1eb915620dd79c6bc9c2c
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDauoKf6yauIKXKkk:mT3/Xk
TLSH
T139910406303A02E2787E684CA39385364E4139977819F57F7BF950A14B2BE211EFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 91B
SHA256 b5ac12376878718d3accc7ed17f9d3350bcd6e6924328ed81d69eb1b250f83a7
MD5 471b1d93ed8d51f89e63ed5fb3908826
SHA1 7eb6ceead5c1abf3c63bd654f1021303916cf35e
SHA512 435ceaa9bc23e45012e6c72d0c3437862945f0a2a4cddd2458b12a7a04a6d63ac30fcc7e7f470d0c0ec7dc6c38796f7adec849b6ecd006fccb61f12f0b656825
TLSH
T168B002BB504259D55F7534F7014731DDC56633CC9C85DE8D9472205C321457F2001D65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a25e8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5a25e8.TMP
Size 178B
SHA256 3020ad45bef327b6ca28b71172ab9eaaf6d4219e26c342bbc30b6b609d9032ae
MD5 7db15c6b41701a86e6662ba5995ff923
SHA1 86295fe6bdaca1514131b6a0d7c185bce4c3dc82
SHA512 c77c54f5f9ff314215c6c1c8e8b2743c58048085cefaf438ea6fa5a8d3593318f46f750128524edcbde47f730091b8427491049ad94d3bf0a65b5988aba5b9ee
TLSH
T182C08077144145E12F3524E7121673D9CD363FC94DC49D9C4433304C327186B5404D74
MD5 SHA1 SHA512 TLSH

