Overview

overview

8

Static

static

3

Asset Mana....2.exe

windows10-2004-x64

6

Asset Mana....2.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

8

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-ltsc_2024-x64

3

Asset Mana...io.exe

windows10-2004-x64

7

LICENSES.c...m.html

windows10-2004-x64

3

LICENSES.c...m.html

windows11-ltsc_2024-x64

3

d3dcompiler_47.dll

windows10-2004-x64

1

dxcompiler.dll

windows10-2004-x64

1

dxil.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

resources/app.js

windows10-2004-x64

3

resources/app.js

windows11-ltsc_2024-x64

3

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-ltsc_2024-x64

3

resources/...ry.dll

windows10-2004-x64

1

resources/...ry.dll

windows11-ltsc_2024-x64

1

vk_swiftshader.dll

windows10-2004-x64

1

vulkan-1.dll

windows10-2004-x64

1

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

8

$PLUGINSDI...7z.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    899s
  • max time network
    750s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    13/10/2026, 22:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Asset Manager Studio.exe
  • Size 212.7MB
  • Sample261013-15cl1ade39
  • SHA256 5f03d35c7a0b6b61a950edd0e92d32c88295f4d8d0ac44361cd9f4cfdab83f1b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryspywarestealer

Malware Config

Signatures

  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

    spywarestealer
  • Checks computer location settings 2 TTPs 9 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: LoadsDriver 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of WriteProcessMemory 23 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe
    "C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe"
    1⤵
    • Checks computer location settings
    • Reads the TCP/IP host and domain name from the registry
    • Checks SCSI registry key(s)
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:2972
    • C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe
      "C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1924,i,3462712650740196354,12023376454520531822,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1928,i,502109482356155375,17377056948182346933,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1920 /prefetch:2
      2⤵
        PID:4588
      • C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe
        "C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --field-trial-handle=1924,i,3462712650740196354,12023376454520531822,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1928,i,502109482356155375,17377056948182346933,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2288 /prefetch:3
        2⤵
        • Reads the TCP/IP host and domain name from the registry
        PID:4440
      • C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe
        "C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1791938458250340 --launch-time-ticks=568228492 --field-trial-handle=1924,i,3462712650740196354,12023376454520531822,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1928,i,502109482356155375,17377056948182346933,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2696 /prefetch:1
        2⤵
        • Checks computer location settings
        PID:4700
      • C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe
        "C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1791938458250340 --launch-time-ticks=568645175 --field-trial-handle=1924,i,3462712650740196354,12023376454520531822,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1928,i,502109482356155375,17377056948182346933,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3644 /prefetch:1
        2⤵
        • Checks computer location settings
        PID:4356
      • C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe
        "C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --time-ticks-at-unix-epoch=-1791938458250340 --launch-time-ticks=568716791 --field-trial-handle=1924,i,3462712650740196354,12023376454520531822,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1928,i,502109482356155375,17377056948182346933,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3924 /prefetch:1
        2⤵
        • Checks computer location settings
        PID:1376
      • C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe
        "C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --time-ticks-at-unix-epoch=-1791938458250340 --launch-time-ticks=569536887 --field-trial-handle=1924,i,3462712650740196354,12023376454520531822,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1928,i,502109482356155375,17377056948182346933,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4200 /prefetch:1
        2⤵
        • Checks computer location settings
        PID:4036
      • C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe
        "C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-epoch=-1791938458250340 --launch-time-ticks=570644263 --field-trial-handle=1924,i,3462712650740196354,12023376454520531822,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1928,i,502109482356155375,17377056948182346933,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3952 /prefetch:1
        2⤵
        • Checks computer location settings
        PID:4420
      • C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe
        "C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --time-ticks-at-unix-epoch=-1791938458250340 --launch-time-ticks=570915831 --field-trial-handle=1924,i,3462712650740196354,12023376454520531822,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1928,i,502109482356155375,17377056948182346933,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4340 /prefetch:1
        2⤵
        • Checks computer location settings
        PID:1036
      • C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe
        "C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1924,i,3462712650740196354,12023376454520531822,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1928,i,502109482356155375,17377056948182346933,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=2808 /prefetch:8
        2⤵
        • Suspicious behavior: EnumeratesProcesses
        PID:1440
      • C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe
        "C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --time-ticks-at-unix-epoch=-1791938458250340 --launch-time-ticks=696303423 --field-trial-handle=1924,i,3462712650740196354,12023376454520531822,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1928,i,502109482356155375,17377056948182346933,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4592 /prefetch:1
        2⤵
        • Checks computer location settings
        PID:4592
      • C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe
        "C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --time-ticks-at-unix-epoch=-1791938458250340 --launch-time-ticks=700393628 --field-trial-handle=1924,i,3462712650740196354,12023376454520531822,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1928,i,502109482356155375,17377056948182346933,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4904 /prefetch:1
        2⤵
        • Checks computer location settings
        PID:4376
      • C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe
        "C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --field-trial-handle=1924,i,3462712650740196354,12023376454520531822,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1928,i,502109482356155375,17377056948182346933,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4536 /prefetch:8
        2⤵
        • Modifies registry class
        PID:3268
      • C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe
        "C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --field-trial-handle=1924,i,3462712650740196354,12023376454520531822,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1928,i,502109482356155375,17377056948182346933,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=2632 /prefetch:8
        2⤵
          PID:4976

