21e51b97550016cddac31f4b229ffac7af3fd1050a7e8a1f5a89c64aee7da044

Analysis

user interaction
yes
max time kernel
39s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/10/2026, 14:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Harmonizer-Windows-x64-Setup.exe
Size 40.4MB
Sample261003-rcr2jszfkh
SHA256 21e51b97550016cddac31f4b229ffac7af3fd1050a7e8a1f5a89c64aee7da044
MD5 9053bbe6fe803256b8f3ee8a7200c6cf
SHA1 8a35a22bddf99bab35a99726f50c0d024bd350cf
SHA512 b605ebeebc39cab02c52eaff71eb1519c478f62ca324a6203be35045d9ab54f1b4eaf23b85dc2754f18b350704d72dbe54441cc51145955f6ca6445b0f653674
SSDEEP 786432:5yvLtuDyNiJblmEMG2/2f1x38yNyUUZRPJz5JwsmPzbleqkG:0vBumgNog2guJNHJwsUZeLG
TLSH
T18D97333BE28B653DE52A15743AB2D216493BBE2164234C12A3FCF48CDF651701E3EA57
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution installer

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
1092	Harmonizer-Windows-x64-Setup.tmp
3384	harmonizer_web.exe

Loads dropped DLL 64 IoCs

pid	Process
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe
3384	harmonizer_web.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Enumerates connected drives 3 TTPs 1 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

ioc	Process
\??\F:\	powershell.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
3412	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4152	cmd.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Harmonizer-Windows-x64-Setup.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Harmonizer-Windows-x64-Setup.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4364	msedge.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral2/memory/5136-1-0x0000000000320000-0x0000000000409000-memory.dmp	innosetup
behavioral2/memory/5136-8-0x0000000000320000-0x0000000000409000-memory.dmp	innosetup
behavioral2/memory/5136-372-0x0000000000320000-0x0000000000409000-memory.dmp	innosetup

Enumerates system info in registry 2 TTPs 2 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1092	Harmonizer-Windows-x64-Setup.tmp
1092	Harmonizer-Windows-x64-Setup.tmp
3412	powershell.exe
3412	powershell.exe
3412	powershell.exe
3412	powershell.exe
3412	powershell.exe
3412	powershell.exe
3412	powershell.exe
3412	powershell.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	3412	powershell.exe
Token: 33	4644	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4644	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1092	Harmonizer-Windows-x64-Setup.tmp

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 5136 wrote to memory of 1092	5136	Harmonizer-Windows-x64-Setup.exe	89
PID 1092 wrote to memory of 4152	1092	Harmonizer-Windows-x64-Setup.tmp	91
PID 4152 wrote to memory of 3412	4152	cmd.exe	93
PID 3412 wrote to memory of 3384	3412	powershell.exe	95
PID 3412 wrote to memory of 5376	3412	powershell.exe	97
PID 5376 wrote to memory of 5656	5376	msedge.exe	98

C:\Users\Admin\AppData\Local\Temp\Harmonizer-Windows-x64-Setup.exe
"C:\Users\Admin\AppData\Local\Temp\Harmonizer-Windows-x64-Setup.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5136
- C:\Users\Admin\AppData\Local\Temp\is-QM3YP4E7AF.tmp\Harmonizer-Windows-x64-Setup.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-QM3YP4E7AF.tmp\Harmonizer-Windows-x64-Setup.tmp" /SL5="$400B4,41163910,893952,C:\Users\Admin\AppData\Local\Temp\Harmonizer-Windows-x64-Setup.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1092
- - C:\Windows\system32\cmd.exe
    "C:\Windows\system32\cmd.exe" /C ""C:\Users\Admin\AppData\Local\Programs\Harmonizer\Harmonizer.cmd""
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:4152
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell.exe -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Programs\Harmonizer\Harmonizer.ps1"
      4⤵
      Enumerates connected drives
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of WriteProcessMemory
      PID:3412
    - - C:\Users\Admin\AppData\Local\Programs\Harmonizer\harmonizer_web.exe
        
        "C:\Users\Admin\AppData\Local\Programs\Harmonizer\harmonizer_web.exe" --port 8794
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:3384
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://127.0.0.1:8794/
        5⤵
        Enumerates system info in registry
        Suspicious use of WriteProcessMemory
        
        PID:5376
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x304,0x7ff80beec188,0x7ff80beec194,0x7ff80beec1a0
        6⤵
        
        PID:5656
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,3101564858614431576,18218852494527399079,262144 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:2
        6⤵
        
        PID:5284
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1696,i,11366188030373533757,12463821555057843386,524288 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:11
        6⤵
        System Time Discovery
        
        PID:4364
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,4978680096678029213,831404540589872142,524288 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:13
        6⤵
        
        PID:3492
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3352,i,7273406119715076071,3271414386235225097,2097152 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
        6⤵
        
        PID:4720
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3376,i,16561112121112687489,13423404198043692966,2097152 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
        6⤵
        
        PID:2748
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,15838206698927706493,16683842561671601695,2097152 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:1
        6⤵
        
        PID:5924
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,983448576537874556,18416705667728065762,2097152 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:9
        6⤵
        
        PID:3288
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3576,i,12352261319686404205,588921666092737513,2097152 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:1
        6⤵
        
        PID:3780
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,6206990807510363002,10630192530110197339,524288 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:14
        6⤵
        
        PID:5892
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5596,i,5813054722206804886,17899194167609326884,524288 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:14
        6⤵
        
        PID:4184
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5580,i,4129601802546127383,13275383198260507783,524288 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:14
        6⤵
        
        PID:4396
      - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4916,i,689301253177772020,705093977133965034,524288 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:14
        6⤵
        
        PID:4792
      - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4916,i,689301253177772020,705093977133965034,524288 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:14
        6⤵
        
        PID:2312
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,1063623229090209185,4121474242892292676,524288 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:14
        6⤵
        
        PID:2608
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6712,i,6666967724898491489,14461008960686929673,524288 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=6928 /prefetch:14
        6⤵
        
        PID:2692
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,1014889731688585295,8438913415815095763,524288 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:14
        6⤵
        
        PID:5004
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,526883627602238871,15045036101013226374,524288 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=7096 /prefetch:14
        6⤵
        
        PID:4912
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,7786730015206612471,15828485595732722439,524288 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=744 /prefetch:14
        6⤵
        
        PID:2716
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,5976372840348838038,12739423865855572042,524288 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=1284 /prefetch:14
        6⤵
        
        PID:260
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6360,i,17191382970787559281,4330960217526969565,524288 --field-trial-handle=2224,i,14095085602315169539,9236539540257563319,262144 --variations-seed-version --mojo-platform-channel-handle=924 /prefetch:14
        6⤵
        
        PID:2752

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004E8 0x00000000000004E0
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4644

