7140b82af1f91eb84bfcc5f05941e039b960c97c36c5f76263c81b00bafd7cad

Analysis

user interaction
yes
max time kernel
68s
max time network
81s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 21:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Harmless Asset Manager_3.11.0_x64-setup.exe
Size 4.1MB
Sample261102-1kh82sdt71
SHA256 7140b82af1f91eb84bfcc5f05941e039b960c97c36c5f76263c81b00bafd7cad
MD5 ec46be9a5154d0fe369b882a6b087e03
SHA1 974c1dff8a365476753b859bbad72383cc52faa6
SHA512 85fc29f51a10e7f29b9d14dc0bc05942ca7db5b759b0598fafa06ac721749d1fb3a6c46fd901284af2d6ea2deb051d5155c2ba55325f61df736736ab3288dfa3
SSDEEP 98304:yG6JGarfAtUzWnW2cW/mRBVlH7cPfvQW22L8qFrBa9sq4kGd:yG6AacMWW2c0mRBVlbcXYWxssBHd
TLSH
T1001633315FF84C37D4686DFC1E00505147AA778D88BF539A6B8CB369699E883E27E207
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery privilege_escalation trojan

Malware Config

Signatures

Suspicious use of NtCreateUserProcessOtherParentProcess 1 TTPs 1 IoCs

defense_evasion privilege_escalation

Parent PID Spoofing

T1134.004

description	pid	Process	procid_target
PID 4052 created 4392	4052	Harmless Asset Manager_3.11.0_x64-setup.exe	81

Executes dropped EXE 1 IoCs

pid	Process
4932	harmless-asset-manager.exe

Loads dropped DLL 7 IoCs

pid	Process
4052	Harmless Asset Manager_3.11.0_x64-setup.exe
4052	Harmless Asset Manager_3.11.0_x64-setup.exe
4052	Harmless Asset Manager_3.11.0_x64-setup.exe
4052	Harmless Asset Manager_3.11.0_x64-setup.exe
4052	Harmless Asset Manager_3.11.0_x64-setup.exe
4052	Harmless Asset Manager_3.11.0_x64-setup.exe
4052	Harmless Asset Manager_3.11.0_x64-setup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	harmless-asset-manager.exe

Contacts third-party web service commonly abused for C2 1 TTPs 7 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
35	discord.com
42	discord.com
51	discord.com
66	discord.com
74	discord.com
75	discord.com
34	discord.com

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	harmless-asset-manager.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	harmless-asset-manager.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Harmless Asset Manager_3.11.0_x64-setup.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
52	msedge.exe
1796	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Modifies registry class 17 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\harmless-asset-manager	Harmless Asset Manager_3.11.0_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\harmless-asset-manager\ = "URL:com.harmless.asset-manager protocol"	Harmless Asset Manager_3.11.0_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\harmless-asset-manager\DefaultIcon	Harmless Asset Manager_3.11.0_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\harmless-asset-manager\shell\open	Harmless Asset Manager_3.11.0_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\harmless-asset-manager	harmless-asset-manager.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\harmless-asset-manager\ = "URL:com.harmless.asset-manager protocol"	harmless-asset-manager.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\harmless-asset-manager\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Harmless Asset Manager\\harmless-asset-manager.exe,0"	harmless-asset-manager.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\harmless-asset-manager\shell\open\command	harmless-asset-manager.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\harmless-asset-manager\URL Protocol	Harmless Asset Manager_3.11.0_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\harmless-asset-manager\shell\open\command	Harmless Asset Manager_3.11.0_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\harmless-asset-manager\shell	Harmless Asset Manager_3.11.0_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\harmless-asset-manager\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Harmless Asset Manager\\harmless-asset-manager.exe\" \"%1\""	Harmless Asset Manager_3.11.0_x64-setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\harmless-asset-manager\URL Protocol	harmless-asset-manager.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\harmless-asset-manager\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Harmless Asset Manager\\harmless-asset-manager.exe\" \"%1\""	harmless-asset-manager.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{36B7A96E-3922-4A37-AD23-4EE09A2EF55E}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\harmless-asset-manager\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\Harmless Asset Manager\\harmless-asset-manager.exe\",0"	Harmless Asset Manager_3.11.0_x64-setup.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\harmless-asset-manager\DefaultIcon	harmless-asset-manager.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4052	Harmless Asset Manager_3.11.0_x64-setup.exe
4052	Harmless Asset Manager_3.11.0_x64-setup.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4244	msedgewebview2.exe
4244	msedgewebview2.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe
4236	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4932	harmless-asset-manager.exe
4236	msedge.exe

