461370a8bfd961ce197f926e9675860a19c333082f39ac8153582734563a8d21

Analysis

user interaction
yes
max time kernel
175s
max time network
185s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-de
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-delocale:de-deos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 10:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Portmaster_2.2.8_x64-setup.exe
Size 74.8MB
Sample261107-mvtkwabs3x
SHA256 461370a8bfd961ce197f926e9675860a19c333082f39ac8153582734563a8d21
MD5 c19cfe8b1d1166edc25f51eb08e42987
SHA1 b8bb41064628a50356ad0e533fdd5b9e1845edba
SHA512 7d639a6cebf760eb3a6af9766685f4a7f1c8f40203483bc15c26326bbde87085ce968a74b969be502d4c7facfedfca62ca7514b06b248745d0eeaf7ea80e5726
SSDEEP 1572864:IByQLtX2dQiWOtTwO2pUS/CO14i+qnU2NAlf+gViKPCt4TGGOlu0:IfN2tF2R4ihUt9iKPVT5mx
TLSH
T10308334899996A60DC975535BA2AFE309DF71C19F3A84EF949D2BE87F2F3F402052D00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery execution persistence trojan

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Portmaster = "\"C:\\Program Files\\Portmaster\\portmaster.exe\" --with-prompts --with-notifications --background"	Portmaster_2.2.8_x64-setup.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 8 IoCs

description	ioc	Process
File created	C:\Program Files\Portmaster\assets.zip	Portmaster_2.2.8_x64-setup.exe
File created	C:\Program Files\Portmaster\portmaster.exe	Portmaster_2.2.8_x64-setup.exe
File created	C:\Program Files\Portmaster\uninstall.exe	Portmaster_2.2.8_x64-setup.exe
File created	C:\Program Files\Portmaster\portmaster-core.exe	Portmaster_2.2.8_x64-setup.exe
File created	C:\Program Files\Portmaster\portmaster-kext.sys	Portmaster_2.2.8_x64-setup.exe
File created	C:\Program Files\Portmaster\portmaster-core.dll	Portmaster_2.2.8_x64-setup.exe
File created	C:\Program Files\Portmaster\WebView2Loader.dll	Portmaster_2.2.8_x64-setup.exe
File created	C:\Program Files\Portmaster\portmaster.zip	Portmaster_2.2.8_x64-setup.exe

Executes dropped EXE 3 IoCs

pid	Process
3448	portmaster.exe
1600	portmaster-core.exe
4284	portmaster-kext.sys

Loads dropped DLL 13 IoCs

pid	Process
1492	Portmaster_2.2.8_x64-setup.exe
1492	Portmaster_2.2.8_x64-setup.exe
1492	Portmaster_2.2.8_x64-setup.exe
1492	Portmaster_2.2.8_x64-setup.exe
1492	Portmaster_2.2.8_x64-setup.exe
1492	Portmaster_2.2.8_x64-setup.exe
1492	Portmaster_2.2.8_x64-setup.exe
1492	Portmaster_2.2.8_x64-setup.exe
1492	Portmaster_2.2.8_x64-setup.exe
1492	Portmaster_2.2.8_x64-setup.exe
1492	Portmaster_2.2.8_x64-setup.exe
3448	portmaster.exe
1600	portmaster-core.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	portmaster.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
2556	powershell.exe
4880	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	portmaster-core.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Portmaster_2.2.8_x64-setup.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 30 IoCs