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5796

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5548

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4192

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
PID:1592

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1738ec4e-a726-47a3-9277-0c00e4b59b23.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1738ec4e-a726-47a3-9277-0c00e4b59b23.tmp
Size 33KB
SHA256 9fe10b98df4b6943cadc53786fe37c9574bdb9020c0df65e04aa3dfb89c57ab4
MD5 bf7f48ffc7e881e431c52f5887b23136
SHA1 6fe54a915c85195b358feb9c3a5630c294177a53
SHA512 cd8819db1c939de25060d699fc21309c081915f4b976003426c68a2785f53dbf43d35f838e11a907800646ffc8e11ca9564c5be151efe6f329b3a669db0a4fe8
SSDEEP 768:/V3oXKkzc7fZrKEp5XSwQs88uBkiT2j2snhI:/V3eKLtrvILNBi2shI
TLSH
T1D3F2B034EC949DB3ACFA93857B8637066FF0A057D8C40A54C9DEA31E058376E274B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3756d8bf-7f73-400f-89c3-e2d3eb2f4a5b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3756d8bf-7f73-400f-89c3-e2d3eb2f4a5b.tmp
Size 33KB
SHA256 c0d6b15d3586d8607d09d3bc9f60372f86f96477eebbeb7a84101313693350a5
MD5 5727c118a1847df6067da6596d758e24
SHA1 a1784b373a8d5c397be0d4d1f4236e0059e29847
SHA512 92f9822a4d9a3bd25e46654e8304a43a7de22f80e06f0c68ea3262937ebf0229c0633463972a39968938c9d359865b942a5b3d9c51d4e01e99e2b1ba9029e816
SSDEEP 768:Tb3hXKkzc7fZrKEp5XSwQs88uBkiT2j2snhI:Tb3hKLtrvILNBi2shI
TLSH
T14EF2B034EC949DB3ACFA93857B8637066FF0A057D8C40A54C9DEA31E058376E274B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

430b3e3e-0898-40fc-b485-23e089009630.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\430b3e3e-0898-40fc-b485-23e089009630.tmp
Size 42KB
SHA256 32968d8379a7c2b4124a94a5f91a74cdae0275b6184edca820f1b7665f64dc8e
MD5 becfbbe02e1227b8fd3caa292acbc9db
SHA1 0caff18fe44701db9983a11f07d75a6083a250ee
SHA512 63d14cc48f4a6c46d36122285a57f99c426306d4b711371a21724d3117433dc3010993640dff5d03ee379fdee737ac9d3151b491a3774d8e72479970bf34c7e7
SSDEEP 768:hFnl3rwgEXKUHgerKChp5XSwQs88uBkiT2j2snhI:Hl3QKerrPILNBi2shI
TLSH
T1501359F598D38976E8AE4783673D2E069EBCD053B4884984B7C9591DCC832BFD30B852
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67f0b974-2943-4006-a70a-d77ccc7abac5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\67f0b974-2943-4006-a70a-d77ccc7abac5.tmp
Size 37KB
SHA256 1d66464c4ae228c2fe805f9ba531d6eb40896bc166209c1a0d1da6ba4b6aa57f
MD5 f34d4a0de0fd721882fc540a007e5657
SHA1 afdedee9d05f7470bd91bc25cfe07e3c33755d80
SHA512 bacae1fff865ccf37b1f4ff5b75f9705bca3882ee26eccba4c12deb4540f15e3c5534dd9d79c91dd4026601d93e7d4c258bb7b7544a591d3c51074ba335ed212
SSDEEP 768:R/UxvxjgC+W3g/ac7fZrKZp5XSwQs88uBkiTCo/P84g:kZj3+W3gRtrOILNBpHg
TLSH
T11D03D039EC946863ACF3A385375A235BAFF06053C4C41B9849EE7A1E039735DA307897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

79216dae-8686-4ba6-9c6c-3e010338b2d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\79216dae-8686-4ba6-9c6c-3e010338b2d4.tmp
Size 38KB
SHA256 6069da8c67455615bbbea0cadf9b7edf9b42566289a224eb1e9742550dd1855d
MD5 6d2a7ed0af68aa5d63b632f0776d67be
SHA1 b3d37f1d1decefe32151cd00e7d50417eaed3c79
SHA512 4e6ced00e5f46e48e6d7441b10c5bd6306e533b4d0ad7f513a740924e86af9a3692130e50840a8cb1294d0383638688d95b3bc67603aef862562993d05097542
SSDEEP 768://UxvxjgC+m3hXKMzc7fZrKEp5XSwQs88uBkiT2jo3bL:SZj3+m3hKjtrdILNBiorL
TLSH
T1B003C039FC945C63ACF6A345374A279BAFF06063C4C40E5C89DE961E068736E274B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

15fd3440-b347-4a29-8d2c-a90ef834684a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\15fd3440-b347-4a29-8d2c-a90ef834684a.tmp
Size 29KB
SHA256 f2b14e22dac461bfc4d3cd0ad5c9f448340b653a00c53fae683e7fe37a28ab0b
MD5 6a7c9fb50bae63ed838ec369d27dbf53
SHA1 67717b269d89787c2ffd0ab2d37c64274217639c
SHA512 8f56e6d7cb17be788669a548dcbd7a3c16548f83d6c722e2a95a9df001fad69c752d6b5195208402ad9142021e73dd9fb52a4a94703e4895e37a187661f2e8ca
SSDEEP 768:U/pCDx7pLuLbLmWg8KfrL8F1+UoAYDCx9Tuqh0VfUC9xbog/OVyXuyhp0roJVE:U/pCDnEbLmWg8KfrLu1jaBXu8pffE
TLSH
T1DED2E97B740CCA7F4F804ADDA8197A9B6DA902CB9A98CD4047FE942C02C77EB51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69cda6d4-0f9b-4497-859d-a4b588f467ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\69cda6d4-0f9b-4497-859d-a4b588f467ec.tmp
Size 12KB
SHA256 17fd4d2917437f3349f0cd7b593bdc8798c797ed67e61ef2b6cad29cf0eb8a9a
MD5 a28c4a41504361b745d76f82ff512580
SHA1 656f21cd2842370efb48c4ad174f4fc608999508
SHA512 8ca61ca3c492990b7ed9e43cbcbeba1a6d86487e34e6e9baacb050f947f59e1567a7f885229f64fd40e5b2e12af707ccddeabde27fd6c6355a4c7676deebceab
SSDEEP 192:sxRCR7Cp/fcs2bZU2G6m5zoA8p+0/g6+WNGMyh/YHb8QrGU4IgD/kJ:sxRCUp/fcs2VUsjX/5I/CU8
TLSH
T17E42BA199D28A97B8CCBD61DFB557F53D3F99032A1D01E48A6FC862C08E76DE520740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b4e284e-e6cc-4218-9f63-30771a997888.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8b4e284e-e6cc-4218-9f63-30771a997888.tmp
Size 11KB
SHA256 b19b6d195a0fc327e9f1eb404351c7862535ef356ed6e6664191ce23adba7ad2
MD5 fe192263743d285029fe911b3f02e7f3
SHA1 547d1a8301fd71370648585bb8d0fce00358484e
SHA512 f52c7bf6f6a06d32916199141711e763692e408a311eb6b9086e714f5b2e6f9d727b5ddc21f3e8d3680c0ae24eda8b582ccf36b8e61b32e65086a907847f811d
SSDEEP 192:sxRBR7Cp/fcsabZU2G6m5zoA8p+0/g6+WNGMyh/YHb8QrGU4IgVkJ:sxRBUp/fcsaVUsjX/5I/CUO
TLSH
T1A742A919AD28A97B8CC7D61DBB557F53D3F95032A1D01E08A6FD8A2C08E76DE520740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 e04da820ee40894da90458dfcccd790f4fbe641b7e903c0397706827f9fda30c
MD5 2315ef4679b805919ee92b63cb73afdd
SHA1 b4531abb76223d7d2bed03742d48b629e575a778
SHA512 8e681f16dda80e136270cf9f8e0becdc74d5fe2909309129bec1ec49f1dd7cea5dd7de37032645699fc47adcb2ef3cd8453e74c3ac5156143b6a31ba691b8c59
TLSH
T19F5181871DB18070D76840F4C4E023873EB525B06AE31E0546BBFEB4BF8A3D28289828
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 28346bd00529fcc55d4b5f2d848e90a0aa47d2e8b1ecb6c2bbb0b97177aabae4
MD5 d62af035580c92eec54fd9d845c8bdb5
SHA1 d4f739bcea7e1059c79847e21e9045486f169cd1
SHA512 7c40df66a712ef1f1a91a25193d7f62a7945bc2cc670af92d2e73b48d10c61cbedfa7ba2c6590ba234100a25c92dc3e055846ba5af01f84d4a459c05ce89c5f0
TLSH
T1FC5183871EB18070D76854F4D4E063873EF565B16AE31E0646BBFEB4BF4E3D29189828
MD5 SHA1 SHA512 TLSH