Suspicious use of WriteProcessMemory 51 IoCs

description	pid	Process	procid_target
PID 4052 wrote to memory of 4932	4052	Harmless Asset Manager_3.11.0_x64-setup.exe	89
PID 4932 wrote to memory of 4244	4932	harmless-asset-manager.exe	91
PID 4244 wrote to memory of 4828	4244	msedgewebview2.exe	92
PID 4244 wrote to memory of 5520	4244	msedgewebview2.exe	93
PID 4244 wrote to memory of 5520	4244	msedgewebview2.exe	93
PID 4244 wrote to memory of 5520	4244	msedgewebview2.exe	93
PID 4244 wrote to memory of 5520	4244	msedgewebview2.exe	93
PID 4244 wrote to memory of 1652	4244	msedgewebview2.exe	94
PID 4244 wrote to memory of 3660	4244	msedgewebview2.exe	95
PID 4244 wrote to memory of 3660	4244	msedgewebview2.exe	95
PID 4244 wrote to memory of 3660	4244	msedgewebview2.exe	95
PID 4244 wrote to memory of 4120	4244	msedgewebview2.exe	96
PID 4244 wrote to memory of 4120	4244	msedgewebview2.exe	96
PID 4244 wrote to memory of 4120	4244	msedgewebview2.exe	96
PID 4244 wrote to memory of 4120	4244	msedgewebview2.exe	96
PID 4244 wrote to memory of 4120	4244	msedgewebview2.exe	96
PID 4244 wrote to memory of 5432	4244	msedgewebview2.exe	97
PID 4244 wrote to memory of 5432	4244	msedgewebview2.exe	97
PID 4244 wrote to memory of 5432	4244	msedgewebview2.exe	97
PID 4244 wrote to memory of 5432	4244	msedgewebview2.exe	97
PID 4244 wrote to memory of 5432	4244	msedgewebview2.exe	97
PID 4932 wrote to memory of 4236	4932	harmless-asset-manager.exe	98
PID 4236 wrote to memory of 4296	4236	msedge.exe	99
PID 4236 wrote to memory of 52	4236	msedge.exe	101
PID 4236 wrote to memory of 1976	4236	msedge.exe	102
PID 4236 wrote to memory of 1976	4236	msedge.exe	102
PID 4236 wrote to memory of 1976	4236	msedge.exe	102
PID 4236 wrote to memory of 5088	4236	msedge.exe	103
PID 4236 wrote to memory of 5088	4236	msedge.exe	103
PID 4236 wrote to memory of 2112	4236	msedge.exe	104
PID 4236 wrote to memory of 2112	4236	msedge.exe	104
PID 4236 wrote to memory of 5672	4236	msedge.exe	105
PID 4236 wrote to memory of 2112	4236	msedge.exe	104
PID 4236 wrote to memory of 5672	4236	msedge.exe	105
PID 4236 wrote to memory of 5672	4236	msedge.exe	105
PID 4236 wrote to memory of 5648	4236	msedge.exe	106
PID 4236 wrote to memory of 3240	4236	msedge.exe	107
PID 4236 wrote to memory of 5648	4236	msedge.exe	106
PID 4236 wrote to memory of 5648	4236	msedge.exe	106
PID 4236 wrote to memory of 3240	4236	msedge.exe	107
PID 4236 wrote to memory of 3240	4236	msedge.exe	107
PID 4236 wrote to memory of 5684	4236	msedge.exe	108
PID 4236 wrote to memory of 5684	4236	msedge.exe	108
PID 4236 wrote to memory of 1780	4236	msedge.exe	110
PID 4236 wrote to memory of 4044	4236	msedge.exe	111
PID 4236 wrote to memory of 1780	4236	msedge.exe	110
PID 4236 wrote to memory of 4044	4236	msedge.exe	111
PID 4236 wrote to memory of 4596	4236	msedge.exe	113
PID 4236 wrote to memory of 1392	4236	msedge.exe	114
PID 4236 wrote to memory of 5784	4236	msedge.exe	115
PID 4236 wrote to memory of 5784	4236	msedge.exe	115

C:\Windows\explorer.exe
explorer.exe /LOADSAVEDWINDOWS
1⤵
PID:4392
- C:\Users\Admin\AppData\Local\Temp\Harmless Asset Manager_3.11.0_x64-setup.exe
  "C:\Users\Admin\AppData\Local\Temp\Harmless Asset Manager_3.11.0_x64-setup.exe"
  2⤵
  - Suspicious use of NtCreateUserProcessOtherParentProcess
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:4052
- C:\Users\Admin\AppData\Local\Harmless Asset Manager\harmless-asset-manager.exe
  "C:\Users\Admin\AppData\Local\Harmless Asset Manager\harmless-asset-manager.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Reads the TCP/IP host and domain name from the registry
  - Modifies registry class
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4932
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.11.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4932.2824.7717264478130575807 /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:4244
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView /prefetch:4 /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x198,0x7ffbb12a5fd8,0x7ffbb12a5fe4,0x7ffbb12a5ff0
      4⤵
      PID:4828
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.11.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1652 --field-trial-handle=1788,i,4658340316236440335,3474068069009382363,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452
      4⤵
      PID:5520
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.11.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2020 --field-trial-handle=1788,i,4658340316236440335,3474068069009382363,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452
      4⤵
      PID:1652
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.11.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2284 --field-trial-handle=1788,i,4658340316236440335,3474068069009382363,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452
      4⤵
      PID:3660
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.11.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3348 --field-trial-handle=1788,i,4658340316236440335,3474068069009382363,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452 /prefetch:1
      4⤵
      PID:4120
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView" --webview-exe-name=harmless-asset-manager.exe --webview-exe-version=3.11.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3692 --field-trial-handle=1788,i,4658340316236440335,3474068069009382363,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:8350cbaa2809f6a8b0f76525f2de16b917274452 /prefetch:1
      4⤵
      PID:5432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.com/oauth2/authorize?client_id=1404156965248307261&response_type=code&redirect_uri=https%3A%2F%2Fdsc-oauth.harmlesscreations.com%2Foauth%2Fcallback&scope=identify%20guilds.members.read
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:4236
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7ffbaf16c188,0x7ffbaf16c194,0x7ffbaf16c1a0
      4⤵
      PID:4296
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2144,i,9275694434626493461,11550330839735254040,524288 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:11
      4⤵
      System Time Discovery
      PID:52
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1952,i,4951971105071161922,12396632686233553628,262144 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:2
      4⤵
      PID:1976
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2464,i,5714454101728931853,16348906801353483873,524288 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:13
      4⤵
      PID:5088
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3560,i,7628446010718231359,14470835974831805125,2097152 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
      4⤵
      PID:2112
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3580,i,16088871007051012805,10953685843276819962,2097152 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
      4⤵
      PID:5672
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4348,i,1954624232914149403,4790548553610016294,2097152 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:1
      4⤵
      PID:5648
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,10322363209880892716,2119474616941885082,2097152 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:9
      4⤵
      PID:3240
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3792,i,8409948352483851093,4228984284102638946,524288 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:14
      4⤵
      PID:5684
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,10685055570481865117,4765335079180295341,524288 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
      4⤵
      PID:1780
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,12683889691079642486,12010116277563677505,524288 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
      4⤵
      PID:4044
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,1224518897213246226,10549257894266305070,524288 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
      4⤵
      PID:704
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,1224518897213246226,10549257894266305070,524288 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
      4⤵
      PID:4596
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,148637262496124106,12591018667683741499,524288 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:14
      4⤵
      Modifies registry class
      PID:1392
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6456,i,7413481613033390747,4559004214542516519,524288 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:12
      4⤵
      PID:5784
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3788,i,15771284290871737769,13232078212731287679,524288 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:14
      4⤵
      PID:1516
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7184,i,10456006598661841640,1142260135758653642,524288 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=7236 /prefetch:14
      4⤵
      PID:1928
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7152,i,17756812502369193418,8077128203720231996,524288 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=7912 /prefetch:14
      4⤵
      PID:6532
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7016,i,18041527220684701121,11000450024157725235,524288 --field-trial-handle=2776,i,1840137675208203055,13931156196479237716,262144 --variations-seed-version --mojo-platform-channel-handle=7012 /prefetch:14
      4⤵
      PID:6540
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
      4⤵
      PID:7076
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ffbaf16c188,0x7ffbaf16c194,0x7ffbaf16c1a0
        5⤵
        