Submit Download

fc3bad54-0b6e-4741-bd44-c0a7c31aa634.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\fc3bad54-0b6e-4741-bd44-c0a7c31aa634.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 856896cd11cb2a781c5306b72a0b15c2f3247523964ae0f6ee0207a71ffe9f46
MD5 3822abe17b206a575a7d5c2e261211c4
SHA1 7d6038c57b6d6d901a5d20f59668e637f01b20f8
SHA512 91bd0b47f64aec65f693d04f94e45009d612307807c412b5b342ba5be2b422ea87b079c96273763e75b352f9a7812c0517a0ef648557234f71150f9ba3ba8874
SSDEEP 384:AZcIvsNF/0ziyn2e+COdPeTJraE7O6R2Feooh7UAoV:+vXbB2cThaE7TRHBu
TLSH
T186827D3218B45C7B6AF6E145F84B39139FF89067DACA2F80A5EC9F1D05DE6A41306C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5a6e312e48fa00878bb8635a3e4bc3d8afdd707a36a9fd05c2f8344514cdf560
MD5 fe6436eea2f2194f05616fcce3f1a2b1
SHA1 a251914df12e38a8413e56cc73dc37cd5347d6cf
SHA512 bb86862cdbf73c5f51d696bd7f389a507ca4337c218d94a92ac351d0115155024d719dcdb6220f8626657414dde762c7ca8db1988e95a2781ad1c65b2982ccb0
SSDEEP 192:JONVm6v+YLNQmiUy2vZh+CGU+Fdes9ovtusgEU6:JONI6vz/fZh+COdPeFBU6
TLSH
T16902E9356C382C6B9FF26E46F4873A275FE82177E9922F84D9E81F1C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 a6157d22afde9ff968b08bf2d9b9a9bd7999c493e171c12093d23f9bfb4b323e
MD5 619b96c3bf79f0f960fea7efe614bf14
SHA1 be265543697ae7bca50eede2a40daae675524c26
SHA512 e4b05141725f53f2892171e20d880a50cc6256f71599212bd65e892a400f3be3165122f026d19773523e726a3da45c34973c03b1248b9b7c2b0cd1827a1619a0
SSDEEP 384:/QiFPZcIgsNf8TUNTUlIl/0zi31Vo++/32e+COdPeTJrBE7O6R2Feooh7UAoV:/rFHgWwg2SVo++/3B2cThBE7TRHBu
TLSH
T1A4C21AF208E75C7AD9AD9743A77E2D128EBCC063B5856A40B3D85A1DCC965BFC306C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ac227ad1b0c365a5409a31cfdb80b29a47c707669e764746b8c3e256d3cec0f9
MD5 c780f2ba31d2811d67bfd83023d0d024
SHA1 02846e45e73fc9d39030998faf55c316f21669e3
SHA512 038c4492e6e67aa481189a21d229dc52ed7a6ced4c80d92df114d444f1d83e84b38c86d6edc08b1504cb4dce003b6370aeb680862cb6aae6740d365add1099c5
SSDEEP 192:+ONo6v+YL3QmiUyhvih+CGU+Fdes9oveDSJroCH3qHU6:+ONo6vzdOih+COdPeTJrJEU6
TLSH
T16D121B3568785C6B5EE26541F48739139FE89177DE8A3F80D5EC6F1C01EF6AC2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 51f9f5643146cb38784eba4ea003544de4fc0524d5527fdc29a73028fdc3ce7e
MD5 4e736a439168f25b23f682cfbda2dbc1
SHA1 71f400080739db0da8b6ca953f61fcf3beabf433
SHA512 f44783ee371cdb7a2d0ef6d8701df582ae97e5322e8e9a31ad8ab2ea88a21414aaf8ef44ee54a573e13e838a8bdaa975c1f601f06fd1763c3758b08b4c20edb1
SSDEEP 192:ubLsNFKQFwW+YLeLBQmiU1rtp4e+CGU+Fdes9oveDSJr3NJi3qHU8:EsNFK0zizn2e+COdPeTJraEU8
TLSH
T12C32093168746C7B5EE2A581F44739539FA85077DA8A3F84D5EC9F1C01DF2AC130A81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5371b1bc931add83439285e97f2a437857e44a757f4284d462ca26bf52f5ca0e
MD5 eef34e0e0173ce26fc071884b8582311
SHA1 43b1b23e046db9c61815716aaccb7fad6303b0c6
SHA512 0ccc8cbc885750d6d0253322ea02481695e4f9693d372c09f749248df9559b554f6ebc7395febdb5476f1d0969b9c2cbff2e2293dd2ed168bff6a465c672cf6e
SSDEEP 384:HZcIKsNF/0ziCn2e+COdPeTJr3E7O6R2Feooh7UAoV:vKXTB2cTh3E7TRHBu
TLSH
T141827D3218B45C7B6AF6E145F44739139FF89067DACA2F8095EC9F1D05DE6A41306C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 b1c2cd7e46046a722e1ed8a255ff820eea1bdc5ed974f0b4b6b5bc516fd5dbdc
MD5 d0a4f3f218d6cb8326c456edff16638f
SHA1 cefed204146767fa71df1683465ce8de2945640f
SHA512 ec00fc0abecaa9ac9be62ce3ed6bf15d29585fb2c8703076122c5aca213e95bab28a70699270c2324b182698f6813a6472a39a32c556b299df18f474949cb234
SSDEEP 384:/QiFfZcI+sNf8TUNTUlIl/0zi51Vo++/32e+COdPeTJr3E7O6R2Feooh7UAoV:/rF3+Wwg2MVo++/3B2cTh3E7TRHBu
TLSH
T1EAC21AF208E74C7AD9AD9743A77E2D128EBCC063B5856A40B3D85A1DCC961BFC306C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8c222083b5c26649c8a079b8ca22e98ab5447dc3c8e72fe9ed2c682fe355c1af
MD5 db20a24ade4af1a660f4d1ba9db90340