pid	Process
1492	Portmaster_2.2.8_x64-setup.exe
1492	Portmaster_2.2.8_x64-setup.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
2556	powershell.exe
2556	powershell.exe
2556	powershell.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
1600	portmaster-core.exe
4880	powershell.exe
4880	powershell.exe
4880	powershell.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
816	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
4856	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	1600	portmaster-core.exe
Token: SeDebugPrivilege	2556	powershell.exe
Token: SeIncreaseQuotaPrivilege	2556	powershell.exe
Token: SeSecurityPrivilege	2556	powershell.exe
Token: SeTakeOwnershipPrivilege	2556	powershell.exe
Token: SeLoadDriverPrivilege	2556	powershell.exe
Token: SeSystemProfilePrivilege	2556	powershell.exe
Token: SeSystemtimePrivilege	2556	powershell.exe
Token: SeProfSingleProcessPrivilege	2556	powershell.exe
Token: SeIncBasePriorityPrivilege	2556	powershell.exe
Token: SeCreatePagefilePrivilege	2556	powershell.exe
Token: SeBackupPrivilege	2556	powershell.exe
Token: SeRestorePrivilege	2556	powershell.exe
Token: SeShutdownPrivilege	2556	powershell.exe
Token: SeDebugPrivilege	2556	powershell.exe
Token: SeSystemEnvironmentPrivilege	2556	powershell.exe
Token: SeRemoteShutdownPrivilege	2556	powershell.exe
Token: SeUndockPrivilege	2556	powershell.exe
Token: SeManageVolumePrivilege	2556	powershell.exe
Token: 33	2556	powershell.exe
Token: 34	2556	powershell.exe
Token: 35	2556	powershell.exe
Token: 36	2556	powershell.exe
Token: SeIncreaseQuotaPrivilege	2556	powershell.exe
Token: SeSecurityPrivilege	2556	powershell.exe
Token: SeTakeOwnershipPrivilege	2556	powershell.exe
Token: SeLoadDriverPrivilege	2556	powershell.exe
Token: SeSystemProfilePrivilege	2556	powershell.exe
Token: SeSystemtimePrivilege	2556	powershell.exe
Token: SeProfSingleProcessPrivilege	2556	powershell.exe
Token: SeIncBasePriorityPrivilege	2556	powershell.exe
Token: SeCreatePagefilePrivilege	2556	powershell.exe
Token: SeBackupPrivilege	2556	powershell.exe
Token: SeRestorePrivilege	2556	powershell.exe
Token: SeShutdownPrivilege	2556	powershell.exe
Token: SeDebugPrivilege	2556	powershell.exe
Token: SeSystemEnvironmentPrivilege	2556	powershell.exe
Token: SeRemoteShutdownPrivilege	2556	powershell.exe
Token: SeUndockPrivilege	2556	powershell.exe
Token: SeManageVolumePrivilege	2556	powershell.exe
Token: 33	2556	powershell.exe
Token: 34	2556	powershell.exe
Token: 35	2556	powershell.exe
Token: 36	2556	powershell.exe
Token: SeIncreaseQuotaPrivilege	2556	powershell.exe
Token: SeSecurityPrivilege	2556	powershell.exe
Token: SeTakeOwnershipPrivilege	2556	powershell.exe
Token: SeLoadDriverPrivilege	2556	powershell.exe
Token: SeSystemProfilePrivilege	2556	powershell.exe
Token: SeSystemtimePrivilege	2556	powershell.exe
Token: SeProfSingleProcessPrivilege	2556	powershell.exe
Token: SeIncBasePriorityPrivilege	2556	powershell.exe
Token: SeCreatePagefilePrivilege	2556	powershell.exe
Token: SeBackupPrivilege	2556	powershell.exe
Token: SeRestorePrivilege	2556	powershell.exe
Token: SeShutdownPrivilege	2556	powershell.exe
Token: SeDebugPrivilege	2556	powershell.exe
Token: SeSystemEnvironmentPrivilege	2556	powershell.exe
Token: SeRemoteShutdownPrivilege	2556	powershell.exe
Token: SeUndockPrivilege	2556	powershell.exe
Token: SeManageVolumePrivilege	2556	powershell.exe
Token: 33	2556	powershell.exe
Token: 34	2556	powershell.exe
Token: 35	2556	powershell.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
3448	portmaster.exe
3448	portmaster.exe
3448	portmaster.exe
3448	portmaster.exe
3448	portmaster.exe
3448	portmaster.exe

Suspicious use of SendNotifyMessage 5 IoCs

pid	Process
3448	portmaster.exe
3448	portmaster.exe
3448	portmaster.exe
3448	portmaster.exe
3448	portmaster.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 1600 wrote to memory of 2556	1600	portmaster-core.exe	95
PID 3448 wrote to memory of 4856	3448	portmaster.exe	96
PID 4856 wrote to memory of 2532	4856	msedgewebview2.exe	97
PID 4856 wrote to memory of 5544	4856	msedgewebview2.exe	99
PID 4856 wrote to memory of 5544	4856	msedgewebview2.exe	99
PID 4856 wrote to memory of 5544	4856	msedgewebview2.exe	99
PID 4856 wrote to memory of 5544	4856	msedgewebview2.exe	99
PID 4856 wrote to memory of 3704	4856	msedgewebview2.exe	100
PID 4856 wrote to memory of 1396	4856	msedgewebview2.exe	101
PID 4856 wrote to memory of 1396	4856	msedgewebview2.exe	101
PID 4856 wrote to memory of 1396	4856	msedgewebview2.exe	101
PID 4856 wrote to memory of 5040	4856	msedgewebview2.exe	102
PID 4856 wrote to memory of 5040	4856	msedgewebview2.exe	102
PID 4856 wrote to memory of 5040	4856	msedgewebview2.exe	102
PID 4856 wrote to memory of 5040	4856	msedgewebview2.exe	102
PID 4856 wrote to memory of 5040	4856	msedgewebview2.exe	102
PID 1600 wrote to memory of 4880	1600	portmaster-core.exe	106

C:\Users\Admin\AppData\Local\Temp\Portmaster_2.2.8_x64-setup.exe
"C:\Users\Admin\AppData\Local\Temp\Portmaster_2.2.8_x64-setup.exe"
1⤵
- Adds Run key to start application
- Drops file in Program Files directory
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:1492

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5688

C:\Program Files\Portmaster\portmaster.exe
"C:\Program Files\Portmaster\portmaster.exe" --with-prompts --with-notifications --background
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3448
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=portmaster.exe --webview-exe-version=2.2.8 --user-data-dir="C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz,RemoveRedirectionBitmap --lang=de-DE --accept-lang=de-DE --mojo-named-platform-channel-pipe=3448.2268.17527801191916235776 /pfhostedapp:f619f37de66b6ecc646d48c13322bc256f470d7c
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4856
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView /prefetch:4 /pfhostedapp:f619f37de66b6ecc646d48c13322bc256f470d7c --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x184,0x50,0x7ffbbfe45fd8,0x7ffbbfe45fe4,0x7ffbbfe45ff0
    3⤵
    PID:2532
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView" --webview-exe-name=portmaster.exe --webview-exe-version=2.2.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1688 --field-trial-handle=1700,i,4038258764097018328,7165945548385656930,262144 --enable-features=MojoIpcz,RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:f619f37de66b6ecc646d48c13322bc256f470d7c
    3⤵
    PID:5544
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView" --webview-exe-name=portmaster.exe --webview-exe-version=2.2.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2008 --field-trial-handle=1700,i,4038258764097018328,7165945548385656930,262144 --enable-features=MojoIpcz,RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:f619f37de66b6ecc646d48c13322bc256f470d7c
    3⤵
    PID:3704
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=de --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView" --webview-exe-name=portmaster.exe --webview-exe-version=2.2.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2268 --field-trial-handle=1700,i,4038258764097018328,7165945548385656930,262144 --enable-features=MojoIpcz,RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:f619f37de66b6ecc646d48c13322bc256f470d7c
    3⤵
    PID:1396
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView" --webview-exe-name=portmaster.exe --webview-exe-version=2.2.8 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=de_DE" --mojo-platform-channel-handle=3528 --field-trial-handle=1700,i,4038258764097018328,7165945548385656930,262144 --enable-features=MojoIpcz,RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:f619f37de66b6ecc646d48c13322bc256f470d7c /prefetch:1
    3⤵
    PID:5040