        PID:7112
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2180,i,6887987037993839199,4208840253699933196,524288 --field-trial-handle=2512,i,16233239441415037874,8933315459588327668,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:11
        5⤵
        System Time Discovery
        
        PID:1796
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1996,i,13436059254665312069,17484206523100186557,262144 --field-trial-handle=2512,i,16233239441415037874,8933315459588327668,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:2
        5⤵
        
        PID:4440
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2356,i,4495995714182720923,12878116152225423964,524288 --field-trial-handle=2512,i,16233239441415037874,8933315459588327668,262144 --variations-seed-version --mojo-platform-channel-handle=2928 /prefetch:13
        5⤵
        
        PID:5180
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,16909791164006676669,9380313506559863765,524288 --field-trial-handle=2512,i,16233239441415037874,8933315459588327668,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:14
        5⤵
        
        PID:6276
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,16909791164006676669,9380313506559863765,524288 --field-trial-handle=2512,i,16233239441415037874,8933315459588327668,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:14
        5⤵
        
        PID:6340

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1748

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:6588

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:6260

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
PID:6288

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4764

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Access Token Manipulation

T1134

Parent PID Spoofing

T1134.004

Defense Evasion

Access Token Manipulation

T1134

Parent PID Spoofing

T1134.004

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

harmless-asset-manager.exe

Path C:\Users\Admin\AppData\Local\Harmless Asset Manager\harmless-asset-manager.exe
Size 12.0MB
SHA256 22d2d470905a9bedfb8ea78caf8b23331db7f3fafb375fb3094779e37a5efbfa
MD5 206a7b899375d5c010475747c38c11ec
SHA1 a07335aee7be01b64a7c32bf17042abc58466cc7
SHA512 412511f32577195a0e2c4e9c7451c3406c6b131bbeedfe122916bc34f186f270d60fbccd7395b902407f6273ddc9b6b7fdb202dd57249e796375e0e7807bdb58
SSDEEP 98304:AUjsVpfr5s1AusVN3nOVzrWCQc8JTneQ2X3ogLiKhawigbj1LlPPMmEXDvltzFnU:Hq+fmMm3cYjdSj1LlPPsX53CH7
TLSH
T113C66A43F74084E9C0AEC174C76B9773BB32F8CE4521736B2BA45A212E5AB946F087D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3a7a054e-935c-4bdf-8f5c-993bde7afa86.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3a7a054e-935c-4bdf-8f5c-993bde7afa86.tmp
Size 40KB
SHA256 53f7a17b31cb84bd8541e57ec24ba8ee4c2532e579c868ceb2e7cf3e0d2ba680
MD5 6c1c3daf8cf1f6e1b50c1a144853b122
SHA1 311999877c8b9e5930c87b3e7c57ab97fe7c4697
SHA512 146effa5cb15965d536bd3646b93d3863ca6152c0652136a757e8c46c6570b8c3281a843b0944cfa20ca1f54981d325252df4259898c031e8c7e636a40c5bb43
SSDEEP 768:y/UxvxjgC+k3oo1ybNb9sHztGOeRFZD1fTos7RjrhE75EHMv:3Zj3+k3omDY1fT/Rxk1v
TLSH
T1A103B035F894AD238CF6F244B3497B87FEF414B388C9599889D95E0E05C7B9D134B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

94b33cd7-dd0f-478a-83e6-3fbc171e7c6c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\94b33cd7-dd0f-478a-83e6-3fbc171e7c6c.tmp
Size 37KB
SHA256 7a87e2064dca2dabeaef5072f2cf04c51a8ae1d384137118a8b873c59ca707fe
MD5 1459f300a116bd4787db4355087c52b0
SHA1 9ce08d3824d19519a66d4061086385cf4a3a816f
SHA512 7ed2587d02bc9713ff4434131fbd443d7630e3596c19fcb58a299b0ff6c19ed6124c7e96fb0fbfbb8e3988a13ccbb09febf1ef88216ab7df54a04552629fe095
SSDEEP 768:z/UxvxjgC+k3qjgybNb9bOeRFZD1fTos7Rz1/+Pu:GZj3+k3qUnY1fT/RBKu
TLSH
T11D03BF3AF8D46D338CF6E244720A764BBFF455B389C91A9809ED6F0E158B79D130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11bc2699e3423553add2745f1eab8f9851d20a7daa02621b221c83b3cbc8e6c8
MD5 980f505fe59880c22fc5aac96c6fb0af
SHA1 339c784a73142f8e5e3f3501ce4f27d4c8b19dee
SHA512 db727bc0c14445276e8ec3d5d8b5aa116fb6220674dc044ad1802757ee99d944c49b9c66961058aa57a59d3498c41530eaae8a5b05749c45aec2b99ddcbd08ce
TLSH
T116D0C034761A3AACC1EF3038021865803150CF03C30002040D060C2C19200C314B2FEC
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3400fb3884ce5a08ad8e41e58ccb28f22e0c86545b34e399d33c40689587f0c7
MD5 d865682ed1d9a72850b04197c6789e67
SHA1 f253bb4e0b7c62499cda7eddb9954854cb4435fd
SHA512 0b818c247544f9b2ac49a160661238b8848cfc42ef3a16f50d2224773a18ab7069c2b9ba067cad2389e1be8e70a1ce26ad63755f02d0b6c07115365c827030e2
TLSH
T1B0D0807C735F391CC7CB30752B5856E17151DF06D7060610184B192855505A61765DFD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 30be8c82db1f4708ed91e40efaa596627fc57c75a5183651ef959911e23f07e7
MD5 9697f5fdf17052b101070b8831ad21d6
SHA1 ff672da75c2d0a8d73468e16788da33759f9eafe
SHA512 ccf2acc6d6c45f5e6df97f081ba9dfea09da67ab9984353727c20f9cbb415d9ffde0f2053cff02e2a47f558f81d53e5faa5a83bab2eeb3527e9aee7d3d0fbcda
TLSH
T112D08078735F391CC7DB30752B5856F17141DF06D3060610184B092855505A61765DED
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