SHA1 1321a7f570ad2d179e22efabc64542b3203c64da
SHA512 d42bb72dcadd6abbf9ab50ffe95fd8d61b43fa970b223dc7d532d30814db40f530f9f6a87c0ffe9aa74e0ea7ef8dba25866846a1353d018d230a7df243ace62e
TLSH
T16EE00182E30000AAD068033A11832B247BE2C03102B703875F2005683C673023E28B80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 26157732fb072ccc316304146239d9949828a176f752d1be0b4507878cd9ab29
MD5 870e6d6a577423a3cd84d8bb1d7c68f8
SHA1 79dc3d78e379d75be28671bd7683cb96ddbcfae2
SHA512 ee0fe64c9cff5a94ec6c1733a3307671b9edc3e00bdbf70cc1027ff33b8b6b6cd6c077f0ff5d93ee38e3f065f7c3b1de72526996793c8eefce24435e140d5c1e
TLSH
T1C5E00242D3000087D050033A10C32F247FE2C031027603475B30056C3C773013D04340
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 86ebbf04bb76fd2fd829ae3a04bd0b3a63777603c6b2e10c62554336620bc188
MD5 b46ebcb7b90800899470b078a07a3d2d
SHA1 8dfb3dcf9c028e859e4f1e571f0b03dd00a177d2
SHA512 bd325f01652fce892e101e18fb530af0808e474384d010b51af4f136b63374b4b7f48b387dda7da5bff73422255abe7986b9a6b3cf4b11076d56680236304b79
TLSH
T1D7E00982E30412AAD068833A51832B247BE3C13102B703875E2005683CA63022E28A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 891f81b72a1244a5da0db4e6145fb28d59d68e5e330bf443095d5e8293b7e9eb
MD5 9e154fc64069348ed112b47c8e30bc43
SHA1 0d76fb18b88ec097adfe6dc8e6a1daa6356d5a83
SHA512 3362de3adcecf72ee54e54dcfafd49a44efdaf7f3ce44e7ae897fc3957c2798abf60b72fc7c6a426b46ed8c7af217fa5d58eea542d16602fc5aca443db778531
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe598979.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe598979.TMP
Size 392B
SHA256 13e5d0bae367bbbf83306c69fa1e87afc07624031dd4c0138467bd166825c729
MD5 c084ce9e8033f5951609ac25ef324837
SHA1 461ccade11d77c67c91259a8b677ecf2e5cca0fa
SHA512 6a20cd2edc87ed35cf952915ab961538388ade5e44ced16e0a83accb1528be5fc32ce56460db5c545bfe70b04d8f6a4b88a9d4f962e24beb193abd1f5464f860
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 abacd69f23ae5784a497eaa8bbbfc931ab2d642cd89538357126a4f60ba2f643
MD5 c198c0e5c4b111c362a791361e6a17f1
SHA1 310100fb3551f2a726b6cf4ae15e8df55a5283bf
SHA512 4779207c12c9ea4c2ea76052a2ae071d834bdc2a7ca39cf0d0779054cf1165e14d780dca7df8d21d0c547445f3502a38ff388ab921b3fcf41c2b4058a6e81768
TLSH
T11A412958A6F91149B3B76E569BF7A86D587FB8372E06C05E10110E4F0B63A04C971733
MD5 SHA1 SHA512 TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgED1C.tmp\System.dll
Size 12KB
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
TLSH
T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsgED1C.tmp\modern-wizard.bmp
Size 150KB
SHA256 514d8179f9014c612d1c5475e43cf97e1b656c9b607bb89e055388552aded24a
MD5 30bb7644d21019b16dfa6cc5be87d129
SHA1 c6ed96eeecfd243109a4dd8034586c2f4bc5c650
SHA512 05d3f506c2c607741f053ebd04b475c0971e30ce5bc825a0123c6200a5e950f9890a85744d1dba7400295fa5d82353324d0f478f3c14354470b118e63e467947
SSDEEP 3072:sLOP2PTTjOZGlkXCab/BCgK/4Lvz4ckMl+VAch/SkX:sLOP2PyZGlkXCab/BRvz4ckU+VAch/SE
TLSH
T112E3440A91BF901CED1FF4548E86678786408B5DAB9FEDD687DB052138EC23C71AD0E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgED1C.tmp\nsDialogs.dll
Size 9KB
SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
MD5 6c3f8c94d0727894d706940a8a980543
SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
TLSH
T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgED1C.tmp\nsis_tauri_utils.dll
Size 33KB
SHA256 3697d11bdbe1e34daa26b1e89d84276d9ff28148906943d0fe888354c3b13620
MD5 acde70f73d3b71b1c4222b763537780d
SHA1 b053b2e5fdb97257954c8f935d80964f056520ae
SHA512 598fc58a5f561e7995eccccb065faf2a2386bce0cfc4199fa95ba9fb74e9fcb291914676996c90728dd283223c2180de9fe073a4c936e60fbabe036d7e0a40de
SSDEEP 768:L8+c2MM0Hxd1fBTsRmMZdauVKAFKpnp0jdhK7R+qVQTxM:L8+DMfHPxAIMtXIVQTx
TLSH
T144F24A18FCC47EB6E6DF0570080D4A7E826FC8181B14CE9BD3A51EA2D5A63729EE501F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