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            temp-index
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Code Cache\js\index-dir\temp-index
            • Size 48B
            • SHA256 c4eff404819279592572a15cec57fca842214973e84ace5dfc20c89b4ca147dc
            • MD5 SHA1 SHA512
            Submit Download

            temp-index
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Code Cache\js\index-dir\temp-index
            • Size 96B
            • SHA256 ea9b9254212505c89b8a60a413aaefeaba198e5f12c51dc0fdc471ef51374bde
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            temp-index
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Code Cache\js\index-dir\temp-index
            • Size 408B
            • SHA256 3aa595007ae5ac7af2ce9eba9c104e94941de9a446409e8e5a85c07f84a645f0
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            data_0
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\GPUCache\data_0
            • Size 8KB
            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            data_1
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\GPUCache\data_1
            • Size 264KB
            • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            data_2
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\GPUCache\data_2
            • Size 8KB
            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            data_3
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\GPUCache\data_3
            • Size 8KB
            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            CURRENT
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Local Storage\leveldb\CURRENT
            • Size 16B
            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
            • MD5 SHA1 SHA512
            Submit Download

            140f91ec-4e55-47b2-9765-774221b2078a.tmp
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Network\140f91ec-4e55-47b2-9765-774221b2078a.tmp
            • Size 804B
            • SHA256 423a9c3a5d3ba00cc153d95560a108641d751164607619463375f3b6696be4bd
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            Network Persistent State
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Network\Network Persistent State
            • Size 59B
            • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            bda337c0-1f0d-4751-b88d-f195a4ff3ffc.tmp
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Network\bda337c0-1f0d-4751-b88d-f195a4ff3ffc.tmp
            • Size 3KB
            • SHA256 422e4f82bc6cd9aba06a57f29259a5e156b2a1fd19af9d47038e9f004b12aa62
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            Preferences
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Preferences
            • Size 93B
            • SHA256 529b6595a4727a6b2d6cc154ae51f426216c01fc7fda02de2460abfb3de118a4
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            MANIFEST-000001
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Session Storage\MANIFEST-000001
            • Size 41B
            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
            • MD5 SHA1 SHA512
            Submit Download

            index
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\WebStorage\2\CacheStorage\d8e72df1-d2b1-4fe0-bd92-362f3ff10612\index
            • Size 24B
            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
            • MD5 SHA1 SHA512
            Submit Download

            the-real-index
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\WebStorage\2\CacheStorage\d8e72df1-d2b1-4fe0-bd92-362f3ff10612\index-dir\the-real-index
            • Size 48B
            • SHA256 942fe1932c31c60a8beee5770c9b6d6ed304c09fa04891e1e8636aae305be495
            • MD5 SHA1 SHA512
            Submit Download