1b852b10-4593-4e3d-883c-1455b97fd5cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1b852b10-4593-4e3d-883c-1455b97fd5cc.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ae58be6-d129-4603-8edf-cc59b581953f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9ae58be6-d129-4603-8edf-cc59b581953f.tmp
Size 12KB
SHA256 3280ee1457be8131771a236077253f1ec33d2ae0af6618f7550b442ee8eb7f01
MD5 140dadbb93a55a79075ff1e821d874a9
SHA1 7d230d8f8ac5e0ebf386e01f4a416bf62b3550f0
SHA512 6d1f3d0a8394cf041d09d7cd552d6be5dc549693f4cefb859ad6f1e803604add937e9e591d1a31627d37123907de44182c19a5b115d4a13d3537392e69a13a92
SSDEEP 192:sxRXRHCI/fYsmWpVP4ZoWIWzoA8ple/g6+WN+Gd3Q/YDtnalghIgVMnHJ:sxRXMI/fYsmWvPGol0/5TS/sLanp
TLSH
T12D42C916AD28A93B8CD7D21DFB55BF17D2FD1022A0D15E58AAFC891C04EB6DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 10KB
SHA256 ed98244443e0235a84d73e2374687831a40a5a1b09ccbde2f2873b0ae3e9893a
MD5 4dbc80c8c3f5d02ad8f2e8962a38a2f4
SHA1 975d0904650bded7b7603b6bf7de9cf7e79eb042
SHA512 d0bbc578c0f27bebd14b4203dcb8f3228b7a0f236839281fedd51f3a410a5c2c4ff9391b2f92c3730101002d70170cd57d358c6b17667a06d98decdd871dd8d9
SSDEEP 192:SdU9P41vxk2wF8pJ8eQbN+2eroZCg4QVem:OU9P2M+J/IN+foZCmL
TLSH
T1132293520A695A5EEF58B3F3ADF0BAFA36B24128906F1D1E8350C3742F4A7345636C58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 110b58608d1bf66418f67b20cc2ae9398e2aacb0d0f182a69f8ebc3427fa075f
MD5 ced8c8fa0e23b21ff9e217d590090ba8
SHA1 52c8f76502b3751a717114f8d51a214d1f94671a
SHA512 cc0c442ae11d64d4e6d2a5f429923b235a23270213525256518027d1f4c708f098eb99064b70628239e9d63aad1828d3663fce0f42daed5f7a4a33fd066358b9
TLSH
T17851956357939960FF6C48B6E1C82B8F3B33C5B2544F2D920466C4BD7B4E3286836C68
MD5 SHA1 SHA512 TLSH

Submit Download

8d64842a-043d-4358-9688-beaa2eeacbb6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\8d64842a-043d-4358-9688-beaa2eeacbb6.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 399B
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 4477940d0225bda51bf45208cd5afd5470cdd0cb065384eefa9a6e41047407e5
MD5 479d0ab7753efbe0177736750083db9c
SHA1 131023459a1952659aa09b23a2a1f7ae8782e5a0
SHA512 53a8df082ce2d9fea568a51718405e3b9528e5d1676886cadecdd1a04fe70aaadce06a50f91999ab053b8bc3175ad2f7520ea26dfc2d362310d02064f5272a0a
TLSH
T1E9E0865544D9D22D945878D347E86318C3D53557F7C63B4A2B4EC8806642F89E3EE2F1
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 56KB
SHA256 03780457f64d8e84f92512870fbb5dd1fc9ccec92a70dd33ab6452f25f672e3d
MD5 af47c13e09934be0f4bf02620fa01e44
SHA1 81d66d4482d2117aa830af01685503cd92b1277f
SHA512 c862bd2842427cfdae3e690b558af2c9082d7e4c5f3aed278cc735b0a25f2e2766f63ea9f507323c8dacb940dba78d04528ff356d81933c63e8b4d7d869a1b5f
SSDEEP 768:cQJQSEbG+Q3wJMHTFcyg2Yte5pbEbGnP3w+MHTFcK+G2YEgJ5As:cA8i4kTFcyg2EeTwiIpTFcKl2dgzA
TLSH
T18D43D068AE3130C3C3550776275F15BA0F5847C7CC688972740781BA8CE9A73B7AB759
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 d914724ddc00bbb4ae983d8ea7a5aa2e25ce74106b943dea98fd2da7feead4a2
MD5 9799675c3444cb0fd05d182f2a674c1c
SHA1 9f72cdeff2c2c35af6bebe2cad33235259ea3fdd
SHA512 b4313e049e97556bfbca8a2a1692f6e629ff249f62d5c19ac1aef44b40647964dcc4bda46c2383432fe5423f00147d6535895d7232177c7bb60115c2b05f911f
SSDEEP 96:rr7WSMIuHtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/k7fxbbEOVpZf24JkMfXF:rOSMqH+bF+UI3iWGVoWN3qL/yRVVV63
TLSH
T11524521F5F742721CDBD8136A9E704A35CADF03F8B1666DA6C211470CEE3652A01C9EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 15KB
SHA256 7f376b38aa2e92756c370b5112819ba53b0d3b51eb1248828eda79004db80d2b
MD5 4071926f41f60fa7985e46358ef8845a
SHA1 27e6244bcff08892d80fbee2f63fc3afbb2cc9ae
SHA512 759eb1217002a5ee62b3198f9a8941aa39d6fb5e62a8d20cbf0f59c3a6e6e0f5d0630633ae7adb828d58d53b65b1fd685d6365c61978502f26fac7798399bf13
SSDEEP 192:oAjJscAQWXjU3G+SJ0yi/RHMChWjv2Os9X9VwWi81HCSs:1SQWXjUZSJEdY2OsH1HCV
TLSH
T1F272007BD00888BD472B8367D647352EC7B729BE194DF99AD0D61E0C026E2BE12119DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 36459f450f9a776e56edcd57848c5b87785388ff8fdf6582d9b91f1cad3b61da
MD5 79b7b8af60de315b3fd4700c2141937b
SHA1 9a0902b7507a1c7cf8a408cba1e95d0d0de40958
SHA512 d1bf3e8a5449e18f9eafb96df040215d4c76fa052a319729bbfc4943d551f329ea3ec29d2adc28abcbf3f7aa7ac71b90c762f20bfb12d49890712ff6164097b9
TLSH
T17EE0D86244DDD39E510C30C712A4770CC3A03517E7C56F4A2F08D841B585748E7D95F9
MD5 SHA1 SHA512 TLSH

