ec23f530ddb783c446387176d9ce9f5940a2c6d92fb0d3df5def3d34e46d9316

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 12:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
harmless-asset-manager.exe
Size 11.9MB
Sample260910-n9218ssfnd
SHA256 ec23f530ddb783c446387176d9ce9f5940a2c6d92fb0d3df5def3d34e46d9316
MD5 0d1c0e4f1524e700c94bd75390bfd8a8
SHA1 c5421200362cbfeb97e03db2bb80989150e971d9
SHA512 fdf4df4ae785080d2837fcdfc624c2a970f227ef84ba16190a8ebdcc43d7ce8f7a88d7909cd82e0589b78aca36a2e33990461a57766d8d5f5f6fe945c25d6c12
SSDEEP 98304:f/iV854u2QoMajpH3YtWlf9X0959SRwvvmH8VmsDBHjwN7bAF40ETHT/BBSn+:f+uMtYkf9s5UicAFSTHT/BC
TLSH
T11BC67B43F38184E9D0AEC574C76B9B72BB32F88D4521735B1BE44A222E1AB905F1C7D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	harmless-asset-manager.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 18 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_2036428493\female_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_2036428493\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_2036428493\ranked_dicts	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_1155514301\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_1155514301\metadata.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_2036428493\model.markov	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_2036428493\passwords.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_1370294824\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_1370294824\protocols.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_2036428493\english_wikipedia.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_2036428493\male_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_2036428493\surnames.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_2036428493\test.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_2036428493\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_1155514301\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_1155514301\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_2036428493\us_tv_and_film.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2536_1370294824\manifest.fingerprint	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\harmless-asset-manager	harmless-asset-manager.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\harmless-asset-manager\ = "URL:com.harmless.asset-manager protocol"	harmless-asset-manager.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\harmless-asset-manager\DefaultIcon	harmless-asset-manager.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\harmless-asset-manager\shell\open\command	harmless-asset-manager.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\harmless-asset-manager\shell	harmless-asset-manager.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\harmless-asset-manager\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\harmless-asset-manager.exe\" \"%1\""	harmless-asset-manager.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\harmless-asset-manager\URL Protocol	harmless-asset-manager.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\harmless-asset-manager\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\harmless-asset-manager.exe,0"	harmless-asset-manager.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\harmless-asset-manager\shell\open	harmless-asset-manager.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
836	msedgewebview2.exe
836	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
2536	msedgewebview2.exe
2536	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2440	harmless-asset-manager.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2440 wrote to memory of 2536	2440	harmless-asset-manager.exe	89
PID 2536 wrote to memory of 2780	2536	msedgewebview2.exe	90
PID 2536 wrote to memory of 2712	2536	msedgewebview2.exe	91
PID 2536 wrote to memory of 2712	2536	msedgewebview2.exe	91
PID 2536 wrote to memory of 2712	2536	msedgewebview2.exe	91
PID 2536 wrote to memory of 2712	2536	msedgewebview2.exe	91
PID 2536 wrote to memory of 2112	2536	msedgewebview2.exe	92
PID 2536 wrote to memory of 6036	2536	msedgewebview2.exe	93
PID 2536 wrote to memory of 6036	2536	msedgewebview2.exe	93
PID 2536 wrote to memory of 6036	2536	msedgewebview2.exe	93
PID 2536 wrote to memory of 5800	2536	msedgewebview2.exe	94
PID 2536 wrote to memory of 5800	2536	msedgewebview2.exe	94
PID 2536 wrote to memory of 5800	2536	msedgewebview2.exe	94
PID 2536 wrote to memory of 5800	2536	msedgewebview2.exe	94
PID 2536 wrote to memory of 5800	2536	msedgewebview2.exe	94
PID 2536 wrote to memory of 5892	2536	msedgewebview2.exe	95
PID 2536 wrote to memory of 5892	2536	msedgewebview2.exe	95
PID 2536 wrote to memory of 5892	2536	msedgewebview2.exe	95
PID 2536 wrote to memory of 5892	2536	msedgewebview2.exe	95
PID 2536 wrote to memory of 5892	2536	msedgewebview2.exe	95
PID 2536 wrote to memory of 3700	2536	msedgewebview2.exe	99
PID 2536 wrote to memory of 3700	2536	msedgewebview2.exe	99
PID 2536 wrote to memory of 3700	2536	msedgewebview2.exe	99
PID 2536 wrote to memory of 1844	2536	msedgewebview2.exe	100
PID 2536 wrote to memory of 1844	2536	msedgewebview2.exe	100
PID 2536 wrote to memory of 1844	2536	msedgewebview2.exe	100
PID 2536 wrote to memory of 836	2536	msedgewebview2.exe	101
PID 2536 wrote to memory of 4612	2536	msedgewebview2.exe	102
PID 2536 wrote to memory of 4612	2536	msedgewebview2.exe	102
PID 2536 wrote to memory of 4612	2536	msedgewebview2.exe	102