C:\Program Files\Portmaster\portmaster-core.exe
"C:\Program Files\Portmaster\portmaster-core.exe" --log-dir=C:\ProgramData\Portmaster\logs
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1600
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -ExecutionPolicy Bypass -NoProfile -NonInteractive "[System.Console]::OutputEncoding = [System.Text.Encoding]::UTF8 Get-NetRoute -DestinationPrefix '0.0.0.0/0' | Select-Object -First 1 | Get-NetIPConfiguration | Format-List"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:2556
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe -ExecutionPolicy Bypass -NoProfile -NonInteractive "[System.Console]::OutputEncoding = [System.Text.Encoding]::UTF8 Get-DnsClient -InterfaceIndex 4 | ConvertTo-Json -Depth 1"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:4880

C:\Program Files\Portmaster\portmaster-kext.sys
"C:\Program Files\Portmaster\portmaster-kext.sys"
1⤵
- Executes dropped EXE
PID:4284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

WebView2Loader.dll

Path C:\Program Files\Portmaster\WebView2Loader.dll
Size 162KB
SHA256 609c974a8cdd6a76a745b3d81b62f321d79f2dc8f4929e1eea8469d9d78baf79
MD5 6842f2ebf863ab8ee1be470794d1f703
SHA1 26242ced6ddf005e0ea1073409a058121636fc9b
SHA512 339be4521b27e29e457e6d662a7ac98320729ad75df976ccdc9c83596c8b1bc7888ad465e7d38276fb5c0cfb597e7e6e9ba377c6f42db850c317f89e218ba5b9
SSDEEP 3072:DrQJpSFTlTRTzWGbThTNTFSkD0bHYVNqGM2h9P58LZZ5Aalq/Ty+EtJfy2aQQtq:nMMTlTRTzWiThTNTFSzjiBM2h9P5oZaQ
TLSH
T18DF35B5772E4407BE16A8274C5A34A11E77778510B60ABEF03A4477A1F23BD4EE3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

assets.zip

Path C:\Program Files\Portmaster\assets.zip
Size 2.5MB
SHA256 08fe60e9f456f97b4f35eee46eb716cf4826e727a36fa29e14369e1d6d1e1628
MD5 6b22593173993c3080e7d08cf1c628b3
SHA1 0f331877191bab9901820853d3002099c6731ccc
SHA512 7ca41f655bdeb93b89ce130e6c4a494149fe66d20334276f29576471631ff1fba5996159cb5737b947c51568f41be8cae8c39a25c1797e6dae8c775f4ce89bb8
SSDEEP 49152:61cLMI9ejtnWkCJUCY9Kwcj00F9m0sWdSuGO1gpS7B8JTKCOmXbZ7OAFr0:A/I9ejhYY5cIA9m0quGO1gpS7MtOafF4
TLSH
T193C523F2F3175CB4E7DA8136B189F402FDB884A08786A1141953E066F7B1DD98B22F71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

portmaster-core.dll

Path C:\Program Files\Portmaster\portmaster-core.dll
Size 23KB
SHA256 a0f7d615bdd58230e20fe66df6804fffc20a38bdae8b540780236f6b15dac580
MD5 0f94aa3c904db33e99fc076223491719
SHA1 5d24da70bd68610db4ba000aa22176aaa86a9872
SHA512 8d8fdba2f1237072269ed1c2365ec2e5733010618a893b62a958ce38b31affc2aeb207be8afbc3fc189b5204a45ad518b6cdd98788235567b7651603b8a85124
SSDEEP 384:+FBUmttyqVLSXCOrZrz61GaprQ2ADrrsMy8RbmL4nNyMuhqM:+FIqVLSRVMGy82ADrr5ALVhqM
TLSH
T1C6B29E83999448D1DC16ADB4E8F65E26F9FAB5102BD292CF037081A50FA33C13B7E49D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

portmaster-core.exe

Path C:\Program Files\Portmaster\portmaster-core.exe
Size 41.5MB
SHA256 9fdd10ee84b9448254b8a8aa2d2296cb0c2bfb55de051692eba2be77632eaf44
MD5 b5814892871d5fb99c0458886ee32eba
SHA1 3891288026a13efb4e20b5cd00668e111cbbe579
SHA512 25645d281a13e88c6b0c026e9c48d818d963eaeace6718ce23b7ca3152d91c072d59ac25b967ae129ee55b70682d77d042d5028e44976ddbc9bc8d9c3d93290b
SSDEEP 786432:xbu3VqoHGPw/SECnGSLWdCye5Kkh6anrGSsMLuT:NMqcCykn6e6sK
TLSH
T1DBA79E83FE2545D9CAADD635C6A642237B713C445B3223D72BA1B2206F77BD06DBA700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