Submit Download

a10922a9-730a-472f-b554-3bd0c3653f41.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\a10922a9-730a-472f-b554-3bd0c3653f41.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

78af882c-8250-4e90-a4c9-9e7fd113f2ce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\78af882c-8250-4e90-a4c9-9e7fd113f2ce.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

da8a1666-97f7-4054-8882-ab02eb802d40.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\da8a1666-97f7-4054-8882-ab02eb802d40.tmp
Size 2KB
SHA256 28fc5c1a21afdb66b2c4105bc245995521906e033cf42109572d3d9333dfa5be
MD5 33d22af650a5129993efbe62f902c71a
SHA1 81388e32fe929c360b14674ced90a2aff5879e84
SHA512 955c852eb2c1485f6a9f6163f52df0cfad583268c020782c592e836cb7c98b83195d570edf16cedcf132fb59ff9ae16cd91d21e33567cb38963f5a025c2123f4
TLSH
T11B5180F3C3F8866DC90156F4AB186E2BCE1D0954432C7D5AC8E49E5B93E24B1E14159F
MD5 SHA1 SHA512 TLSH

Submit Download

e6efc72f-f2a6-4c9e-825e-5611426c14a3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e6efc72f-f2a6-4c9e-825e-5611426c14a3.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

a795e67f-365e-4810-a37e-3b33eaf82509.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a795e67f-365e-4810-a37e-3b33eaf82509.tmp
Size 12KB
SHA256 5d525bdebda44898de17979b25f14eeb5fc5ad3ace3c3888d504ce41ae867ba8
MD5 1afc3ea22d5dbfd1ccf7c6c388fef402
SHA1 74922169945a3fda00bac7a4cb2ae79ea9d611e5
SHA512 289bb267773d03e1b04d0fe0007b703889839735d124a00302a436628b58aaac43fb330430708d18765a2fd230713a6199ca7ff052a1d3997ab8285f6bd1f304
SSDEEP 192:sxRCR7Cp/fcsLbZU2G6m5zoA8p+0/g6+WNGMyh/YHb89rGU4IgDNkJ:sxRCUp/fcsLVUsjX/5I/VUi
TLSH
T1B342CA19AD28A97B8CCBD61DFB557F53D3F9903290D01E48A6FC8A2C08E76DE520740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ade669e7-4add-4c34-bd24-22b8ef9b0571.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ade669e7-4add-4c34-bd24-22b8ef9b0571.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

bb7ecfa6-7b64-43ba-84ba-81c5162127d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\bb7ecfa6-7b64-43ba-84ba-81c5162127d4.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a143072-6adc-45c7-8eba-4ff15c98694c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\9a143072-6adc-45c7-8eba-4ff15c98694c.tmp
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

e986ee33-e1d2-4292-a62e-deab2b627de3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e986ee33-e1d2-4292-a62e-deab2b627de3.tmp
Size 33KB
SHA256 79320fc61994d4ade60508192276ec889820dc444b7a33507d696a1df34d11b6
MD5 97db5097e074a22879b2fb46e5f66715
SHA1 7eaa793ae86130324ce25902151e42bc43a5c46d
SHA512 adf6ebdbb50880e24322bd5bbd2542e3588c27bd0095fa4031cc5b02a26dc436fe44bc0c73676548f4f4fc02a5fdb7433e154f6293691f7ebb49f0be50d68fd3
SSDEEP 768:OV34XKkzc7fZrKEp5XSwQs88uBkiT2j2snhI:OV3uKLtrvILNBi2shI
TLSH
T18DF2AF34EC949DB3ACFA93857B8637066FF0A057D8C40A44C9DE931E058376E274B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eaf115ee-15ed-47ce-9406-ea311352ebd8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\eaf115ee-15ed-47ce-9406-ea311352ebd8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

Harmonizer.cmd

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\Harmonizer.cmd
Size 90B
SHA256 ae82ded49ad5b9a8a26b47ac2deacb09380253563fba53379c12fb53fba417c8
MD5 fbdfc4ba88e7e89dfc573b468d9344ae
SHA1 82651ebc0c9810ce1de7de7e302cb36453fc51c7
SHA512 3e0d885e66cf5739102ea779c8a43bd817b30a8f1a0cd31e74ac8112de24466de0b516975750022196f6c1d422d62bcc02239c3d5430edc20d2a3101e92eb584
TLSH
T149B01201D10AC74E31539C2520D580F4182F5102120545C231221239A48A354C1691C5
MD5 SHA1 SHA512 TLSH

Submit Download

Harmonizer.ps1

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\Harmonizer.ps1
Size 1KB
SHA256 dd0f31f5119aeccee7cd2dc5414a7c3decefc8e249bef35ec075f1cd7872f5af
MD5 cd8a233820a5d8c290ed6cbd5e96a710
SHA1 82edeab4140c74a5feff2fa4f193f32a96ee294c
SHA512 553ed99dbc1a801b4447e14746f2789ad04cc7fbe3a6c2c8deae37aa7a3056f762f7c1c7a2befb32584bc8e7b1563de850102a961979fcba22a112fd8c450958
TLSH
T12331540F1B2E3212D5FC875BB9A186CBE69E803F06232928791C79451F72B798785F45
MD5 SHA1 SHA512 TLSH