Submit Download

30d7b8fb-d86a-4ece-9917-dfd662ca44a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\30d7b8fb-d86a-4ece-9917-dfd662ca44a9.tmp
Size 1KB
SHA256 036771d56fa05d378c53c1e19a518405b613aa18aada4ebf102321e62c247c60
MD5 1cc7736962f584c4e8da47c45af57b7b
SHA1 69dcb786c1a9d6441ee183785f61a07659b11097
SHA512 380ce85db0b3d858aa28c2f0fc7962fb4e2e2add7a3798dcf030ec7a654c36fa549650f1ca5ac05522d0dd23f39e68c1b66cbda304031a4eabb3162dcd7717b2
TLSH
T1B8319BF7C3E8963D8A0192F86A182E1BCE2D0854932C3D5AC4D49F5F93E18A1D28099E
MD5 SHA1 SHA512 TLSH

Submit Download

f7b6e80c-77f9-4e53-8f29-5f4cd4cceaa9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f7b6e80c-77f9-4e53-8f29-5f4cd4cceaa9.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

fcc438c2-0153-4a1d-b97e-c45f29ce32d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fcc438c2-0153-4a1d-b97e-c45f29ce32d8.tmp
Size 2KB
SHA256 f4cc398e74fe445efa4e4f1373635beef641bb0e837b9247399067d3ee355974
MD5 cabe48a92b9bc972ce53a0b29b958dfe
SHA1 dbaa8c8bdb3491c3063692bfb135a35da6218b8b
SHA512 a163813471ca57810e08ad325a115fd86177f0bea35f656893b2aa60fbcac4a0916a65af15f239bcf9c5e4f202ff0f35176f0aeedd2e884452284860f54374cc
TLSH
T12351AEF383E4862DCA1156F0AB146E2FCE2D0915432C7C6AC4E49E1B93E3471E181A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 fe580d67c444315ac3828745f781c9e5360ee4546a2664ab1c6e7859e215a45e
MD5 154f058d3fcbe4f477cb1f1efdcc8616
SHA1 50ea40d0e2661f84030da31fcf53ffe475b0bfd2
SHA512 529d6ef690955d0155079e949722394030b4f9f91634fc9a707a6841770d9ed85de616e82b628a27a403b885a2db65744edc2a9d5907e1c42d2ebfe568eac77d
SSDEEP 768:SzYbxo7pLuLj7UWgasfM68F1+UoAYDCx9Tuqh0VfUC9xbog/OVMfw8WSxroGWs/:SzYbxUEj7UWgasfM6u1jaXfwtSKvs/
TLSH
T167D2D97B640CCB7F4F804ADDD91A7A9E6DA802CB96D8CD8447FA941C02C67EF511A0DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\3d3f5dec-bb23-465f-8269-16ccb868a311\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 138B
SHA256 2c964b69597b75e243b7c67228f78d94f47486fbf3298c092ace184019529b70
MD5 2ccae415a31e219d0d21fc6d006e9373
SHA1 edb3ec8fc3a558e43eeb4622ae7ec942d0c05d4c
SHA512 f095a4136541459ce40c25dce0927d73fb1ed931f3532e8c0bb922a4f5b793d25021316fdd08549fbc454cb8514c084c814f9233187fa40db4aba1266e88401b
TLSH
T1EFC02B73A08448078B120651033A376E47207CCD48C3848CF16370681078F277202FD3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt.tmp
Size 226B
SHA256 840acf0868d3396b8e230da30eedf680751559f1ecbde33f1818727d176b2fd4
MD5 dc3aa84021e5d3c5095f9edea4ee13dc
SHA1 7f9c908372737765f58acbf56975fbe405d90581
SHA512 1fb43a263291c775fbcfd8548d0b3374e2342bbcee763ce6d3e950d9e3cd983d7771decd9e6a15bd5f138d68ce3234771e20126bf3e50c968cc1c2b778909891
TLSH
T1B4D09727A0698451CBAF8F6203252B3B863038CC80DA909CE00201380848783B212FD3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt.tmp
Size 233B
SHA256 47b1bc5ae47ffb0fbc48c2be76b44ad1cadbc99ce4c311b4a448f7eb3dcefe7e
MD5 1f683565bc91567b08c8300a9df397c1
SHA1 4c06e838e55fa1c223085bb01af9a24598ac71ff
SHA512 977745803856161585b04880ed506a0e48808ac366938e7312e4dbd28cb7476c8aba9e18804d6c0d0f7480871dda87224347f571d2e265455137aac801ab1248
TLSH
T124D09727A0664451CBAB4A6203352B3B86306CCC84C7A09CE002303C1478783B321FD3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 3eb428337f55ccbff0dc4f22416c94a56c0c7fd4f4ab23b47f0479f236b368c7
MD5 9cc1b113c60ff98b78983dd0c82712bb
SHA1 5262e0151c16fa9e14b1156d6a2a19ced0f9cb95
SHA512 2621bdd639de94b79a109342d8d922abf663c34e103b7a2958de0665b14c3787e1bed384819b076b99d421a141bf6063b97ad5c8fcc023acb4f5ac2e3bfb405d
TLSH
T1FEE086610BD9E23D605B308703E4971CA2F87527EBC83EC6AF85CD50624294CF2EE5B2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 f9f4272c8b86d242cbfbf4bc91e67fb8e8f38b4f9db65c454ba7dfe89bde2cdf
MD5 fdf5a5b666fae2a5ddbe9d3f50453897
SHA1 1e56fb2a802caf8894326b1d75c3e394e9919ba4
SHA512 1fadf334d673f3197150b616126cb0ac45c43cd017183fc673048fc1f2be3c97ff18d2fe9b1b9c212593b453add06c9964030f2e4be76a0d1b571e4df96cf776
TLSH
T15BB012AC37109713C484043203E087D05708E0515482A913DC0CCF924F0D7983E418D1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 e4fde0014e50cf71d198473cafed9412ce338885593e2679650b838100a85940
MD5 29c380ea98f6f5ab8026af8c181d8677
SHA1 99911b727928416eedc37729b02c2ce6702e93db
SHA512 1df0aeab3e71513bc22c9289d62b4ec1e9a97f9ad26a34677acf8f3f6283dc7306ee79c8a62f52ff1c221ef3f61a9e76d54751b37b986526561fa2688d182aa5
TLSH
T1EEE0922117CDD32FA18A30861394E30CD2A27916E7C52A95AF09D8847306588B2DF561
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 9a33864d8fd5914534086756af7ec929eb4ea0999411e5f0b045cf0859a960cd
MD5 4abaea396a87a4215d745a2828a2ea0a
SHA1 893355855b82c23a28f46bb261cfa46fc0d20433
SHA512 012aac9db169be14d859fa3c2b873940fb3552a03ae7fd1825cbffc971f655a534779d40a67b9e8c898df8b5573f53598b5eb3c811a17610f523c3b5b69b0a55
TLSH
T1ADE0267446C8E33D610874C702E8A72C83F07957A3C03ACA5B48D846A681608F3FE1B0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 cea70993cda721205bf9d3a89a98bd8a971c09817e999f960fd51454c7189cbc
MD5 7601ded915d4613cf95ded4f7ef96504
SHA1 2bc1c1372957145ee9d2e95efe6b93d76fdc663c
SHA512 f78f4c3ef1782aa9b84d4d7b5c1bb39aa899eda850a15ea9894ced75a6e4fb15b0bbdf5a4963d46407c728ea64819b2179940bf46b3fc1de14ccb76d4e0806e0
SSDEEP 96:KjA58g+22+gGHluA+KWLu/unQkmYYttsRA78tKDM7mtHempM4Wi2PYMVpNUtJqfx:0A58g+22bGHwAALu/unQkmYYzsRY8CM/
TLSH
T13B91D21171BA22003D7D394960F8A9B7428531F33029A5EF3BA9D9A64FA7E105DFCCD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 637771e6412517cd0b8ed0bf045a783e477541f0563c91539919cdcb97788775
MD5 b28b2c3f9ebb77f509f7cbffc51a32b3
SHA1 aa2541c982eeb7f6d527af5bcd28bb86dbdcf6ca
SHA512 da1518f63f73022704231672f55d96930ff70243cdc304e9c2d6be55c2d2a54d601901da18bdd68b4b938db17308a904c9ca7c50badc84464b1edd4d3a0e4d40
SSDEEP 384:DNrRZyCSDnxTICH/dMEhIKyll7svbFKfk7:xFZJSDnivyI1l7svbF9
TLSH
T19E44850A7B747001EDE6D9725CB080771E3CB16E8F22A6916DB254694DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c16ad996-a08c-4df4-afb3-d7b3bc1235f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c16ad996-a08c-4df4-afb3-d7b3bc1235f8.tmp
Size 11KB
SHA256 c82114f9b877dd9c6e3dedf9f9483e23b871f6b9d6fa5997bfabfead199f3d4d
MD5 021c89ca5ae1816cd37c2be0cfd1858f
SHA1 b2c18feaf3c94da189a8f4eed6ce8495ce6daa9a
SHA512 a5ad0b8fd785e68b599aef48cdf436095e2ed47ed4dea34c3bed727e690a1ff80bef0d5921a551014fa4cfd3cb09a0063bf19af4a46fcc590a18974af911d0b0
SSDEEP 192:sxRoRECI/fYsT4ZoWIWzoA8ple/g6+WNp3Q/YDfn2kGhIgVMnHJ:sxRoVI/fYsTGol0/5u/4Yanp
TLSH
T18D42CA16AE28A93B9CCBD21DFB55BF17D2F95032A0905E58EAFC491C04EB6DD520780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 9826f3f7110982d9ef6c7fbbd9a8d0a5cd8abe290067984ca85a43fd0c51ffb5
MD5 8c1a5368a1525d57e348cbd3bef9a7a2
SHA1 40e941f1bc88f252d6d055dc848cdce390a18573
SHA512 88a0ea1024c3cef83706dc7d32320e2e992ca247690ed2f18f02c3ecd004ca75221686520aa8e10a819e0defb7958f8602008f2210a1c9f9cdea89379ecc3739
SSDEEP 3:MsEllllkEthXllkl2zEfl:/M/xT02z
TLSH
T1BD4404047FC43415D50C11304157C3501370D450053157C334F14C335DC75500C00001
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 06e409e57a022f6097fa120faa3522cba5d729b4ebd547182e68ec71d893557a
MD5 da49c4429dc7353579041c7718f8740a
SHA1 c4798c4fa5ade92e939e1a94185674f9d2fdd61d
SHA512 e32c45d6016b6030825fd97f7757b7194dd7983466f95a861b9799f2c06e59c9d1e494ed0ba0ccffb30a747155e9a2b89670bfe121444a20a892d18f9559d1a9
SSDEEP 3:MsEllllkEthXllkl2zEflk6Kl:/M/xT02zL6Kl
TLSH
T1E3440404FFC00405DD041030415DC7501371D410071157433DF14C337CC75540C01400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 875ce66ab0f114d1c3a1dc6cbd21df35cc52044bcdfd30b4bf4dec9ab621a711
MD5 38ed1fe4eca016ea47d6ffb9f3da110d
SHA1 6375d28e504212b05d58412c0c620051a15866f8
SHA512 ca3b100927cba1933ebed64029508591cd488ff2294b3798f67f068a98a782153e7374eb5d2f041205dba3ea9b3e3389d40ad540f0d9e90d65341457098c8dcf
SSDEEP 12:TLJYJiEZXiDiIF8izX4fhhdWeci2oesJahvGFUxOUDaa1i3isQQQtydegzA7dngr:TL+j0afDdWec9sJVUOu1jq7+jy
TLSH
T18B92FE666D312033ECDB4B37BC9389900EBC026EC9A778559ED44C710E61BC2E2552FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 f18dc8213fd3d2341e6bfa4ffa13c52d38cbb2c14ba1d218123264075b2a68cc
MD5 48d08ce4e2978e1d167b17ad326571c1
SHA1 f4af8ed652dff39c031fe79688034665c4b1dc43
SHA512 539b7330fdf4760768cb351d45f6ec296cbea7d463d236668877f43d8749b8d71f258cf329a827ad53ae89e1963b938c9aa13875f67ca2b394430a0a6560a6fc
SSDEEP 3:MsEllllkEthXllkl2zEfl1R7/:/M/xT02z4
TLSH
T1894404047FC00405D50010344451C3505370D7330513574734D144375CC75500C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

