e45dfeea3e1380c0e65b6825be4d471a64c9198b90d7af6228b2330ec6f2592d

Analysis

user interaction
yes
max time kernel
78s
max time network
82s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 09:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
EDGEALERT Installers/EdgeAlert Version 15.exe
Size 35.2MB
Sample260415-lcbfxaax3j
SHA256 e45dfeea3e1380c0e65b6825be4d471a64c9198b90d7af6228b2330ec6f2592d
MD5 11e3cfe8eadd5f481412f6bf27d8c66c
SHA1 87a2b21da331194ff041e282cf80472aee700919
SHA512 4057115d0fef54b7df1323ed73a462eb578d18b38382d534b8a98cdbd421a7555cc7e592a8a16a8780f608174cd00665ec199ce59c9ac977d6b06640ae2cd593
SSDEEP 786432:hv7NTr0lhqc2PcfoYhRpsJRSlIF2SfbHnql7qT+90m0d/:J7NvkoTkph3eulSDnqqE8/
TLSH
T17D87233077DBC137D6A52570A52D8BBE16AA7E728F7150CB93882E5E05B28C24731F27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware

Malware Config

Signatures

Executes dropped EXE 6 IoCs

pid	Process
4664	EdgebitsService.exe
4956	EdgeAlert_Updater.exe
2932	EdgeAlertSignalClient.exe
2160	EdgeAlert_Updater.exe
1276	EdgeAlertSignalClient.exe
1748	EdgeAlertSignalClient.exe

Loads dropped DLL 10 IoCs

pid	Process
672	MsiExec.exe
1748	MsiExec.exe
1748	MsiExec.exe
1748	MsiExec.exe
1748	MsiExec.exe
1748	MsiExec.exe
1748	MsiExec.exe
1748	MsiExec.exe
3104	MsiExec.exe
3104	MsiExec.exe

Enumerates connected drives 3 TTPs 64 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\I:	EdgeAlert Version 15.exe
File opened (read-only)	\??\J:	EdgeAlert Version 15.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\E:	EdgeAlert Version 15.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\A:	EdgeAlert Version 15.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\M:	EdgeAlert Version 15.exe
File opened (read-only)	\??\T:	EdgeAlert Version 15.exe
File opened (read-only)	\??\W:	EdgeAlert Version 15.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\G:	EdgeAlert Version 15.exe
File opened (read-only)	\??\L:	EdgeAlert Version 15.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\Z:	EdgeAlert Version 15.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\V:	EdgeAlert Version 15.exe
File opened (read-only)	\??\Y:	EdgeAlert Version 15.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\K:	EdgeAlert Version 15.exe
File opened (read-only)	\??\S:	EdgeAlert Version 15.exe
File opened (read-only)	\??\U:	EdgeAlert Version 15.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\H:	EdgeAlert Version 15.exe
File opened (read-only)	\??\N:	EdgeAlert Version 15.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\R:	EdgeAlert Version 15.exe
File opened (read-only)	\??\X:	EdgeAlert Version 15.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\Q:	EdgeAlert Version 15.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\P:	EdgeAlert Version 15.exe
File opened (read-only)	\??\B:	EdgeAlert Version 15.exe
File opened (read-only)	\??\A:	msiexec.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Resources\edgealert_splash.png	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Resources\edgealert.json	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.Diagnostics.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Polly.Core.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Resources\red_icon.png	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\EdgeAlertSignalClient.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.AspNetCore.SignalR.Common.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\runtimes\win-arm64\native\libSkiaSharp.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Resources\edgealert2.json	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Hardcodet.NotifyIcon.Wpf.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Irony.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.AspNetCore.Connections.Abstractions.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.AspNetCore.SignalR.Protocols.Json.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\OpenTK.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\runtimes\win-arm64\native\libHarfBuzzSharp.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Azure.Data.Tables.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\HarfBuzzSharp.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.DependencyModel.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\SkiaSharp.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\SkiaSharp.Views.Desktop.Common.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\EdgebitsService\Microsoft.Extensions.DependencyInjection.Abstractions.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\EdgebitsService\runtimes\win\lib\netstandard2.0\System.Security.Cryptography.ProtectedData.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\ClosedXML.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\EdgebitsService\Serilog.Sinks.File.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Resources\amber_icon_small.png	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Serilog.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\EdgeAlertSignalClient.exe	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Resources\green_icon.png	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.AspNetCore.Http.Connections.Common.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Bcl.AsyncInterfaces.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.Configuration.CommandLine.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.Http.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.Configuration.Binder.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.Primitives.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Resources\edgebits_icon.png	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.FileProviders.Abstractions.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\NAudio.Midi.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Serilog.Extensions.Logging.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\System.IO.Pipelines.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\System.Memory.Data.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\LiveChartsCore.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\NAudio.WinMM.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\CommunityToolkit.Mvvm.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.Diagnostics.Abstractions.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.Options.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\NAudio.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\SixLabors.Fonts.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Resources\Full Logo.png	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\EdgeAlert_Updater.exe	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.AspNetCore.SignalR.Client.Core.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.FileSystemGlobbing.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.Hosting.Abstractions.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\NAudio.WinForms.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\EdgebitsService\EdgebitsService.exe	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Resources\Minimise.png	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\EdgeAlertSignalClient.runtimeconfig.json	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Resources\Edgebits2.ico	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.Configuration.EnvironmentVariables.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.Options.ConfigurationExtensions.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\EdgebitsService\EdgebitsService.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\EdgebitsService\System.Security.Cryptography.ProtectedData.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Xaml.Behaviors.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\runtimes\win-x64\native\libSkiaSharp.dll	msiexec.exe
File created	C:\Program Files (x86)\Edgebits\EdgeAlert\Azure.Core.dll	msiexec.exe