C:\Users\Admin\AppData\Local\Temp\harmless-asset-manager.exe
"C:\Users\Admin\AppData\Local\Temp\harmless-asset-manager.exe"
1⤵
- Checks whether UAC is enabled
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2440
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=2440.6016.17627094260816586857 /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:2536
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView /prefetch:4 /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x190,0x194,0x198,0x160,0x164,0x7ff9d7885fd8,0x7ff9d7885fe4,0x7ff9d7885ff0
    3⤵
    PID:2780
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1748 --field-trial-handle=1752,i,10689634819049726798,16218067178741617886,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452
    3⤵
    PID:2712
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2144 --field-trial-handle=1752,i,10689634819049726798,16218067178741617886,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452
    3⤵
    PID:2112
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2292 --field-trial-handle=1752,i,10689634819049726798,16218067178741617886,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452
    3⤵
    PID:6036
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3448 --field-trial-handle=1752,i,10689634819049726798,16218067178741617886,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452 /prefetch:1
    3⤵
    PID:5800
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3672 --field-trial-handle=1752,i,10689634819049726798,16218067178741617886,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452 /prefetch:1
    3⤵
    PID:5892
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4732 --field-trial-handle=1752,i,10689634819049726798,16218067178741617886,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452
    3⤵
    PID:3700
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4620 --field-trial-handle=1752,i,10689634819049726798,16218067178741617886,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452
    3⤵
    PID:1844
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4200 --field-trial-handle=1752,i,10689634819049726798,16218067178741617886,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:836
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.8.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3968 --field-trial-handle=1752,i,10689634819049726798,16218067178741617886,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452
    3⤵
    PID:4612

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 bb6ddd3ab95dadf3d2c8287a71421a5a90944e5fe63460a2e55f1b067d5b8297
MD5 c75b73f765ee0acee5d06801c30c167c
SHA1 6b00c3a3de479a27b27e02e0b5fe4d34bb49f532
SHA512 f1e7ec0b504a9583ee0b2eb2381e999c95cb0282c7d8366581d9f404a51b01beb32775f9ba2fb9e20d32fff17deb462d83cc911e8751b2bb6b21da168edc88f5
TLSH
T155D0121272120138C41024B3245366081804D50F40156088583C861E3B180E41A03483
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 82501b02b8e1bdd050eab47903c2af6c1bee174c8ca9535bf1f2e5c34b296643
MD5 b80df99793c9a0b5b2597c971b213905
SHA1 d1fa77316679678b78ac94ba610ef4482d5e6994
SHA512 2e49c925f229d28572e932486785ceb0c870c7c2ce65b25055a0454f035a1f15de7457df695a0c5cda5e414521d6f0bef7f176e84f27a943f3a43e4f06f6c2a0
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 4a7791fdfd2de4f168d4c48c39e80244d146975a4598fab38ca013b169eb3546
MD5 8d076e5b980e1ac2dc42dfa017473ff8
SHA1 439470f15427166ef8a80ec7271a1c1a9d79ce81
SHA512 fba4435a0b6d6281bb458c744020e4e1963135c113a3ef5725b0f63cebb8ac96289e6d7cfd75c33f0b03e4643eaae850079e4965b46d3b7db11be08802783cb7
TLSH
T1FCB01108A800A802E380833000CA00A2F8380A822F838A8B0EA0E8328830380230A800
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5999c5.TMP