portmaster-kext.sys

Path C:\Program Files\Portmaster\portmaster-kext.sys
Size 286KB
SHA256 f05ebe81e799fd925a143c1ca44761275fef319c7b63fefb0c80f24101a6729c
MD5 cbaee5f87734a8f3fc52a983bef276c6
SHA1 a862d192c6b0b32c0231d5cac1a5795c45538680
SHA512 1fce99ff1179d005d263af0d8e0da59ed7e4f5e691103b86307febcd04e347ed166bc21a5e33211ae184375fc1044ce22e7eea898b5a9fef01d5505af5c6b258
SSDEEP 3072:Eeg1TkDCNTfh4UZ4bj4BEIfxSgFNt6r73j5Da2Woo9m4Gfv78+NC:O1TkDCNfhwbjCdUA61kGfvw5
TLSH
T11A5473A5ED94ADECE8C4C2F0417A5BF2B5933A1E0A151FE609F4B361E43C6646A3F1C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

portmaster.exe

Path C:\Program Files\Portmaster\portmaster.exe
Size 33.0MB
SHA256 8a629cf69de4bc581033f4631bf0200f5c99b4039ff0850b6187e69596472dc4
MD5 3892a1c36b927475cc6552a50401fb91
SHA1 2191bb5ccbbe7ca0c6ccadcd5a6675508caba5a5
SHA512 ae43bcd30725a7e46c31a04e00caab3d4f032c57b480aea673d9588f0db6a15cb0604b7bf12201c5bc15bbb686ed7524d4bf14b81f5745ab0b23158aae4f1625
SSDEEP 196608:ulByvYoXEN29rib3RR2vnz+itBAiOU5LL/mVsGQl:Py2yuB3OkLLGs
TLSH
T101777E03F5640A6CD99FD67486AEA336F7743C894531FBAB06B0BA322E36791971C704
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

portmaster.zip

Path C:\Program Files\Portmaster\portmaster.zip
Size 1.9MB
SHA256 afa0838115cdd3d9861be17f7a19360bbb9b506ab4eeed11be4ee3ad0d486790
MD5 3b78f103d41430151e0390a38ccc60d4
SHA1 e565d543a395843a4b71e9578b2d48add0236d58
SHA512 6eed2aef7cea1c0cad655173b1bb95b0c9628450728604eff20dd5858fd76e1f390ef50dd28f2b9a4057c8cf7b39959b24bce15602ed9ba455e68fb67af9f7f3
SSDEEP 49152:zqW/0GJwum+m8DgI27Ug8KsYpQ8No/TxCap:zqWJJwu8Qg57UjKsYpQkEdCS
TLSH
T13F95E176C3182AB2CA0FA679D9279B8F4AEFC10765353DAB5D60DA00BF4A0C16F70745
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uninstall.exe

Path C:\Program Files\Portmaster\uninstall.exe
Size 769KB
SHA256 c7e6a62dd64c0aa7cf876a8709fa0983ae1c6944f0c195444c56538c93b2e9f1
MD5 4eb7ea5403fc606f7d4034dcc604daa4
SHA1 c6a7f4a30bd5f268d0dafcd3c887614dfb925090
SHA512 e717ef06e39ff4936edb5f298292fff871ae71577ff184d5d007d3dac550a5426e0ca051df421c1ca510c692890afbbc9af0ebf1d08ce7dc6a602881d46a91b1
SSDEEP 6144:3Ya6qPUQGroMJlBThQqjYn8zKU08qaiazQg+C1h70wqPar4a5O3+ddcdXHFIPi+d:3Y3QwoMFSAEgf1xqEW++ud3
TLSH
T1D9F4025A1BA4CC63E96507B20677C3F62F73AE0529B1631B07E6BEB77A323435805643
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base.dsdl

Path C:\ProgramData\Portmaster\intel\base.dsdl
Size 11.9MB
SHA256 dac30190d586bf0917728d3bd539258c479c278779e76b3f56d6f13992340a3d
MD5 1801fcfb356d317ff404cbaf7043390c
SHA1 bc9dc46b53a2381d8cdbbd01be9759582e4cf830
SHA512 1749307cb54c132249a80952fd9561a768052e0aaed19716f4381ea9a1183f7f53d7a935d14038f49290743807db9e48763656d11536e86325b87ae35e5a6047
SSDEEP 196608:xh3OMFPOS/QaaBjn8xiJiepDyLMxFDSyDtELea8qmDfLkL8AWSLJuGk128dMauf:xh3qS/QxwQBpm4xFuyZ2ebD/hihk12Xx
TLSH
T1CAC6337E8749B0F79C260244EC804A9EFC9F1599C71726A063CC4952FEB8F63937E496
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.dsd

Path C:\ProgramData\Portmaster\intel\index.dsd
Size 4KB
SHA256 026325cc7af459251fb08dce0a6166aeece4c9b5a4b7d26e15f4f7d94e0e6e0e
MD5 b5faa7d7a5aeddbaa0745cd62b18a4b1
SHA1 3d94a5f99e7fdd3e8159bc03e42567b06cc70d2f
SHA512 0e01cac618d62440d8cd3236b94bc108984ae023a1e8fab5d8e99d19f38e6964b6eb3c359faca13d6d9defd59f4fd5e3c93f84914dc7b2d2c29b2a15d70a05a0
SSDEEP 96:JAAlALAc6zrU0x42TFqXB8uFu9pDAIkCBjW8ts1qGkFXhi:HUIrpxFTFCTiDE1qGms
TLSH
T18B915D3CB1CCEA4BD27F6858E27EDF02975B3930FC55142741ED76929AE68129360C24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.json