crl-set

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 08401f047b42b530464909505911f971e4b04d531b201028c4a49ca3b80af852
MD5 cd02f84bf0280503307256128ba00946
SHA1 604cb5ff0477cbfc9252b776fe44ab6458c43a17
SHA512 b9a66f76092757b2ba31e12bb3a18d81ffabb6e34cc9b23051be0dfd910a28a674905ee5ae158510a4fe5670402f8adc814fbeecb844d2f0c1547ee3d01904a1
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 f1dcebda194ea1642e2107685051b077b5f27110f1600e6c7a9989456d7b07b8
MD5 3cbceee218048c771579c51bbd0a485e
SHA1 095fa05626a6748ea4407a6d6708c2cf32506a24
SHA512 a01378b6fd7e8f14cac1a174149c82305641d80ea86ee44101184f7299c38daf0edbe5810811e0d4ce5c29d5b3fccdc6627d4766f8697ced1db23a92f9bb309e
TLSH
T13ED0121332420239C01120B31883B14D1401C50F40054105552C851E1E14470090684B
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

2f4318a3-a700-4931-850a-4432e9853f98.tmp

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\2f4318a3-a700-4931-850a-4432e9853f98.tmp
Size 6KB
SHA256 00eff67bb5c09765379d95a229626cc001967aa7559f3cdddafaa97dea5f76f1
MD5 dfe7bf34b581cfdc048d5251c60bcc19
SHA1 f8ec1cd9579f9e60cda4dfc72d9d0d522cbfaaf1
SHA512 f3f09abe383c0c7765d3feb79531b6589ddc05f29cb68d85d4ba10a5286c97f15b312142de89ccc4f23232c433acbcff843a24261e5bc882c2a9667b43bec801
SSDEEP 96:sty05FKx7b94BffhZ8i0vhE1ktnm/7qx+WVHMSm+uecJiB1idQjQ+gPeuh0+MEB:sty03VBfZZ8paUm/S+WiTiBwdddB0+M8
TLSH
T1F6D196069E686D774CC7E619BA35BF52E2FA107265D40E58EBFC851C08D66CC2307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 7404470074a68ef918dda00ef455e78c96821a8eb8767dec80a04f8924fb3323
MD5 1f98bbe43c5c6bf73bf34c5e7f48001c
SHA1 170f57a117ea33d565e803b01e1ab40f8aa21784
SHA512 7bae09e3174e379b6a55d564c8354cfeba9d2c3ba97d0c7038d972268b1aff79a7ce8eaa490f59f151e92b25c9af41f05bc7b5b7590c6a7202c5b0028f4a442f
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 34854dab0d7e9053b40e7a4e2ae3b30d2292ed5cb36f9a11546edf0532f380c1
MD5 e6fdae40282cfa6ad69f614b0b17596c
SHA1 3c130128c1749cc6dadbd3f6eaf6d66c3ee6af94
SHA512 ba373e7fbe25372f9507d245f6a540936cda35ccef770d9bbe07b954ac01c8c49eaadca52f919c5c1369e384ab711d892217b88e847b5a587e4d4c6b8308ea77
TLSH
T145B0022B7975A613EE108B7020CA419376F51C930B072FF64290E47C9C22BBA820B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Network\Network Persistent State
Size 589B
SHA256 88f8ec5d9f7149dd50f7055dd751b80b6ef9bf89fc1cd7e441b7a0103a6524aa
MD5 cc8c171b52bdf34c37369636397e7e4d
SHA1 ee2890d3dcab145ae643c6b187b7d80f55755e1c
SHA512 9440923c4468e12649520367ae93376e61b258a1113ccbd1e541a22c79dee820a043c20f92f6cd93c5c2181a760065a7faf060b7b1ab6752effa7647f7ed5149
TLSH
T15BF0ACD195E882BE4A4213E036357863C839080642183E269DE9E79557E1074C10254E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a4f3a.TMP