a2c48bba-dafa-46df-8d20-f94f5d9e5acf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a2c48bba-dafa-46df-8d20-f94f5d9e5acf.tmp
Size 38KB
SHA256 f7c86775944152d75f44e62627c9ad0b15adbeffbd287ff6c565aae4be1a197e
MD5 01bd4c4ad53ff39697c7f5b437c52a73
SHA1 9d9fa1f9145cd0fc994d87119a591001f0e630d5
SHA512 2a54e65a1dd44012bc0c5908de92dbdb8591af37cf8b1928ed5a4c749fcdf347aa992d43e4a499740524b5d350ae600a24ac458cb446b46758ac2e4d35517e2a
SSDEEP 768:EI3om1ybNb9sHztZOeRFZD1fTos7RjLn9n1E75EHtL7:EI3oMKY1fT/RfB1kSv
TLSH
T1C0038C3DEC909D3F88BEF344620D3A56AEA45277C9B90598C7C91B0D80B7A9DF347825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1ea717d-3b60-48be-9ee2-74774db4c1d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d1ea717d-3b60-48be-9ee2-74774db4c1d9.tmp
Size 38KB
SHA256 da366a55f273e7ccdeb54dffde362a95ed089d87ade883a3401acde610b8d214
MD5 7041cbc36082ac07f6b2380013ffe4cd
SHA1 48746e8a9ae092a27ac9a26e1f575faffb6ae2b3
SHA512 26c78395da7a0e7e083bb169a26984d14d911bd5c843e1c5cf7409669f7d80208f61f10b30ba59898c9db03d89973b728d472191795c0d30a981580a89d9ca6a
SSDEEP 768://UxvxjgC+k3c9XybNb9sHztmOeRFZD1fTos7RCrh/+Pu:SZj3+k3c9bY1fT/RmKu
TLSH
T1D203B039F8989C338CF6E244724AB78BBFF415B389C91DD849D95E0E0587B9D134B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f3f1044f-5b98-4303-8f45-206dd1a17be0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f3f1044f-5b98-4303-8f45-206dd1a17be0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 cf4125d94d82b448cb33d6f462cf53eec00f2ee8165fa00f1b9c3bdba48e3328
MD5 8126a600a3d95922fb651e3a6f104f68
SHA1 e386add1c2c1d9ca74461e5ce0d1b271d689160f
SHA512 5a0e81111f0d9a0f7943b99f7bad8162de0d3f99fffa9d8f8ab466fa9c7c4249808bedfa6e4d26426bc2d1a422e2155900ba71adc222617a5f0880dc60b89a93
TLSH
T122C02B8F542E47CBBAA5152D42D40B3B4690CD60F199E6B449FA5640006435CC608C47
MD5 SHA1 SHA512 TLSH