Path C:\ProgramData\Portmaster\intel\index.json
Size 2KB
SHA256 07414850351d1401da05836750bdf4f14247c67bf467bd8990df263003fb59a4
MD5 1ee296c3bc2788547fe829c63138a951
SHA1 6f04fd11a4aac6c8cd8970e4c204668c13cf7dac
SHA512 db4d72fd06a62273f0a37b337907d40eefb9b32683cdc669509c076b47635df1209249186cfffba73aa4b71c3609048564c586e14b059a5e6de17c6630e08b2b
TLSH
T16E51DA85C2396DA262CD23B5449D21C9D66249CFBCE6AC08334D550C0FAE07F2A3F29D
MD5 SHA1 SHA512 TLSH

Submit Download

intermediate.dsdl

Path C:\ProgramData\Portmaster\intel\intermediate.dsdl
Size 1.7MB
SHA256 f063de7ae0a939628279b752d84bf18a7a97e9599fd375b33d4ccc6b23c2dfd0
MD5 f5f3a8d7abe200a4bc32af416b8cc8e6
SHA1 dc61dae7ed3e77cd148851000787196d005a3c5b
SHA512 d38871cfcaef0bd703b20c5e4af9856752091f74288f3d625f3391fd01cd5e1680ac11fb4f971836e7061899639729583db6fbdd57301e53592c16282b52dadd
SSDEEP 24576:e19PT7pJQwzILQFTmkDPc62lHGi6ZCas/9ZoKJpGYp2brH02Jc02a5yMgk0wrmGC:e19PZALQFe629GhZlsXoaGYEv02e02aC
TLSH
T1BF8533DC133886D820ACF25528996EEDB006FF90A1A97D30A8C3A0EF1FE7515EC49775
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main-intel.yaml

Path C:\ProgramData\Portmaster\intel\main-intel.yaml
Size 14KB
SHA256 c73be8f0600af4500f5d3e6f8e354f5d96dba2ce37d59aa976306a8ea9e5bc6d
MD5 f6a3e1979bf4189a242208c20119c4fd
SHA1 f15becdb33ae10c8898930eba7720e2e4bda5ac6
SHA512 881ef1b5c23c2874592bd3c3e0c7ee3dd5cdaae8b9625c353ae3b7071ebafdbdb743bc93c49eeab3fa30ff4541248842004803fadf98be5175a7f4b8611a8d3c
SSDEEP 192:HixmSUHIiRigYk4R9bG9/KmAcc83qSob4JE/RM5o9qLXVteDlP:+K31Yk4e9nUVJkJEZMK9j
TLSH
T139625456C72D1878F068D261E77BB6F1B32A8E039161141477AF93B91F4B34772E80CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

news.yaml

Path C:\ProgramData\Portmaster\intel\news.yaml
Size 972B
SHA256 fa64e8d0f2adc61093df516d4be68ad536c4de29fd9f7c2473311dbdaaa1f9c6
MD5 f88861e9dba633b7ed2b8db750e9b586
SHA1 fd6355f3d0c0ae83713d42d4c6650fe7b276ffea
SHA512 e5b671bfece741ed5baa57514c366d7a9623b1e914e8fd10af19fd0f7454959357a91b284fac4a91a581e6d9013bbb6854ad5eb1b05bc84b261f60d8cb456fc4
TLSH
T17211E1671A146B0E4A5557DEA2DF215DD305E6EEAAE0E0B878CF8101130E86454BE05D
MD5 SHA1 SHA512 TLSH

Submit Download

notifications.yaml

Path C:\ProgramData\Portmaster\intel\notifications.yaml
Size 6KB
SHA256 8168f64860717712a9d0a00da876e84f03c34834b3a8e0e1dfa783a9c29f7235
MD5 9f328dac539016f79a513f5b71517c29
SHA1 b6b5d1a04eb8b6d0d88819e818d448b159a03381
SHA512 0b3697a9b34ec142a9427e66c3f2e9f07aba92381c5bafc1111cc055f6e330f1a96ce08d13f4f9c5b8ca3dd3f3d7b1a37b9cb535ceec56e972a988d2f610b7d5
SSDEEP 96:cUwvh6VR0ymBfRpXVNrnr/dqOZhXM4xKDqrFnn0ZEtn3FNT6RA+niFjRAEniFWct:cUI6H0ymbJrRqwrKDKAovK2vct
TLSH
T1C5D185D7B348A67ECD8A109BA4C251A18625F9EF937098BC70DD511C2F0B77081AFBA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

urgent.dsdl

Path C:\ProgramData\Portmaster\intel\urgent.dsdl
Size 308KB
SHA256 3189c406206925de9e6d63d402ccac801fdaf93c8d8fe70e74fe2f5a695a45c9
MD5 3d0e36524ff27b465368c9c46178f484
SHA1 abfaf9b83dcdacb28268e3019c0a8a9982234ed1
SHA512 d20eed7aa372d68694b75e57c04f829658c6c79c92a0b609bc727a2445391bfb157f4edc33c8415c7c73ce45fd82f870a31eaf50337e4b1d6b0e38a8c94c7d33
SSDEEP 6144:5TilZfwiXtI9vwOAFUT0LOO1qJZNu4VY9UcAykK0bnUK9y5bbjpm937:IHfFXG9yaU7MrNlYLAykK0TVy5bhmR
TLSH
T16264238D6C7DB716C4B25F49218CB3B7790B6A8303D64F22D4290724B2E4B79487B5EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 1KB
SHA256 2ed65ea77b513e3f89dc03ae971fa0892b1cbf4d3231d2e968e4ef702cc65d5d
MD5 67197670bd1bf74ff15175b3021c3616
SHA1 a9f7c8fe5feac0d9fad80331fe61ba66a480d8df
SHA512 83e2f8708329576fbdeaeea68305700d5401d9eff8082979f6a6a33b1d520c264d12df79465fefb8b3744bec8b8cdfc3f75a9f7475b7d80163acb34bd82c4a0f
TLSH
T16C217723F3DC8215C899403A10CDAC2032B6C7CB40DECF5B6B84E255A53F6A9DF61150
MD5 SHA1 SHA512 TLSH