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5999c5.TMP
Size 48B
SHA256 15fe2e9fbeb77551fcf906b38c3ae79999311e44247a306cb76b842098bdf04d
MD5 bebee0543cd595b33da75b69f631ac25
SHA1 423cd817272bd700d392a1da0b235577298dac76
SHA512 5d74a23aed458cdae94627f8e4bddec0ebcabfa7d4bb27781e9f2edac201604cdebb02c9c80f95f4398c61d1d967c4f5b9680b3bf318c374e14cc0e8e1ee22d4
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Network\Network Persistent State
Size 589B
SHA256 9a76f1df51afc5b12cabf82fcd86114725526ca81977e497d7ed508ab54ce71c
MD5 ca5275077312ff51fc7d7775302c6b36
SHA1 8ab53c90d283768562c084c26bb418657fe7edee
SHA512 9d66881399cd55bf69db3e7fc17adb31fa5f60e5f185365ae3a08ae33dd70430877ea510614a761ab28ebaf4f3c25e100697cbbb4f93dd7656680f9ea75bdbcb
TLSH
T1DAF0AC9292E8C6BE4A4213E536357853CC3A0805521C3E269DEDE79547E1074C11254E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a5db2.TMP

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Network\Network Persistent State~RFe5a5db2.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Preferences
Size 6KB
SHA256 3a90792429711a129d0c15563d2f4ae815f3fe94cd2374423ed003ce85926e72
MD5 90793bcc8f51868bf6bfb2b14e13b35b
SHA1 8d57e869fd47911065c160725c32b8f29f8fc931
SHA512 f6016355c6d0bb51e5b53f6164c611591b341d89726bc0d22263a20c16e57c42166b982ba2a0412f62408ba18e93de9ffb40b4a9afc4c9c96bf459fb6d26ac5c
SSDEEP 96:st8v/dPdZvMSG8b90ki3o5h16Z08yXs7/x+6MhmuecJ8ym4yZ1eje1cK+ggKyckz:stIB8honPXsV+FdPmrZQjGytMG6K
TLSH
T125D1C6025F28797B8CC7E509FA297B07E2F9A03164D51E98EBF8462C04DB6DD630794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