Submit Download

avcodec-62.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\avcodec-62.dll
Size 19.5MB
SHA256 22655479df918b7b10df3dde5132efb1b711c7c52100fa04ec714aa39245ed53
MD5 fec9f81e3c8b59324ff78669b4efd23c
SHA1 3d0dcdbfbd89daf0bae2710ce559fa70876b0a75
SHA512 96041a1d31682b520557b1e3f68451656148d83cadbe672b61f3a96a654af2067ed9c2bf2d48d85492275b5fc8106ba37f72bcb54f630f2e97173aa85decb4f5
SSDEEP 196608:OFYkYpB6cB5lFzfV4BbBLMUcmSTeE3o/msFEUuAaTd49r56uyhqOs2fegx9:O6lH49tTcmX/mNUuTdsIuyhPs2h3
TLSH
T143278D4EF1A361ECC627E470427EAF27FA24349C40146D7697A5CA706D63FC06B1AF98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avformat-62.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\avformat-62.dll
Size 2.8MB
SHA256 622426112f45fb74367a370d2461946790139b22ac0deaa303d621d180bd0898
MD5 9b0d7bdc2bc57664ca7ac2f475e4247c
SHA1 fd72d71c5b444ddf8aa598d6102aa524d932df6f
SHA512 71a3101acd2828d5adbf310334a02545218201d8688fee94738a734ea545d5b3705f7e741a28588a868fd1c7579eabc87f6d59985bd2c64565768cf20440dbf7
SSDEEP 49152:5rPiuY4/whRHeC8XQCQm/c6lYybDEF91V4V2eiB+Dnck57hq/:NPioYAUmE6yTNOck57hq/
TLSH
T104D56D53E1A324ECC66BC135476B9732FA31B8581131BEBF1694CB342F56FA0571EA28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avutil-60.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\avutil-60.dll
Size 1.2MB
SHA256 ef01b970dbdc6ba59dd8b388dfff71a96bb35c4405bda755cd797aba3e38b7c6
MD5 e4840010837ccb9277637cf78a093f88
SHA1 0120c9e3797b3b831a5f733d2dca12f5983f978d
SHA512 f807b706e88ba3cc9a326ca26c0d7174dc41e431be3ea1b335a7419a0c032d405e20a213a9d8b735e18cd56a955d936b2bfd89b654f23bf1c44e7663371a4b83
SSDEEP 12288:RwHfEuSzukXdc7KesnTDx8ITl8jRSTh8Es2pK3ysnRmR+p8qqqqqqqrqqqqqqqqK:GHfVSzukNOKesTaIT0i9Svo8rA1D2jGd
TLSH
T116556B06E5E214BDC16B903086AB7A67FA31344985607E7F67A18D342F64F902D8FF39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