Submit Download

__PSScriptPolicyTest_s14hbtpc.xyi.psm1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_s14hbtpc.xyi.psm1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

SimpleSC.dll

Path C:\Users\Admin\AppData\Local\Temp\nsy7288.tmp\SimpleSC.dll
Size 1.1MB
SHA256 1620cdf739f459d1d83411f93648f29dcf947a910cc761e85ac79a69639d127d
MD5 7b89329c6d8693fb2f6a4330100490a0
SHA1 851b605cdc1c390c4244db56659b6b9aa8abd22c
SHA512 ac07972987ee610a677ea049a8ec521a720f7352d8b93411a95fd4b35ec29bfd1d6ccf55b48f32cc84c3dceef05855f723a88708eb4cf23caec77e7f6596786a
SSDEEP 12288:fRdJsAp4dXFcLBz75cwoCmJKHwe6VuoH9v0D/LF5mM6:fBsmyVS151oCmJKE1dv0DX
TLSH
T12F354B2BF645693EC5AF063E4673E714993BBB726912CC1F56F0084CCE2A5406B3EA47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsy7288.tmp\System.dll
Size 12KB
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
TLSH
T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsy7288.tmp\modern-wizard.bmp
Size 25KB
SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsy7288.tmp\nsDialogs.dll
Size 9KB
SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
MD5 6c3f8c94d0727894d706940a8a980543
SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
TLSH
T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsy7288.tmp\nsis_tauri_utils.dll
Size 30KB
SHA256 7317e5508923f425bced2698bb89f79b00fcddcd1028f44b598732b2e3711464
MD5 fc4691e51cdfac476b2fc63bbe951e82
SHA1 6532da4545864c6ec95f62f27f2199bfd668560b
SHA512 5b544832f1b1b8f2e1c6f8d61a839bea22c2c3d7e2a03671a12bab936e46a6f3fa3dd8aa53ec91157c1de08f0b349d6d2c1aec29385ad38cc0b2ab4c033c58ed
SSDEEP 768:IMSeZbzz284uMJSmuGrAFKpnp0jdhK7R+qV0Z:IjKfAuXiMtXIV
TLSH
T16FD23918FCC56FB6E2DF1575240C596E429FC8180B14CE9BD7A25E22E9E63722EE500F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0bec24e9-e188-4e3a-bd16-3cdd28cba5bf.tmp

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\0bec24e9-e188-4e3a-bd16-3cdd28cba5bf.tmp
Size 3KB
SHA256 f40835da7d1d22e4152284c3b9bcf220365b1dee2ec37fe778ab0095a8d9718c
MD5 c8502eaf5535e0f6bf260598cb3b17a1
SHA1 70dfec9683e7006a0fb59cfeb0e800e641e64eea
SHA512 528502ae32f30e3b2893279f83d6716d08e50321322d5a1de666b8dede34b098a199dd1504a54e93bbe8274c0cb5b37cc3d88ecf9c9821fcee0afb29f7f818f3
TLSH
T1A971B62AA534B9778DF3D60479862B1BEA619037D9D13FA4CAED4F0C01DB29C1342817
MD5 SHA1 SHA512 TLSH

Submit Download

1426bebb-5c8e-45d6-91b7-c33253c2a542.tmp

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\1426bebb-5c8e-45d6-91b7-c33253c2a542.tmp
Size 4KB
SHA256 d765b95381b3c15d216ac71222e28fa26c63706f444bb8fb7d803fa2f985149d
MD5 991308941343f08ede036d30c7738b97
SHA1 f259fee05d48bc3ea809331f6f81dae331957721
SHA512 2890bdef0092d2f3b86d572f8eaccf2d96775b579f89fccc574d72ad5fb65dbb74142420ee58ecb92548e224bf010644a382d6909d50cdb36a393abb0c887457
SSDEEP 96:rSNkGS3fw0UQFXo8kh/cI9URoDotoL5pnfBtS+6UcHlR+QerKYZRZkT2+Jka:rSNBSoVQtYeoDU0dptS3lR+QerLcr
TLSH
T16EA19436E870AA378CF2974479473B9AEAB0512399C52B94C9ED0F0C428B29D1342817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

77c79e1e-d10b-4939-8079-ec70c722965d.tmp

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\77c79e1e-d10b-4939-8079-ec70c722965d.tmp
Size 2KB
SHA256 de907ad72ed5b31becd090f264b5dd80efbf4db522cbd83dc75310a33b2fdb75
MD5 2b0478981fc1b6b0a6003552063af5ed
SHA1 18eb6f39d5ab443cf94c5fcb21a5c33d8eede020
SHA512 e6bcf35845d497b17c7a6604c9a5e7ae39754a0b1d2dfd42088c23e0f83ab6dc77551003a0864a447c8ffd1f691f596ed81890de3d241660ad9643123cf3ab0a
TLSH
T10C517533B9247F76DDF28604795B2F2BCE3590669AA12F5099EE4B0800DF16D2346C27
MD5 SHA1 SHA512 TLSH