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Network\Network Persistent State~RFe5a4f3a.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Preferences
Size 6KB
SHA256 4e7bc1a5ade30ca3be497f662d799902bb0f447990e3f6d535451a49a66e227d
MD5 d2c743231ef0e53bed852bf99c452c67
SHA1 83bec55c524f2146787b2049b86c485c0ea4fb2a
SHA512 50d45b3c3289282c6f8f5d1af4ad10cf8148e7e6f4695264ef047df5881eb5556dbd4c75e2ca4f17c11f0c0e30b5b0e6f77b066c74f58d4389d11098826ddf20
SSDEEP 192:sty03lBfZZ8paUm/S+WiTmFodddoe0+MC:st333Ua/VYo5MvC
TLSH
T18CE196029E686D775CC7E6197A35BF52E3FA206261D40F58ABFC861C09E66CC230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State
Size 16KB
SHA256 10213616f10f589a15a1565b80733cc819da5cbe1613280ad8175595cdbb553e
MD5 92fc0b70648f8455a5cc78a166d7282b
SHA1 647c9e16f0371aaff9339e667221b90ce5e654c7
SHA512 a3711f3c75f548298329694950640fc6fc054996250fcde71f84d9a38189b07997148df7e9e71a661931d34fc2fdbcb2d5319353e882217855706f9201032c32
SSDEEP 192:z47DFOKH/2/aQWjYhwZ00i+z/kNWIU6ZwNj1Jfo/iVQ45hgj4kaNb7/DooDUhE3q:zg+aQikB+z/xvxjg/qhEuNbjZq0Go9zk
TLSH
T1ED728E2B65A87E3355F2E901795C1B9BEBB584B2D0C16FA849ED5F0E06DB3D80303D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State
Size 1KB
SHA256 6271f536932148f03b7b3b81b8e12f7dcd29dd6ffeb5c0929a7d91f1aa2fc29a
MD5 09893f4b928ef1a3f3d4d5fbcbe4bb5e
SHA1 5a5b3cd8d8b1fbbe4c956dd102c73a4a72a1303a
SHA512 d49965c6eae91c9aaaee52527c0f63bd1ba1817509ca59e1d6f3d71e8651a1c87436fa3b980bda508b5fc16b0e6c131b821c594dc81e186cd13a472932f96247
TLSH
T1F33160B3E8E82F32AC815991B1057FA77E24103AD0508F48A5DC4B2D02EBACCA527C32
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State
Size 2KB
SHA256 dda29255837eded01adf168fc3b53ae9f814994549609657209bd5f4dbf52e43
MD5 746520d005059a76ee763c48a771eefa
SHA1 5dc0335f83a7942e8c38e5585e6fabc18ba73f31
SHA512 c6a1c113bab41be91003040b9de96d38d12dc5e9fd67924ce09e9eb340a502a83d2efa22d8e2e78096e6271737287866d9d7729d7183d686f6d0d10883345dbc
TLSH
T11751A573BC98AF7799E28940B4493F72BA7A5075D9516F54E9DC0B1C01DB69C2302C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State
Size 3KB
SHA256 7ea650dc0fa9c118034442f94d03dd61f88ceb825aeb5a16cd609d8c224764a9
MD5 ac102df9c81140c409e2542fb0404dc4
SHA1 2f7b57098bc5605741b1c59c6dc6f21a7bf90604
SHA512 ebb66d78493806942476f7b7f66ce132d28944e548f0ea3786d684812470a4c1d1415a24f72a65d7da3a028b204cfebbfb41c399b23dec86411fc87b2f5438dd
TLSH
T1D5718537A8A8AA375DE29900B4853F26B6A51137E5917F98D9EC0F0D01DB3DC1302C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State
Size 16KB
SHA256 c46df8cfbfc185967e5359902bb65ae73cb04f048244480367f5bbedd55338c0
MD5 58c26c6ee3868c8798fe44bc7620c11e
SHA1 007267c760fae749b7796cfbd6478cfd8cff2a6e
SHA512 085a36b661bae8d754ca167c968e4a8207c2d8929416931d070ec733f1782c8610ed55763665519b747a257f52bc14d42ac5c601dee94abe489e82e363b85dab
SSDEEP 192:z4WDFOKH/2/aQWjYhwZ00i+z/kNWIU6ZwNj1Jfo/iVQ45hgj4k8Nbq/MooDUhE3q:zJ+aQikB+z/xvxjg/qhE4NbqKq0Go9zk
TLSH
T1F6728E2B65A87E3395F2E901791C1B9BEBB984B2D0C16FA859ED5F0D06DB3D80303D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State
Size 16KB
SHA256 a2f46253fee53e078ea7b565ac0bee94d953d6b12c420516b680acd5176702d5
MD5 df23d090bfcf35cb8e7dddacec22cf33
SHA1 19c4aa8db3fc80bcd93a9bff7bb9638708668484
SHA512 5bc54a3927784a49d6e220116a96cb3e042506719260b1c43dcb89f249f249922a198340486672556275a71fd8385adbeba36daf9435702cb2ced8536ee904a4
SSDEEP 192:z4lDFOKH/2/aQWjYhwZ00i+z/kNWIU6ZwNj1Jfo/iVQ45hgj4kaNb7/DooDUhE3q:zY+aQikB+z/xvxjg/qhEuNbjZq0Go9zk
TLSH
T10C728E2B65A87E3395F2E901751C1B9BEBB984B2D0C16FA849ED5F0D06DB3D81303D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State
Size 17KB
SHA256 a4fb427a8ca066b2692bcf8b68c33fbb5e57168f7261a76f622c9a68d155d319
MD5 ff68085bed1bdb14b55e809bd1fbf848
SHA1 e49169d2ac0524711f6bb92f6daa4b846968b56e
SHA512 eb7f2d3de892ba15ff7732606c33438e155a3c8c66fb54c78ede6f917b91188960b071b4939c5b63a4f7bc25917ab97851af85a1ad9c73a54bc558dfd5314295
SSDEEP 384:zg+aQikB+z/xvxjg/qhEBNgqcq0GXy0do9zk:7/UxvxjgC+bjjy0doFk
TLSH
T103828D3AA469AE3399F2EA4176091B9BDBB4447294C55EE88DED1F0D06C73DC0307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe593649.TMP