harmonizer_web.exe

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\harmonizer_web.exe
Size 1023KB
SHA256 8b29f601f19fee80ec27b3fc328879b649b161ebd29479db8476f30e727d8c13
MD5 70c2f449d94c23fa1ddc6c6eb69dbc25
SHA1 0e30f5ac84351645b5d9c3b5e27f6a39d62c7b06
SHA512 31b542a1cefb5601fae8e3b95e03a196fc7c7cee43ebada5ee43e07060f8f79fad768898c5fd60609be2fc7fe1d36666842e2046d0f2c83160271a7e6c8b2ab8
SSDEEP 12288:yqGvOGre9qNm2lwxkYqduGwsJiWjhb3GpSQecqtgSNa8eD7Adu+ZFBD:s8qNmSrAwiW53GacsgE9lZFBD
TLSH
T1DB255B52EECA5CEDC503E2B5558BD733B234BCA5C2286F7B0994E6301F27A905E4BB14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libFLAC.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libFLAC.dll
Size 456KB
SHA256 1288d518f0e84488b009a89b523d0cd83fe48916d5907576e5528eb67de89293
MD5 eae898e368ce02e44180b1fb920dabbe
SHA1 bf4da6041c1639f577cecbb8d3bc827e2f202a30
SHA512 afaf6394accd425e67bc1a1a0595ddbc300798eff19b199fa10b83135a1b0be43cd5aff35745d172e244babb07e26d49da090f3fd72fe76c4ba65506e103032a
SSDEEP 12288:sqXdxtbJ5pEo88ZQCfMj6UMVrVYqH0NXY43W0:ZxtbJQo8fsMj8YqUVY43W0
TLSH
T163A48D8EF79325ECD63BE57406A69BB3F83174195124AC7B57A1CA301E22F402B1EE74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libaubio-5.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libaubio-5.dll
Size 188KB
SHA256 6f7e8ce8521494d73207d34e6c627233e6a34aeb29cec0c1c8a2ff467badb44d
MD5 3a2eaa0d9321861d3cfc628562eb09e7
SHA1 3977e5e2938bb1acd5347b4c44991000122c8579
SHA512 13ee3d34724ae6945bd8ef21208a98889dc8cd51ee543c4d335cb59c1189b0e363a889a3ca8e1459229b9a3dda41818693ebd72d0107b94ddc29fd9dabc6c80d
SSDEEP 3072:+VMYw7zmoAYF172CDPchkCnrvl5Ri6b8P9Ouqt6fS84xnX58kwxVA6uim+xHeybw:JJj6Dhkazl5Rm9lS2rHJFF3k
TLSH
T1F4143B6B718358FDD6678130629AAF73B432B4214361ED3F8BE0CB345E25D50AE8BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libbluray-3.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libbluray-3.dll
Size 364KB
SHA256 39536de31a5257c03d4340ee6607d9cb9b7996771077f8260327cdae044af1fd
MD5 b617dc513fb9a0917abf95944d85285b
SHA1 9127ee01e30b782434c8024bcb73f68a880332c7
SHA512 cc80f1870b48ff3833e7c9d895c324471b14b0503231ca6cfab9b7ed91f48b3da0fad4e01b17f120e6fbc7cc9767f9ba7d56526ce3ba72ddae7f54ea41a09e10
SSDEEP 6144:ex43J1FkJjBSiQIxXSCq3HPKnebc54baLCH7kk1SE6zGag4vT3Q:33J1FSBSifiHSubrS1/xvT3Q
TLSH
T1D0843B6BE3A328EDDA67C13486979772F471746C4220BD7E4658CB302E70D906B3DA2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libbz2-1.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libbz2-1.dll
Size 76KB
SHA256 669a4bf9266d5f020e843aa5fd75b93ce8ebde27014d5ac466a8b3cf39d8aba7
MD5 6b3421ee5222837efb4358f16ffefa90
SHA1 1e04b9f81109d16e875bbc26707c557bbb3abcbc
SHA512 5d27b5ea949264ab5480dca5dd11bb72a5f23cbb119984a23ee854435b0ed8d12ff4a539b3fadc1269dbe864a3379cc89ef95048df1627f825bbdca4a9148f06
SSDEEP 1536:dEhYO5rt8z1kmtrPa2xUpvo1W/ykFk618RBRcSnbqQcmXdZ:3OFGkirPXkvokKkWJRBR/t9
TLSH
T1AA734B29E1D25E8EC553823091974A2BEFB1FC2C0B1067339654E17B6EA3F614E6D70A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libfftw3f-3.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libfftw3f-3.dll
Size 4.3MB
SHA256 8342e0ea84f21c00946a573232621f0fcdc6cd08b9a9dc98446828585dbe031e
MD5 a878ad79893ebd0b0f75552df17f31a8
SHA1 7a8b6f951aa7f031613d9eef21e9b75b615cec7b
SHA512 286850e9b0060c2cfe8f30220428360b97b5f0c95a145d366eb4b3481690648560dfcb6019c8c1668d494d83a0acf3dff9f2aea038513422577b8f56a67a8c03
SSDEEP 49152:D0NySk0/rhkwAWLhehSIMW177VZ+zyV6VhxPeD6AzS3sHE7pPRlZz1v6yVjB3u:DMkiawAW9IZ1/7kDh0GR6yB3u
TLSH
T187267D42FAEAC6D6E137783060DAFB37F7143810980C0A67B7A0C9C4AF963947E56D65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libgcc_s_seh-1.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libgcc_s_seh-1.dll
Size 149KB
SHA256 ff139cfe956709283f7b70a06af8bc8bb9d1c3bef60ec1bc8d363c91351cfeb2
MD5 95d00ee412acf8f9c25f970a62f343ef
SHA1 6ce3b63bcc5f6f1374afb29a1efe7493e876033c
SHA512 2a7808c161475020facc316d743892861bd351bee64a8439ce94d1151ef8f3c78fea0a4d3263f7a312b0fc75f5a33bd2c40bb2af0944ca1d926e6b87b397f94d
SSDEEP 3072:rw+y6qw8B9UwUgE3MYjbFSlHAvzt6JMRM8QcirYuFA:rwnUkMpoz0iwuFA
TLSH
T1EEE32956F59360F8C697E2709A835FB5E833BC340330A8731799FA386CA2F819A1D751
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libgme.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libgme.dll
Size 363KB
SHA256 98e306bc1443f4f5a0744baf0477d2f856594bb3f8036440ad7cb1f30a1f5a72
MD5 68981824f78c0105a7f023f0168398a6
SHA1 bfdf11f1e22950028a3647c8d60a0ee07f78f090
SHA512 fd648ed3c2e172cf13843ae2cb19a0cf36de477a49b190d33506724f592cf496466295e42173dc51fd2e98a2cf9c45e4fa518040255083fe4ac61aaa1d5ad687
SSDEEP 6144:nV6/PfxdsqnAAWiQXCjwhg9fSHrQ9RR85yU8aUf5mBnqgF3g:nVSXuAWhEHfkkRxf5mBn/F3g
TLSH
T165847C8BF6A39AACC6B7D5348157CBB1FE37781011286D3B0AD4EB341D23D505A1AEB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libgnutls-30.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libgnutls-30.dll
Size 2.2MB
SHA256 f7f05c96572506c81f2ffa89b518234afa4af2603aad8903db257a4f1e97e9e6
MD5 23431c5fd1f64111f46894323881e46a
SHA1 e6f637189908da9ceff08137b5f6af977dfc16bb
SHA512 be95d85fa8e23509f9931b074c4333a2986e1faaed5f8ba32fd282a5a5873f2081c8b7b5368052a67ee63809e7c88b5d617b2308ce205c4a3fa8c17ed9fa06f3
SSDEEP 49152:KLksV5zR3r1NcbWlkrzHQZUNXdUyUjMctOx9B2GtlqAX2RawEAOtXk2XAxOCOqFo:SViBwuUyUj4DmRBOCOqFIx
TLSH
T116B54912F6D264DCCA77C134CA53A372B672BC149930ED7B6E84FA745F31EA0522AE14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libiconv-2.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libiconv-2.dll
Size 1.1MB
SHA256 94ec68fb8d342b6c91b6b48a8d95092819cdcd006a7166e0b68062f946afd08a
MD5 f8739ae787ae7ee2d4e4d92b56ca4848
SHA1 4b0dee9d119a00b901c885f64a62c253474516da
SHA512 44ae7c5d63a06fc2391dcf83d2fbfe931f1cb9425e56ab126fe7ed2081a1c750d645681c8c82e189f4286be16d4b407b4dde80ba577937d33c99caa71a700071
SSDEEP 24576:st4X1BAUZLY3wPKU7VbbTOZGavkg3NyeuQ6l9fH+f0f:FX1BAUZLYgiU7IZGaXBuQQ9e0f
TLSH
T1DB35CE62F3D3CB2BF263C6B0C96A5B26E427EC216B0645373660B3BC5D337A414C8566
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libmodplug-1.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libmodplug-1.dll
Size 388KB
SHA256 d1425827ff8c5cc81dfc66d7d5660e9ea9bfda8ada71255a0c4847d0889ea62b
MD5 389a62970e11b8e874896dcc7732c7c0
SHA1 b3670758c785454f03c49d9c0596e7ee90238442
SHA512 c5fd17841628dfaeafc1f134dbb6838aa99986df8e3b2df2658bfb54359e41e8b68c395abef42090b31a24221e7bad97e9b2f99ae50edb5e331fdb346e1b6dd2
SSDEEP 12288:BN6afHfJupeQpup4lq8vh/+ttCORWF6UD:BxnJuMp4lq8P4WF6UD
TLSH
T1C6847C4AF2D364FCC257D5B442679AB3F536B8A51210ADBB97D0DB302C71E802A1DE39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libmp3lame-0.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libmp3lame-0.dll
Size 321KB
SHA256 7ae709bf841478222fc468d6aa08cdb47a683feb40ff13fe9fb36359333d4559
MD5 42f05745edbe3b58e3ecafbc85967f5b
SHA1 9a6a48103c2fdb53db8824a1f96d08a0c7e8568f
SHA512 42cdb972b92592f367fe335c4c3b5ed273b2cb3a52940c2e570ddadc12a2e105971408f7ea78ccab36cf00961ec87d6fb13c6ff6e8dca9d896d6796f90bd23ee
SSDEEP 6144:aSd/fPAniP5MoL3rr7IThAaVfALx10vZIzcdJchqedzvxMZJvR3l:p7Sq3rnMFu0vpJFedzvxuJvR3l
TLSH
T1F6645C07E29399EDC167E03082A3BB73F531742447106D6B1B90DB386E72E609F9BB65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libmpg123-0.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libmpg123-0.dll
Size 442KB
SHA256 11da503fc243474b4ddf005ae631e5e804fdadb45956d87530ed216b228b5e58
MD5 6aa811979bc402d323bdef2753ebd349
SHA1 e3dcb6e3bf7120040ae8ce39cd140de1857a84a4
SHA512 4ad02a19a40488a68c4d386fe1d0d2d64f9725ed163453304c989a7d7a52bcfa82f39c21590b5c2b93b299e276e4f003c117cae91483fe83531c2802a946572c
SSDEEP 12288:GDOa/SPt68zwWPavyY+WoRA5cYUiiO6ShE:XPU8zwWPavD1nmYUiiO6ShE
TLSH
T14AA47C17F2D369ECD22BC0344256A77BF53278140610AFFB1794D6302E72EA11FAAB65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libogg-0.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libogg-0.dll
Size 40KB
SHA256 2f102fba6f2a49516be85cb2643f6a9ba394dc5657aedb3ea235b6603c12d3d2
MD5 31c2afebed8cc8b7db533f2af126de4e
SHA1 08ca0ca773d629d9af17669be6ce237ac0279224
SHA512 611a7c1115357a6bff46d86bb8b0dbeeb7387da8302c89d48210d21dc5b244b038d829e81e893b00daebd2560111d34da76fd021d31f8551de8c6faec92c55d9
SSDEEP 768:Q6LtmEslo15cwI0cu3+35i7Qi+GtUplY5atL3G3QVM:VJmEsOGwIPQ+3KH3w3G3QVM
TLSH
T1DF135B4BBB93A89DE42AE1B585FEF7B1F4BA781D9601A9334380D3350D76C505E38C98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libportaudio.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libportaudio.dll
Size 284KB
SHA256 d7960c7db4f37796f7179f2fc2437efe205599fcfbb302e2309e7bcd206dcab3
MD5 d6ec381482defde8eb90c6502c9cac6f
SHA1 8792cc9f624a0f6fa39938f4d58d1822cd8b9c6b
SHA512 7878a4d8512da6e46ce9381d828644a8d06bbd80d08c35717980cc5692357bd975c4bfa4a75504663500e9284e748c59eea2bd7ad3d26128fe05fdcc61e25679
SSDEEP 6144:qIQNIEtkViBE/T0r2G/GCdwfw9eyqfYfdALpSah:qIQNLtkVyY0r2G/Ywv8Lph
TLSH
T186544C52F3A374FCC667C13452A7AB72F931B8145124AD7B8B90DB312E72F10A62DA35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