            index.txt
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\WebStorage\2\CacheStorage\index.txt
            • Size 180B
            • SHA256 da83347000388166872694377f4aa4f7f7c68a1efc71a9b33766db4bf84671a0
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            index.txt.tmp
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\WebStorage\2\CacheStorage\index.txt.tmp
            • Size 93B
            • SHA256 36cdbfd8ebc59c711a12e23528fc41c0e64ba1c760b99390d6066562e2512682
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            b93f1023-7369-4c88-89d7-3b68edc58f4f.tmp
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\b93f1023-7369-4c88-89d7-3b68edc58f4f.tmp
            • Size 168B
            • SHA256 127de74f47d397d0f04b36c50bcc283c76a1b09ff6049b4199f8d10fe42ff836
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            default.dic
            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
            • Size 2B
            • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
            • MD5 SHA1 SHA512
            Submit Download

            memory/1036-170-0x000001D7E7DF0000-0x000001D7E8265000-memory.dmp
            Download

            memory/1036-249-0x000001D7E7DF0000-0x000001D7E8265000-memory.dmp
            Download

            memory/1376-125-0x000001FF9D1E0000-0x000001FF9D655000-memory.dmp
            Download

            memory/1440-238-0x0000018F16B80000-0x0000018F16B81000-memory.dmp
            Download

            memory/1440-234-0x0000018F16B80000-0x0000018F16B81000-memory.dmp
            Download

            memory/1440-233-0x0000018F16B80000-0x0000018F16B81000-memory.dmp
            Download

            memory/1440-241-0x0000018F16B80000-0x0000018F16B81000-memory.dmp
            Download

            memory/1440-244-0x0000018F16B80000-0x0000018F16B81000-memory.dmp
            Download

            memory/1440-243-0x0000018F16B80000-0x0000018F16B81000-memory.dmp
            Download

            memory/1440-242-0x0000018F16B80000-0x0000018F16B81000-memory.dmp
            Download

            memory/1440-240-0x0000018F16B80000-0x0000018F16B81000-memory.dmp
            Download

            memory/1440-239-0x0000018F16B80000-0x0000018F16B81000-memory.dmp
            Download

            memory/1440-232-0x0000018F16B80000-0x0000018F16B81000-memory.dmp
            Download

            memory/4036-169-0x0000024A1D9B0000-0x0000024A1DE25000-memory.dmp
            Download

            memory/4036-254-0x0000024A1D9B0000-0x0000024A1DE25000-memory.dmp
            Download

            memory/4356-216-0x00000234D9880000-0x00000234D9CF5000-memory.dmp
            Download

            memory/4356-168-0x00000234D9880000-0x00000234D9CF5000-memory.dmp
            Download

            memory/4356-418-0x00000234D9880000-0x00000234D9CF5000-memory.dmp
            Download

            memory/4376-475-0x000002158CA10000-0x000002158CE85000-memory.dmp
            Download

            memory/4376-331-0x000002158CA10000-0x000002158CE85000-memory.dmp
            Download

            memory/4376-379-0x000002158CA10000-0x000002158CE85000-memory.dmp
            Download

            memory/4420-138-0x0000021514330000-0x00000215147A5000-memory.dmp
            Download

            memory/4592-356-0x000001D122660000-0x000001D122AD5000-memory.dmp
            Download

            memory/4592-388-0x000001D122660000-0x000001D122AD5000-memory.dmp
            Download

            memory/4592-328-0x000001D122660000-0x000001D122AD5000-memory.dmp
            Download

            memory/4700-19-0x00007FF821750000-0x00007FF821751000-memory.dmp
            Download

            memory/4700-20-0x00007FF821E90000-0x00007FF821E91000-memory.dmp
            Download

            memory/4700-167-0x0000025617BC0000-0x0000025618035000-memory.dmp
            Download

            memory/4700-191-0x0000025617BC0000-0x0000025618035000-memory.dmp
            Download