Submit Download

003b44c5-2dc3-4d9f-b8b4-cdb0b4dcae44.tmp

Path C:\Users\Admin\AppData\Local\Temp\003b44c5-2dc3-4d9f-b8b4-cdb0b4dcae44.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

07477cc8-fd6e-4590-b120-c7dfa1ead1e1.tmp

Path C:\Users\Admin\AppData\Local\Temp\07477cc8-fd6e-4590-b120-c7dfa1ead1e1.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsq36E.tmp\System.dll
Size 12KB
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
TLSH
T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsq36E.tmp\modern-wizard.bmp
Size 150KB
SHA256 514d8179f9014c612d1c5475e43cf97e1b656c9b607bb89e055388552aded24a
MD5 30bb7644d21019b16dfa6cc5be87d129
SHA1 c6ed96eeecfd243109a4dd8034586c2f4bc5c650
SHA512 05d3f506c2c607741f053ebd04b475c0971e30ce5bc825a0123c6200a5e950f9890a85744d1dba7400295fa5d82353324d0f478f3c14354470b118e63e467947
SSDEEP 3072:sLOP2PTTjOZGlkXCab/BCgK/4Lvz4ckMl+VAch/SkX:sLOP2PyZGlkXCab/BRvz4ckU+VAch/SE
TLSH
T112E3440A91BF901CED1FF4548E86678786408B5DAB9FEDD687DB052138EC23C71AD0E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsq36E.tmp\nsDialogs.dll
Size 9KB
SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
MD5 6c3f8c94d0727894d706940a8a980543
SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
TLSH
T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsq36E.tmp\nsis_tauri_utils.dll
Size 33KB
SHA256 3697d11bdbe1e34daa26b1e89d84276d9ff28148906943d0fe888354c3b13620
MD5 acde70f73d3b71b1c4222b763537780d
SHA1 b053b2e5fdb97257954c8f935d80964f056520ae
SHA512 598fc58a5f561e7995eccccb065faf2a2386bce0cfc4199fa95ba9fb74e9fcb291914676996c90728dd283223c2180de9fe073a4c936e60fbabe036d7e0a40de
SSDEEP 768:L8+c2MM0Hxd1fBTsRmMZdauVKAFKpnp0jdhK7R+qVQTxM:L8+DMfHPxAIMtXIVQTx
TLSH
T144F24A18FCC47EB6E6DF0570080D4A7E826FC8181B14CE9BD3A51EA2D5A63729EE501F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1092815179\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1139156004\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

42f3da32-b9ba-4909-a7b7-41e6cbc32a27.tmp

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\42f3da32-b9ba-4909-a7b7-41e6cbc32a27.tmp
Size 3KB
SHA256 47162a58f7d83878e7733c1cc12707aa16a27097ea92d5dbe0264cf81a6826b0
MD5 7645af1a68c23c12eac07a4064910275
SHA1 04ffaa40da735310b74f20e412ba9bfac4a5b2b1
SHA512 c7605fd455751bc6048f8b8e4e42922a69cd85203bf0738656e313d98c16f17ccef4dd7b3f97c964e9157b5ff98790664ce8abef43d466a2940d323fc5514619
TLSH
T1D86172777960EA27DDE29A44B9862B1AFBA59123D5913FA4DAEC0F0C01D72881381C27
MD5 SHA1 SHA512 TLSH