librtmp-1.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\librtmp-1.dll
Size 114KB
SHA256 f9fecc5ce88e647cdc5960f125a91d9ed2e66f1ff812ee4160da69b0d416e5e2
MD5 45d2f94c7ac77397cfaf7039e2dfae5a
SHA1 c3edccd21acfdbfe58133c8e0b25d711d8e85787
SHA512 0cf5803476c7b7079ae6c9b5de1d8b422569750711fb3559431de35285d7eb97538c3e455f6936c9d172f9b2c4041d68f5c7ab2e6b352f974f96a99fcc0a1fd8
SSDEEP 1536:s6mVmBMlwG5jJ21RxxSANnQIyvgh3ksNWPIEA9T/lLaUL5FJ54nl3FvQ3pW1jHGJ:sqoAx1QIugxkcOIEAh/EAgVF4pJ
TLSH
T1CAB34A1BF28264DDC157D134C2965733F635B8182A31BB7F0795CA31AE11FA0AE2DEA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libsamplerate-0.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libsamplerate-0.dll
Size 1.4MB
SHA256 4f7f9b2ecea84bb8f5b27c8f36e85e8a100663c745ac25e82a512f485b663ac7
MD5 2eb49ce376c37b94d854bd99ba240f23
SHA1 c22e5cd5f2d9eb454cdfa74363fa6efd79306895
SHA512 a17885fe231aa010979f5967fbb8c36da59d003555175d00c37511bb154db359f702a2de1a841ae18973ddfe0923b663cdca42ea341ead012e8e88730b838b30
SSDEEP 24576:9RA8OHrdSLdcpo4pg97PeAesDPJi3vsjpRUZhPWar1T1FbySKCyqQmGF2nxKeyMr:fAPrdudcpo42JKsDxi3EjDox9ToCQWn3
TLSH
T17365236B58C35E4AC126D136F281D239EB33B7EE76BEB8D10600E0342AB7D86D54674D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libsndfile-1.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libsndfile-1.dll
Size 699KB
SHA256 ed508fd72ba87bb6f294ced3dddc2178df58e364f693fcb128ac20c4bf875b50
MD5 1c548978549439c5b92a1704c16ee0e8
SHA1 db93ffbdf57bd501e0d3371014c1967cafb8034a
SHA512 8545ba0314aa2b5ffeee83261e3ea9ca09e9280d47aa51a4e89853ea1c74b4f0fd34e218ca64fb1102c56d2fc2b3419b59b69c5717bf332322f3e3f0013f41b7
SSDEEP 12288:6k8b28wfdB+t1dVrrm47E2KKwcszDv7fC52cAvlrSe1Gkgm:6kqmwdxB7E2KKwcszDvMAtrSe1Gkgm
TLSH
T126E47E6AE1E354ADC13BD67052BAAB36F93170151234AD2F13A4DB301E93F925B5BF08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libsrt.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libsrt.dll
Size 826KB
SHA256 f4074a1cc3cc46fe06a6e5e9faa5b17573bfce21913b639d6610d5ef797a8652
MD5 5de2b0d97adb80508c221c352872855c
SHA1 d96388426d8ad5bb804033fc73419bc2ed9a234f
SHA512 2213c0ee7a84f71b0300148cb222f034f2bea99ec9629cdc7b4a8248158fec57278f6d5646d2d60b30d4135560d33a3041fb0c990bc4b483942aeb59d904aa31
SSDEEP 12288:SZqGlOgJEEjNMEnYgDIVBWZQmaIp5GskDtnBvc4CtKNVC2HbxyhF5VWbkxdaXD2Z:UFnMy0n3vsVbRGM+wa+ZOxtXMh
TLSH
T1F6053A13E29351ECC1ABD178975B6232F672B84C91387EBB43A4DB312F61E90931DB19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libssh.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libssh.dll
Size 607KB
SHA256 23bd66d6fb72166c3d3c02788ee172ac8de1b2a289e5a556485dd342bfb6ad35
MD5 ff019aaa54f3ac96095d93fc7886b75a
SHA1 c617b1e61154562131c043bf88bcfc8749630bf4
SHA512 afaa7ec50b2ea2aef966a43023e84c87d5f7d3ce7976e78b2a4c27b8e8ff53f9eda3229b06d901b5dbfbf7a369c784041137996ccae75b135628042a311e5d6a
SSDEEP 12288:CF7cLvYZwkbYN0bDUrdAG2PA+abqxN244zSvGe3PRo7O:CF7cLqwkkN0uAFwje3PRo7O
TLSH
T17BD41727E29324ECC56BC135826B9772F932F4184634BD7F0758CA346F64EA0177AB68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libstdc++-6.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libstdc++-6.dll
Size 2.5MB
SHA256 d9a58184f6bb27936ef03c3a3286950e4aa61c66a9f74dfa94a532b1433b368d
MD5 0a4f103c27515cef84c1ad80d1a9f008
SHA1 bbf09b3ea8165e02e776c06baacc795e13b6d86b
SHA512 d2ccb9f00443541940dec012759950f0404b017b27c06623cb0a826cde847bbca4210a89e467dd4c718930e2024619e82bd3f6bbd2e184c0028d8b1267458b45
SSDEEP 49152:Hl+omF2LJpWciPL9bMiTsAisBBcKUYigrgvpcn7TYIPpGtXk:HlqTPREsBBc89fjPpGtXk
TLSH
T1ABC55C03E6934CA8C9EBE7B4525B5736E620FC1989387D7F5E9CC7302B61E40562EB60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libva.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libva.dll
Size 279KB
SHA256 20591e45edfcbf7f4b5735f9096b19be9796b0f61d1ab041f39d2732357593ae
MD5 f432b8a7d0a8ed8d4a9d8cb2e2b57e0e
SHA1 e632183d9cf3d058601b1d8455891fecc10c5ba8
SHA512 722e7ca251fa03315d5ce4751038abe65806ff107e3699f82812423fc825130766e867f6edabda5d645c8651999dc249117d0b6e76ea92a3bcfdc8432d800363
SSDEEP 6144:SyG8oT55UttLlWYQEubU2vXDy42jU879Ycrf2qRGi0xaPwmIBm:SR8oT/UTLwJA27/8yu+qRPwmIBm
TLSH
T1225409279323107AF9EBB27796C2D57178717041C260FEBB39E4CA389901DA1DF69D28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libva_win32.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libva_win32.dll
Size 17KB
SHA256 2721e9c28099699b6d723d3d56671ca46db21a5bdb9e2c41df516da17d6539b7
MD5 3c9aba0c01614d754414a68ca8b4d88f
SHA1 c3cf7906bbe609b09d1c9d8d87386a2f56709eeb
SHA512 c73abd90f174a16be3938c372c893e4252a26298f715dbe3fb4e664943217b1ce507cd35222249b580b750ca4ff2e27a4966ea2ebcbbc4a4391b3b5c93c315e1
SSDEEP 192:vgIdk/p0IX7D9ZCjj7Lc+Xt1Ixj/DMKHnGSRTPecv+Zf5fqACXC5r3pFjiw+c:PA3FwDIxDgUeC+ZRyvy51Few+c
TLSH
T12782C81DFA425DAFC9E7C2B890DB4BB0F9B5F8009726E6360760E0745EB1BA5C53C984
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libvpl-2.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libvpl-2.dll
Size 469KB
SHA256 88bd6fece68ebad05d3e78581455bb902cc1d3930018931d0830616097e74d73
MD5 71b3504343766285be2de7f27813b0f5
SHA1 da009f3c9f034041909e96cc92e630883aaeb097
SHA512 df4e0246ab1c0580428db3c60691d33eea3ab6dd6b4296463c14bbb9b746a6d9b8b048f689c24adcf24becb19f7dcbd0fb3f2ed54273ad22b563e5be50553034
SSDEEP 12288:e4RZgHfTe/Sk2ti8K45rxPl+rM+yb37NBS9b:FyG4JxPlMyz7NBS9b
TLSH
T102A41927E1A355ECC1AFD17446936277F6717C188139BEAB1690CF321F62FB08229B64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libwinpthread-1.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libwinpthread-1.dll
Size 63KB
SHA256 4bd23b274a3a96ff8114d0069e69177fd0c88911a987f530fabc12a2cc5b5ecc
MD5 23c436eaddecc7f552a5739030e74570
SHA1 e75b4f3b4dd07ea22076aee3a71a3d0de02841ee
SHA512 5db0777dd32ff3c26edca1178fe16d983c252f244039e235a52001fb228f3bd9037426e9152ab5585591489a3f4668adb26a2e9efd34adab0525f17e25327dd5
SSDEEP 1536:euM8uYmQmtu8OpkbzHiRPPQTU9sLw3Gjku:et8u0mo2bzHiRPPQTU92w3M
TLSH
T14C53191BB39714FDC667C13884F70771B533B8111639AF2E9364D2362F78E628A2D998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libxml2-16.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\libxml2-16.dll
Size 1.2MB
SHA256 be9f24e4506b73812c5f477a079d4c45b5dc2630222783195e913fcabd6c7eab
MD5 87043f1140c0a03857fb51de95362342
SHA1 6333e5744d3ae4ba5ed6fe2357577f6653188c4f
SHA512 8752f3768e8ec2fa21793949bd2df871efe10bf377cf977bbb0c0dc373ffec9e76a6efeab4f48758fb52f65b89a90f35deb0e1b073ffc4cebff2c264fe5bbade
SSDEEP 24576:6ukIKepz6k7iMw5vVr9et6qT3sKSolQgpFsyLUNPp+3f:6uL/R6UiMqvVr3qT3sKSolNsyap+3f
TLSH
T170452A57E1A330FCC66BC23496AB6771B971F46411307EBF5098CA312F62D611B7EA28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