Submit Download

9407b59e-ab9d-4f82-9190-6b1bd41a9ab4.tmp

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\9407b59e-ab9d-4f82-9190-6b1bd41a9ab4.tmp
Size 3KB
SHA256 ea97158f0d3bc102b2a353987fa37b44838c975e9d59c025c13d0f6b1e89f248
MD5 2f907fc5e5793fff3c2f38cee235127c
SHA1 059693999baceb386fddb572e7d24ea81d5825df
SHA512 cc4b1f5360c45b1cc4165e423d035c64fe382db37577d9ab240c36e20482dbca0b1fb018053dbb4b6b4d2dcedc3c804132b2d18bfcb98a1db458ada9c898736c
TLSH
T17971B62AA534B9778DF3D60479862B1BEA619037D9D13FA4CAED4F0C01DB29C1342817
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 d85a66bfaaa3128adc355d772fe1c61a8d5d845c218651c18ef236d62664a982
MD5 6e990617b173f3949395d1e6662228e3
SHA1 d1f7dbbc1c37cc55051780e28c0e47db039216ac
SHA512 7e8075d53bab432ba4be9cd5668ea68fcb36eab21eb56cd9b1c40cb1748a10fffb97559b63b209c559451d6d0dff2d8a2d1b6f1ee19eebd6c803047b57c9ac07
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 b2f14a1bccafa9c8c5af9c9bc1fbcc0905be8a135fc595f1e7e85ee932397a74
MD5 21ce1e33705c7988f2c9209ab07ae3a5
SHA1 d26c40938754e5754d3d036a10c453b6c076c988
SHA512 974908c46cc13352be95803a1c2254b9dd69545bda0b6fd58f637c377497154f634184bae8c27a200d8635107e6b08bc3fc1a0ed88460545c9e4db90f3dc98e5
TLSH
T1C8D0122332018135CC1029B3040362491500C50B400580019428DE9E5E544911907441
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

273f6d92-f4db-42ea-83e7-b5b3d9ca11bf.tmp

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\Default\273f6d92-f4db-42ea-83e7-b5b3d9ca11bf.tmp
Size 5KB
SHA256 c801f5733365348660be85a20269ecc68e1e579d3330f575e00488bcde55be92
MD5 b0ee52f0e658575b66697f78dd887ec7
SHA1 d7ae00f4444405944faab1d047c79af12a9c6d8f
SHA512 8cc197a9a7de1032d910f14e39f64efb2602d49a7d30bfbc9381aabe337376eb4f97c89b04719789ffdae47112aa51b7c33b439d776960046b43bef84552f763
SSDEEP 96:stV/d48Pb9ckgv5h16ZdIs7/x+6Mhmuec4OK1ejerK+gnwTuj28XM0C7K:stJqfvKIsV+FcOKQj526jGtK
TLSH
T150C1B6055E28BD7B8CC7E119BA39BA1BE2F5A06260D51E58EBF8461C08DB5DC6307D07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\Default\Cache\Cache_Data\f_000008
Size 525KB
SHA256 c8598aca2a616f5fcdda15a95c5ee2d7c2be4ecc30edf67943c79e5ae97ee6e5
MD5 eb8486588dbf89a9a3803cb047309a25
SHA1 6b7343a9a2aaa28afad39809f52ff093d9c6203e
SHA512 11b72e41429b7d2ccc40378e30ed13955a42680b0a7138cdb5464d46e6488d4ef6a042b2b44aa0c5534e08c40c952e830717dab10ae46aa855ed7f471143b914
SSDEEP 3072:gGLJA6L0kscOVziqI6c5ihj5mL41I8FVyfUxxBhyfOLwpmrflCoN0jMJ3XAKXasP:qF1hwi
TLSH
T11DB4555981810E9FFBAC4BC8D9E77DAE5825003298C8EC4CB4DDACDC815CB9DB056A5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 192B
SHA256 ec90da645d0005c9943263c7d5d04baf3be5b110390d144e629d76e23b767210
MD5 215b982a2a155887e2872d5b714ad549
SHA1 5298b8d99586a0036f4f3c69158683d7a3c30d51
SHA512 e8323a16ce1f45b8a5223cf9d1f307f7b59f2d455abf64fda0a16eb05ad6164f90f20777581bc58d3fe25023c276dbd7fbcdee4e8f676fd3992ac875a300e85d
TLSH
T15EC08CF4003CA003F307F1BFA1C3FA71393806D5053B0F080223617FD0043210204010
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 56ba02d3f3543860fe8623acebb5f215fbef1b5c8885e21f3cd629d0a5de306a
MD5 07b8bcf568e8fdceec7dcb4b7de687b6
SHA1 874efc6fe4f8842b43ed344e976faee9f8624700
SHA512 5b4e93869ec81c5c6b362a185cdc202db1bf3757b3d778c361cf0bb5fa4c86a07d0d4aaec4a6fb6b02597402c9d5769786763938db64fe708dca4280f6ef3cf9
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\Local State
Size 1KB
SHA256 be5bf6b88a0a7b5e864f48fbee792e7e8145b41ef1c258c86bd42d98d7ee4ea2
MD5 6fff084dcd0e74adb795da800663869b
SHA1 76ce5d3ce139ee96029f4dfbaba3b9c0eddec2a6
SHA512 6a9bc5a6e941c8f18018c93ab0a07d2f055fe135c16994792a8aaa5994aa32fe525aee7e5b576c4d8ca9a459bacfd865710b77e9137d9caa2be819fade5393d8
TLSH
T179216277E5346F72ECD66245329B6A6F9E30603B86608E0095EECB0C11DF19DA61A933
MD5 SHA1 SHA512 TLSH