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State~RFe593649.TMP
Size 1KB
SHA256 5d006b9b55e22ccc63d56fa1fc4b565c16b4add914273dc1c208aad1f5fd1c51
MD5 16a07d265bbc6da87b109c73b8c58856
SHA1 5abff8d15543b1dc7027fe1042959e1179a6afaa
SHA512 5c8dee9678528bdfa39ab59f2f06e2ef4905fa77393e9eaf1e65a102d9aa77ff9426c4ea814dad747553f70ff6563d1a083af10dc35a95efa70fe033185f9d03
TLSH
T187214077D8D86F76BD804851B105BFAA3D54103A90508B0CE5CC462D02EB9DC9627C32
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 8KB
SHA256 a12bbf5d748ca3d81741ef5430e2ff208f319ffcd9c444fa8e16ea812b829e8d
MD5 636805630179f8c4a4f19ecdcefa7e77
SHA1 f247f8f9a862936be2e5f794d8ceba81e4047338
SHA512 0615b835e1ae5ebac3a20f256c6141ebdf270fb3b6191decd0377a2ef52b0e4f660b8471ef6e62b4ca596dd89521a4d4122025f88d2410d88496573bb4609077
SSDEEP 96:qbJuym+ue7J4W7KvRDw67qNJruD5EJnIu0:G6+Bn7gc5lBIV
TLSH
T191029E5467EA1706F2F6ED72A9726721EE36B917AE088A0D409081091CB3F04DD7EF77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 11KB
SHA256 680d7be4ffad7285054887c0a094190d648c545c790cb18ea4e2de7bbd615a33
MD5 07634eb5b5fe71cd8a81f4189f9c7f6e
SHA1 da4294570d7bfafc877823222a7aadcdb92c6e74
SHA512 b4e8c3fd802a821fd246db4537288ad74b3f4eb73a4c1cd61163cf1f0abc60cee57963e707fbc9f6da3e53957945eeb23a36ac23615fb81e26d24568db601b84
SSDEEP 96:G7Jy1olsSsrlaowf8a8mJuym+uD7J4W7KvRDw67vNJruDQEJnIu0:+kIZsE6+0n7gV5MBIV
TLSH
T1BC32BE5467EA1605F2F6ED72A9716721EE36B917AD088A0D4090810D1CB3F00EE7EF77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 11KB
SHA256 9ff0cc7e1b9005d806baeeb094a5b91557339d1ab00b785d2b4c79cfdd912e20
MD5 4f4d129bdaae4a091b8699f45bd51447
SHA1 f6ff138d373f4591fa07863871d515b591eb3a92
SHA512 24740bbd2e40860dfdbda780c591cccf57d6a05f01346a215b437a0981fa5ec0488a610bb4f3cc7948355ece7e89e4d2fc8cfb4b3ddf4c0acc3b87d4b6f8598c
SSDEEP 96:G7JzZlsSsrlaOwTy7Jy1olsSsrlaowf8a8mJuym+uYNJruDQEJnIu0:+tZsvkIZsE6+Z5MBIV
TLSH
T1D332BD5867EA1615F2F6DD71A9B26621EE36B9179D088E0D00D0810D1CB3F00EE7AF77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Harmless Asset Manager.lnk