swresample-6.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\swresample-6.dll
Size 183KB
SHA256 7879bee355885b1a6e888c878b35f99f1409f55177d9c6b4245df67db8d336f5
MD5 74928b7e6d2ebcd48bd2a2fc64628c2c
SHA1 00dd78a704944cd3108c064babc49b4f1afe9176
SHA512 cd803adefe29d58a63b624e0bc20943ae3ea0c56cd5278e634354e855a1a2c35c332ab022cbb74383429c65820c1b6f598f664ec97a9d7caf720616ac1ff7ff6
SSDEEP 3072:anvIBOh3ccBdHtNsLpcJYdyrhskpKNDZF5:avf3ccBdNuCvpKZZF5
TLSH
T1F2044BE9E893AEBDCB3794B445BE7D62F950306C21946C77D3E1C930A8736808B29F51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\web\index.html
Size 91KB
SHA256 ae9bbc3c6467bf8b594dbeba8dc01422eeeb7ffef416fbdb70d2b407eaa2aeab
MD5 b418c8e9c292147a4dc43582d90c35c3
SHA1 8184a53ebe33ee8c0c32bb6d3a776d720237675b
SHA512 bef3589299ac355e972ee9b37c6f86eabcd4f091b89190731a9071e57353fd8e8c593fcaa09d1c2cd48120d75100c1eafbbf645fe32b9d34ef81f9b54c030407
SSDEEP 1536:7kUIjMAtoG2ahu9aG8O64KDoQ6TuJc2YmvlgZNoicF:wW0BOIYnCvlgroiU
TLSH
T18593B7399834263A457363BAFB974104FA394213A605A6D57DACDF450FF3810A2A7FEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zlib1.dll

Path C:\Users\Admin\AppData\Local\Programs\Harmonizer\zlib1.dll
Size 124KB
SHA256 11cd91171765cd65f1c3362e3df67e5f5a618a6b88c8cdec899b802eaf1c7b0d
MD5 a59cbbe90d948f3e929d72d0ff921126
SHA1 367f3297e2018a5ef9d7abf13997454c0ba51a8b
SHA512 925d2c58ef9c859902764013d84875a44dfc691639f32d987b88b98e5e4758477636892bcbedb3dee6c21417ede809df3da49e263e158f138dbd7ccdaa7bcbb3
SSDEEP 3072:wws++EwY6wsz6G8DN30Fl8JQebsw+O3iCzkwx1wsHkmYh2tCp9tjWF3U:bXQwW3FlO7LGUCp9BWF3U
TLSH
T115C36B5BFA9364FEC667C17082D38BB1F131B81117246EBB8154D7742E21E506B1CABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

422af4c3-d36b-4a4a-91bf-9f8e85add8fe.tmp

Path C:\Users\Admin\AppData\Local\Temp\422af4c3-d36b-4a4a-91bf-9f8e85add8fe.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

6effa617-b723-4088-91e7-c39accc46777.tmp

Path C:\Users\Admin\AppData\Local\Temp\6effa617-b723-4088-91e7-c39accc46777.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Harmonizer-Windows-x64-Setup.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-QM3YP4E7AF.tmp\Harmonizer-Windows-x64-Setup.tmp
Size 4.2MB
SHA256 9d7ff03f5ed697ac85061d317d0f6e167f4e8704b622cb4443bc0875eda8f0cf
MD5 83637a038e6f01c16634e1189fa537f0
SHA1 abd2eacd5c358ecc895d0b9cc9ed5bf5d5b3bdf8
SHA512 ffdbef5cdc515de659b8548a442d207ebea9cd03e5df4b750cff4503447b3309bf352978dcf0b9d2dab49304c079277dda559780531efeb9b73ac19b6f2475d5
SSDEEP 98304:5YU5hnuOajWwMPdCpepI3GrwrA+Js333Pz:7xuHjWfZIzez
TLSH
T18B268F03F388753EE4571A3A583FA280983F7A213915CD4B6BFC295C8F396416D2A797
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5376_302939350\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5376_318629356\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