Submit Download

8b645346-f0df-4693-998d-24544eab5c19.tmp

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\8b645346-f0df-4693-998d-24544eab5c19.tmp
Size 2KB
SHA256 772a648fa456e2102fc44edb6511c1dd5916b9fe47acae51e4294beb77b80eff
MD5 49a4ea07fedd0532c9ce9017f0709a8f
SHA1 a8d70a13178e0f3b13499a3ea9f72a2043516553
SHA512 bf1ebd02098a4baa16e28d0739920d8caa0de4686156b10061f3ac644f8b9578bfd8352526be2568548e12a8b31c5ecadb210ca511723d6be4836c19f5a53678
TLSH
T1AB5174737910AB37DDE247487A4A7B26DE7591929A621F609AED0B0C00D715D2345C3B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 a03484898e792031a30d3c2c5759a23c65094fb48ba36297d0a9c2f26abd599f
MD5 07be80e671277ef4754e543b66ecfd5f
SHA1 1c9dbb6464ea9b1b0249b620e72f726bc02bad89
SHA512 6874250bbbdf2c28a69876dcd92d76ba4bba46a0cf2e767125f2ec315ccca41ba580dbd375779a0f528d9721af36929bacf9cfe035d1698b8d30174e5c9a6491
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 ee10082ddcddc4e704a500a628e27385269ca8f4b73da80bd4828d9cb4b3af3c
MD5 9d27d5696b69c1a7476614ee8ce54b98
SHA1 2b0fd0b7e5a414a8426f7c74ac36d0f1a88c8eeb
SHA512 d2b826ac5b67140d57c174c44ff03d5c855a476390548adf90754cf4f64ae85e39449f809f6a470f5f51239f5fa62531f645c0c206715e28c012774fbf997f0c
TLSH
T165D0121677410734C42030B31082614F0482C50B80074001582D96AD2A5C4540902441
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 96B
SHA256 adb56a5b31098962d7e9ac2552a889f5a54b10add6303a74140bc4fdf8be4de1
MD5 d7844b4617192886cdf85a33409c5c38
SHA1 84c71d31c572cf989b6cf3ad423d47ec23d49d02
SHA512 f4b4c3a99134950b6f0a769098a56818de46c0d41462a11a33ecddec9917cf4f37e393a08bd6f097269e9309d772823e1b7f2fe647ae6a7f514077aa135ab1f8
TLSH
T1DBB0113828002002E2A20B30A0FB00F03AB008A28B030AAE8382B2B08C20388220222B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 c2df592a95c45e8d6ddf09b5a4988d57d49abdc05dc5c66a352d9643dace4cc2
MD5 ea0a878558eb4e970c3fbfd180dc9c82
SHA1 527c93735ad388e246aa946994bc4dcdbef1dcbf
SHA512 597a200dabbff66a7941fdc40f7cf7717a0712799fa35e55927c1114909a2c2f7e73b9c022b683364b605fc8d31e8a9ecfb1b3fbe715b28d85e7338f7fcb953c
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

dd15bee7-0589-4cef-86d4-e76cabaa101e.tmp

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Default\dd15bee7-0589-4cef-86d4-e76cabaa101e.tmp
Size 6KB
SHA256 affdc33f4e80085606727790fe838a3142e4107f3b07cdc54e5ed292ff559120
MD5 94d2ffee27eb504c8546b35733af3a82
SHA1 a68d9d57d7ef31778085657f6eeb35c2a1672335
SHA512 6c950fc9bc96d8e9e78762293b8ebf96e76a78615c5f12a39ccd45df1d2c68683282caaaa19b818c7f5986533eaeb6cdfa6a37410f4f5d4518fa86b886d9c733
SSDEEP 96:stVU/dPm3Bb9KJkOEEo5h16Z0gs7/x+6MhmuecJwB1ejeFK+giej28XM1C7K:stVYBXXongsV+FdwBQjjTG6K
TLSH
T1D5D1A6016F24B97B8CC6E11DBA39BA07E2F5506270D51E58EBF84A2C08DB5CC2317D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\Local State
Size 1KB
SHA256 7c3aabbecc74e264b2d446ebad6722a4f87252c5ee29845cd7a94ec8a2a89c07
MD5 84e430b9bfccca3f837f5b71bb5564dd
SHA1 d3f5790a4e8ec99ba8283e3c1338e84036425b80
SHA512 c99b9b17d56622e8d76ea8c471b4456de21182e680f87ec728ed84b845607c03f325b925d559f3795b5873a28461613d1d46d86b12e52ab40184cdd5fc6a2c5d
TLSH
T10C2165F3F961AF33EC9263863206B75BEE71506781214F40A9DE4B1D05A314D516EC37
MD5 SHA1 SHA512 TLSH

Submit Download

bd9d53e9-dad0-4342-b283-436b571fe9f9.tmp

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\bd9d53e9-dad0-4342-b283-436b571fe9f9.tmp
Size 15KB
SHA256 c8f185cd9fb743ecc19e487644ce81cd595e14031fdcc80ec1a474cc4140903b
MD5 226c8dab680b199085deef768174709a
SHA1 7d9481eeceb6a4b298ec5b83342f0d0b12931b0e
SHA512 ece552911197af61f91e98cf04bc6e50192266b8f51c7c1bec1f33006a3cd71e6b5562224343b6f39c8ae32f46c2794d796ef55eff22ca97ff67e07f0dc14453
SSDEEP 384:a+OBqImmJvGBLx3NaFMJF/NBSJCWfvQg6rB:vcvGtlN5WvO9
TLSH
T16272AEB62965AE23BCF78649BB8E3347C7616293C0D57BD8DDEC9F0F012B0841391915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c7640b93-a34c-467e-b292-a10c413c7501.tmp

Path C:\Users\Admin\AppData\Local\com.harmless.asset-manager\EBWebView\c7640b93-a34c-467e-b292-a10c413c7501.tmp
Size 15KB
SHA256 5a5e806a0fef695db48e4e6662ab9572ae4618a61a6f9d535b6beffa3762a384
MD5 e964cfa1ffb25e187e865dd570900a71
SHA1 f80a8f4f2eedc362278841351b2ee07ad14fdebd
SHA512 54f98e4ba7139937f64e22c6f4808ddae78072eae4144e6ed4a7de3fc96247fb98d3632f6e4de5a267c3a3d4ee162b092ece5de878f7356dae5430360542718e
SSDEEP 384:O+OBqImmJvGBLx3NaFMJF/NBSJCWfvQg6rB:LcvGtlN5WvO9
TLSH
T17C72ADB72C66AE23BCF78649BA8E3347C7616253C0D53BD8DDEC8F0F012A1841392915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Harmless Asset Manager.lnk

Path C:\Users\Admin\Desktop\Harmless Asset Manager.lnk
Size 1KB
SHA256 af3ac4cde6dbe1de70b3144d2042fcd019bad724c99f5e07068ae5c0dedb3346
MD5 c02af198be2d7266b5460bf9bf869286
SHA1 fd7c1d3088b70b6fed598d3ed8e36ba9c3cad742
SHA512 f70a98ea7d0eaab62982205893ecb6d60265f1b836a239a5a80a5d42f4c30e6d68cf467d76ed1919c5b75e6529f19112e6a2f898698b6ed34339ed0be159fde5
TLSH
T11221AF105FCA261AF5FFAD3226FB1111D1757C55AF46EE1D418052241CB2E82DFB4F2A
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4120-162-0x00007FFBD2E80000-0x00007FFBD2E81000-memory.dmp

Download

memory/5520-84-0x00007FFBD2E80000-0x00007FFBD2E81000-memory.dmp

Download