Submit Download

ba12dc55-c98e-4b80-92fd-cb1559c7c190.tmp

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\ba12dc55-c98e-4b80-92fd-cb1559c7c190.tmp
Size 4KB
SHA256 4a520290dfa354fa75e1ec6a48c004a08258abc22cd2bc35f8057a109fe9d822
MD5 a57bec074771b3bbdc05c3bac83be4ed
SHA1 aa7ab6c422b75458930ed5380042aa393c6d78b3
SHA512 0bfc1fde5222d9415f81f1b257a5db0d396eeaab3e1cdee606afd33f35f85c654ba154d59539c225a5e0d778dbe8fe50027f5db4fd0ee3965e84ce7852b5e41a
SSDEEP 96:rSNkE93fw0UQFXo8kh/cI9URoDotoL5pnfBtS+6UcHlR+QerKYZRZkT2+Jka:rSNloVQtYeoDU0dptS3lR+QerLcr
TLSH
T133A1A536E830BA378CF6D74479473B9BEBB09123A9C52B94C9ED0F0C428B29D1346817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c69967cc-f341-47af-9dc7-096498b9104e.tmp

Path C:\Users\Admin\AppData\Local\io.safing.portmaster\EBWebView\c69967cc-f341-47af-9dc7-096498b9104e.tmp
Size 3KB
SHA256 e95364ae8c8a8803c1d777fdb470f206d8702e2f30dd748532046a3f04fb46ad
MD5 b96818cb9cc5d053678053fd52842a1c
SHA1 94ae38c78697d2015de9abfe88ec23206094a076
SHA512 c86cfe72ad6f96e036f6ddff34bf7aa7ece47cb7e8c96bf262817073bf5438385fae475aa1b466e7e9b3343b32004967b3e5821baf8e7e4aeda0d65cfffffa01
TLSH
T1B861843BA934BA778DF39A0479862B1BEAA15037E9953F94C5ED0F0C01DB29C1342C17
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1492-17-0x0000000006270000-0x000000000638C000-memory.dmp

Download

memory/1492-53-0x00000000066E0000-0x00000000067FC000-memory.dmp

Download

memory/2556-303-0x000001E833630000-0x000001E833640000-memory.dmp

Download

memory/2556-270-0x000001E833480000-0x000001E833488000-memory.dmp

Download

memory/2556-268-0x000001E8336D0000-0x000001E8336FA000-memory.dmp

Download

memory/2556-95-0x000001E8335A0000-0x000001E833626000-memory.dmp

Download

memory/2556-100-0x000001E833830000-0x000001E833934000-memory.dmp

Download

memory/2556-304-0x000001E833660000-0x000001E83367A000-memory.dmp

Download

memory/2556-305-0x000001E8336D0000-0x000001E8336EE000-memory.dmp

Download

memory/2556-102-0x000001E8333E0000-0x000001E8333F6000-memory.dmp

Download

memory/2556-101-0x000001E833680000-0x000001E8336CA000-memory.dmp

Download

memory/2556-98-0x000001E833410000-0x000001E833432000-memory.dmp

Download

memory/2556-99-0x000001E81AEA0000-0x000001E81AEB0000-memory.dmp

Download

memory/2556-269-0x000001E8336D0000-0x000001E8336F4000-memory.dmp

Download

memory/3448-342-0x00007FF6FFEA0000-0x00007FF7015B6000-memory.dmp

Download

memory/3448-399-0x00007FF6FFEA0000-0x00007FF7015B6000-memory.dmp

Download

memory/3448-415-0x00007FF6FFEA0000-0x00007FF7015B6000-memory.dmp

Download

memory/3448-348-0x00007FF6FFEA0000-0x00007FF7015B6000-memory.dmp

Download

memory/3448-405-0x00007FF6FFEA0000-0x00007FF7015B6000-memory.dmp

Download

memory/3448-401-0x00007FF6FFEA0000-0x00007FF7015B6000-memory.dmp

Download

memory/3448-286-0x00007FF6FFEA0000-0x00007FF7015B6000-memory.dmp

Download

memory/3448-366-0x00007FF6FFEA0000-0x00007FF7015B6000-memory.dmp

Download

memory/3448-89-0x00007FF6FFEA0000-0x00007FF7015B6000-memory.dmp

Download

memory/3448-377-0x00007FF6FFEA0000-0x00007FF7015B6000-memory.dmp

Download

memory/3448-379-0x00007FF6FFEA0000-0x00007FF7015B6000-memory.dmp

Download

memory/3448-381-0x00007FF6FFEA0000-0x00007FF7015B6000-memory.dmp

Download

memory/4880-310-0x0000021AD7E80000-0x0000021AD8042000-memory.dmp

Download

memory/4880-311-0x0000021AD7510000-0x0000021AD7518000-memory.dmp

Download

memory/4880-312-0x0000021AD8580000-0x0000021AD8AA8000-memory.dmp

Download

memory/5040-215-0x00007FFBE8FE0000-0x00007FFBE8FE1000-memory.dmp

Download

memory/5544-338-0x000001B0EA860000-0x000001B0EA9B9000-memory.dmp

Download

memory/5544-213-0x00007FFBE8FE0000-0x00007FFBE8FE1000-memory.dmp

Download