memory/1092-370-0x0000000000240000-0x000000000068B000-memory.dmp

Download

memory/1092-6-0x00000000011F0000-0x00000000011F1000-memory.dmp

Download

memory/1092-10-0x00000000011F0000-0x00000000011F1000-memory.dmp

Download

memory/1092-9-0x0000000000240000-0x000000000068B000-memory.dmp

Download

memory/1092-166-0x0000000000240000-0x000000000068B000-memory.dmp

Download

memory/1592-872-0x0000017B07120000-0x0000017B07121000-memory.dmp

Download

memory/1592-866-0x0000017B07120000-0x0000017B07121000-memory.dmp

Download

memory/1592-868-0x0000017B07120000-0x0000017B07121000-memory.dmp

Download

memory/1592-874-0x0000017B07120000-0x0000017B07121000-memory.dmp

Download

memory/1592-875-0x0000017B07120000-0x0000017B07121000-memory.dmp

Download

memory/1592-873-0x0000017B07120000-0x0000017B07121000-memory.dmp

Download

memory/3384-539-0x00007FF82A7D0000-0x00007FF82A7F2000-memory.dmp

Download

memory/3384-529-0x00007FF8344A0000-0x00007FF8344D5000-memory.dmp

Download

memory/3384-538-0x00007FF819CB0000-0x00007FF819DA0000-memory.dmp

Download

memory/3384-542-0x00007FF819C10000-0x00007FF819CAC000-memory.dmp

Download

memory/3384-532-0x00007FF820CC0000-0x00007FF82111D000-memory.dmp

Download

memory/3384-527-0x00007FF821120000-0x00007FF821297000-memory.dmp

Download

memory/3384-526-0x00007FF8212A0000-0x00007FF821570000-memory.dmp

Download

memory/3384-525-0x00007FF821570000-0x00007FF8217C1000-memory.dmp

Download

memory/3384-562-0x00007FF80DC10000-0x00007FF80DCC6000-memory.dmp

Download

memory/3384-561-0x00007FF824420000-0x00007FF824436000-memory.dmp

Download

memory/3384-560-0x00007FF82A1C0000-0x00007FF82A1D5000-memory.dmp

Download

memory/3384-559-0x00007FF8132D0000-0x00007FF813349000-memory.dmp

Download

memory/3384-556-0x00007FF8136A0000-0x00007FF813715000-memory.dmp

Download

memory/3384-554-0x00007FF822D80000-0x00007FF822DDE000-memory.dmp

Download

memory/3384-553-0x00007FF8230B0000-0x00007FF8230F9000-memory.dmp

Download

memory/3384-524-0x00007FF8217D0000-0x00007FF821A5F000-memory.dmp

Download

memory/3384-552-0x00007FF8137F0000-0x00007FF81389D000-memory.dmp

Download

memory/3384-550-0x00007FF817950000-0x00007FF8179E5000-memory.dmp

Download

memory/3384-548-0x00007FF8179F0000-0x00007FF817A6E000-memory.dmp

Download

memory/3384-549-0x00007FF828250000-0x00007FF828283000-memory.dmp

Download

memory/3384-547-0x00007FF82A510000-0x00007FF82A521000-memory.dmp

Download

memory/3384-545-0x00007FF8195A0000-0x00007FF819622000-memory.dmp

Download

memory/3384-541-0x00007FF828FB0000-0x00007FF828FD5000-memory.dmp

Download

memory/3384-519-0x00007FF682EB0000-0x00007FF682F83000-memory.dmp

Download

memory/3384-523-0x00007FF8344E0000-0x00007FF834514000-memory.dmp

Download

memory/3384-536-0x00007FF822720000-0x00007FF82279B000-memory.dmp

Download

memory/3384-535-0x00007FF828FE0000-0x00007FF829062000-memory.dmp

Download

memory/3384-533-0x00007FF829070000-0x00007FF8290D0000-memory.dmp

Download

memory/3384-543-0x00007FF819AD0000-0x00007FF819C06000-memory.dmp

Download

memory/3384-534-0x00007FF82BD70000-0x00007FF82BD8A000-memory.dmp

Download

memory/3384-530-0x00007FF82B6E0000-0x00007FF82B72B000-memory.dmp

Download

memory/3384-531-0x00007FF83B820000-0x00007FF83B82C000-memory.dmp

Download

memory/3384-528-0x00007FF82A1E0000-0x00007FF82A297000-memory.dmp

Download

memory/3384-537-0x00007FF820BA0000-0x00007FF820CBE000-memory.dmp

Download

memory/3384-522-0x00007FF839FE0000-0x00007FF83A00B000-memory.dmp

Download

memory/3384-521-0x00007FF834560000-0x00007FF8345AD000-memory.dmp

Download

memory/3384-520-0x00007FF83B830000-0x00007FF83B846000-memory.dmp

Download

memory/3384-563-0x00007FF831450000-0x00007FF83145E000-memory.dmp

Download

memory/3384-558-0x00007FF813350000-0x00007FF813551000-memory.dmp

Download

memory/3384-540-0x00007FF813B70000-0x00007FF815592000-memory.dmp

Download

memory/3384-557-0x00007FF813560000-0x00007FF813693000-memory.dmp

Download

memory/3384-690-0x00007FF682EB0000-0x00007FF682F83000-memory.dmp

Download

memory/3384-695-0x00007FF8217D0000-0x00007FF821A5F000-memory.dmp

Download

memory/3384-691-0x00007FF83B830000-0x00007FF83B846000-memory.dmp

Download

memory/3384-555-0x00007FF813720000-0x00007FF8137E8000-memory.dmp

Download

memory/3384-551-0x00007FF8138A0000-0x00007FF813927000-memory.dmp

Download

memory/3384-546-0x00007FF813930000-0x00007FF813B67000-memory.dmp

Download

memory/3384-544-0x00007FF819630000-0x00007FF819707000-memory.dmp

Download

memory/3384-759-0x00007FF682EB0000-0x00007FF682F83000-memory.dmp

Download

memory/3384-764-0x00007FF8217D0000-0x00007FF821A5F000-memory.dmp

Download

memory/3384-804-0x00007FF682EB0000-0x00007FF682F83000-memory.dmp

Download

memory/3384-809-0x00007FF8217D0000-0x00007FF821A5F000-memory.dmp

Download

memory/3412-379-0x00007FF820190000-0x00007FF820B34000-memory.dmp

Download

memory/3412-383-0x00007FF820190000-0x00007FF820B34000-memory.dmp

Download

memory/3412-373-0x00007FF82031F000-0x00007FF820320000-memory.dmp

Download

memory/3412-374-0x00007FF820190000-0x00007FF820B34000-memory.dmp

Download

memory/3412-377-0x00007FF820190000-0x00007FF820B34000-memory.dmp

Download

memory/3412-378-0x0000021BFC5C0000-0x0000021BFC5E2000-memory.dmp

Download

memory/3412-385-0x00007FF820190000-0x00007FF820B34000-memory.dmp

Download

memory/3412-564-0x00007FF820190000-0x00007FF820B34000-memory.dmp

Download

memory/3412-386-0x00007FF820190000-0x00007FF820B34000-memory.dmp

Download

memory/3412-382-0x00007FF820190000-0x00007FF820B34000-memory.dmp

Download

memory/3412-381-0x00007FF820190000-0x00007FF820B34000-memory.dmp

Download

memory/3412-384-0x00007FF820190000-0x00007FF820B34000-memory.dmp

Download

memory/5136-8-0x0000000000320000-0x0000000000409000-memory.dmp

Download

memory/5136-372-0x0000000000320000-0x0000000000409000-memory.dmp

Download

memory/5136-1-0x0000000000320000-0x0000000000409000-memory.dmp

Download