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Harmless Asset Manager.lnk
Size 1KB
SHA256 bf2f97e9f58d42a4d6c4e5113f331a7fc7cce7c2470b2d2912728afe39f35c24
MD5 743a56c9c636bc921d135f8b0d88d835
SHA1 6b0817a8b4e90f1b72dc1d337243cf96f14b0394
SHA512 5cebc016f709c6f6e2dc1cd8ca93c3eca2294b087ec5f6dbe1c9496a7649f2fce06c7d9aca03ce17d4b78d95e26c9b7b0bf1cdbe5faf49861c5f5295831d07f2
TLSH
T1E921AF055ECE2715E6BF9D365BBE6222E370BC56EE16CF0C004002581CA7941DDB8F1B
MD5 SHA1 SHA512 TLSH

Submit Download

Harmless Asset Manager.lnk

Path C:\Users\Admin\Desktop\Harmless Asset Manager.lnk
Size 1KB
SHA256 2acfac54a1983021d56b334bcc53f1f5697aad1ad91cb2debcbd7fd9d3c6c232
MD5 1d33467d70c7d5e1cbde975177367c2d
SHA1 9c58277c7c25a7cbfd0919853cb6754b1390a8ec
SHA512 eb77aaba075135bce15c931d663b8f446f8daf675b9b895b3b70ab849787c0c4380544b735f1841f7b1ff046f859b518742d4560e6d80d8f5dcdede13a63dc35
TLSH
T12C217F015FCE1615E5BF6D3A6BBE7226E670BC669E06CE0D004442181CA7941DEB8B1E
MD5 SHA1 SHA512 TLSH

Submit Download

Harmless Asset Manager_3.8.0_x64-setup.exe.crdownload

Path C:\Users\Admin\Downloads\Harmless Asset Manager_3.8.0_x64-setup.exe.crdownload
Size 4.0MB
SHA256 da36b5cd45c5d5cfe2a89376c43e3c2ac741aebf8fdd3b98d4ffab260b90a168
MD5 688b47864c03dd10e5b5df2619a6d638
SHA1 e6e8eed2d1e3cf14ba94b49d21935e42bdd28e09
SHA512 58f453c2e40177962c415255b0ff56569cc62de0dcadfa215420ff83bc6e1b196cdd596714c2770eb9a56d7d49ceaec12678b7fc158af84862fa5c7e25a21178
SSDEEP 98304:i7OxBKiq2Kl2Zewe93M2eYfVFg0T6ZOwTRDZ54HGA:iiXKiqecc2e8g0eZtD/4x
TLSH
T1061633A57A73C623CC48BE36880BD4E6151A9ECA47F492D1F34285FE635E994D01B2F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4772-588-0x00000225E2AC0000-0x00000225E2AEB000-memory.dmp

Download

memory/4772-358-0x00007FFA23710000-0x00007FFA23711000-memory.dmp

Download

memory/5144-403-0x00007FFA23F40000-0x00007FFA23F41000-memory.dmp

Download

memory/5144-404-0x00007FFA23740000-0x00007FFA23741000-memory.dmp

Download

memory/5704-473-0x00007FFA23710000-0x00007FFA23711000-memory.dmp

Download

memory/7084-2645-0x000002AB53B00000-0x000002AB53B01000-memory.dmp

Download

memory/7084-2643-0x000002AB53B00000-0x000002AB53B01000-memory.dmp

Download

memory/7084-2642-0x000002AB53B00000-0x000002AB53B01000-memory.dmp

Download

memory/7084-2641-0x000002AB53B00000-0x000002AB53B01000-memory.dmp

Download

memory/7084-2640-0x000002AB53B00000-0x000002AB53B01000-memory.dmp

Download

memory/7084-2644-0x000002AB53B00000-0x000002AB53B01000-memory.dmp

Download

memory/7084-2634-0x000002AB53B00000-0x000002AB53B01000-memory.dmp

Download

memory/7084-2635-0x000002AB53B00000-0x000002AB53B01000-memory.dmp

Download

memory/7084-2646-0x000002AB53B00000-0x000002AB53B01000-memory.dmp

Download

memory/7084-2636-0x000002AB53B00000-0x000002AB53B01000-memory.dmp

Download