a11e5d06-cd00-423e-8e1d-75ed94f8eb62.tmp

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\a11e5d06-cd00-423e-8e1d-75ed94f8eb62.tmp
Size 6KB
SHA256 79753868ced5705ee3d14b6686ea738da7b5437b892222f1641ebbd49c397f9c
MD5 99f2535f81fa16b95b2ca19e2d241c4c
SHA1 d983601bc1d714975e9044ec718a602710b92f33
SHA512 026cfa9ffb8fdd7cce1f53abe893d54c40f6c410a91b4295b051be44a0768b6ffe3ee663b62d54b6d99b62989107cc53ef3ef66bde7d559677c3df64494a4971
SSDEEP 96:st8v/dPdZvMT8b90ki3o5h16Z08yXs7/x+6MhmuecJ8ym4yZ1eje1cK+ggKyPkeF:stIBahonPXsV+FdPmrZQjGytuG6K
TLSH
T16DD1A6025F28797B4CC7E509FA297A07E2F9A03164D51D98E7F8462C04DB6DD630794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State
Size 15KB
SHA256 59d96da7b04680a81953cbbbd8a62ceef536d7b144e2fc012f86dbd6dce79059
MD5 668cd0b4d2544c5459d9d37a8cf8d3be
SHA1 7922fe1e4ee5ea15d603afab1e7b7a6530ebb21c
SHA512 c5bbed2851abddad2fdc9f8f205ee3cb1bf2944b9e24012f59502abf9912f09bea301d54c4983337614ddb11783da5cf4943951c31ba809243d96a0e28e5f948
SSDEEP 384:h+aQikB+z/xvxjg/qhEwNBSkFE9f/BWk9z/K:s/UxvxjgC+sMXxFi
TLSH
T17872AE2BA5797E6395F3EA04794D0B4BCFB894B284C12DB84EAD5F0E02C73D81302C66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State
Size 2KB
SHA256 fba8a0b753df58b2c967675429524cbe4b1113f5a4870c2fe542ed0e40dfd844
MD5 6e0ac99841a42b1608433e3817e0311f
SHA1 7a1cb8d25e316e8ea5fcffc46bb0263e1bc97d15
SHA512 4497c17e1fb891a4b1eb9b53a2fb25a393381332f9e16a643000a2f71c95754b1d44815438844de55e16ea624944699e1583d685a9e74163d54612819dd67824
TLSH
T120516233A824ABB78DF34F49694A6F239E3990929E611F509ADD0B1901D769C2341CB7
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State
Size 3KB
SHA256 ea4900b278b9f423fc219ff5c66dd63890f4cc4528fc537b5fca2a8fe33297d4
MD5 3706750d5a4a60e6ff642b18275a6a9e
SHA1 0ed2c025228a6a850ac782e5ffdbe68233bf86cf
SHA512 a19dd54d0f58a4ec2ad4bd591a5bff39e7e597e6e6fae3dde1be95e756037490dd3a8a8dec59dfe064b5d57190d486dfcc77f7f8ec61a0bae49d82c4e0797d0a
TLSH
T117617327A974AA7B4DF38E05B88A2B13BB755023D9953F94DAEC0E0D01D729C2341C67
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe59485a.TMP

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State~RFe59485a.TMP
Size 1KB
SHA256 8c9a79550c77cc4129531de144de2a67bd025dec52be68712d268bdd876056cb
MD5 753cb395300bafa5bac4bf524b82f68c
SHA1 b852996f3b84b7c6bc2f4d2f7b33dd540d923301
SHA512 0306cb4ce22f96dd48b3e73fcf4700996a0f910212b01692bb0bbc4eebaae10490d5bea377c4510c2bf58a590e9f176dee6fb7ac3a0e6db7e3c3bcfd009903e6
TLSH
T1312154B3E4749BF3ACE21F46214BBB676E31505786504E4465DE8E2E02E218DA729C72
MD5 SHA1 SHA512 TLSH

Submit Download

memory/836-327-0x000001965D440000-0x000001965D441000-memory.dmp

Download

memory/836-319-0x000001965D440000-0x000001965D441000-memory.dmp

Download

memory/836-321-0x000001965D440000-0x000001965D441000-memory.dmp

Download

memory/836-326-0x000001965D440000-0x000001965D441000-memory.dmp

Download

memory/836-329-0x000001965D440000-0x000001965D441000-memory.dmp

Download

memory/836-330-0x000001965D440000-0x000001965D441000-memory.dmp

Download

memory/836-328-0x000001965D440000-0x000001965D441000-memory.dmp

Download

memory/836-325-0x000001965D440000-0x000001965D441000-memory.dmp

Download

memory/2712-19-0x00007FF9F9450000-0x00007FF9F9451000-memory.dmp

Download

memory/3700-250-0x00007FF9FA0C0000-0x00007FF9FA0C1000-memory.dmp

Download

memory/3700-251-0x00007FF9F82E0000-0x00007FF9F82E1000-memory.dmp

Download

memory/5800-101-0x00007FF9F9450000-0x00007FF9F9451000-memory.dmp

Download