Drops file in Windows directory 26 IoCs

description	ioc	Process
File created	C:\Windows\Installer\e585455.msi	msiexec.exe
File created	C:\Windows\SystemTemp\~DF18164F3196A956BD.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI5AC2.tmp	msiexec.exe
File created	C:\Windows\Installer\{5F2B4987-5C3B-41DA-99D2-57BF238B5CF9}\EdgeAlertSignalClient.exe	msiexec.exe
File opened for modification	C:\Windows\Installer\{5F2B4987-5C3B-41DA-99D2-57BF238B5CF9}\EdgeAlertIcon2.exe	msiexec.exe
File created	C:\Windows\Installer\e585459.msi	msiexec.exe
File created	C:\Windows\SystemTemp\~DF5E493A2DCDB9980B.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\e585455.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI54F1.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI5540.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\SystemTemp\~DF56139AD2DD966C65.TMP	msiexec.exe
File created	C:\Windows\Tasks\EdgeAlert_Updater.job	MsiExec.exe
File opened for modification	C:\Windows\Installer\MSI5580.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI55BF.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI562E.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI5B02.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI5B22.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI5CF8.tmp	msiexec.exe
File created	C:\Windows\Installer\{5F2B4987-5C3B-41DA-99D2-57BF238B5CF9}\EdgeAlertIcon2.exe	msiexec.exe
File created	C:\Windows\SystemTemp\~DF23B45D8FE4F9F3A3.TMP	msiexec.exe
File created	C:\Windows\Installer\SourceHash{5F2B4987-5C3B-41DA-99D2-57BF238B5CF9}	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI5E22.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\{5F2B4987-5C3B-41DA-99D2-57BF238B5CF9}\EdgeAlertSignalClient.exe	msiexec.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 7 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	EdgeAlert_Updater.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	EdgeAlert_Updater.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	EdgeAlert Version 15.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	msiexec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2256	msiexec.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe

Modifies registry class 24 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\7894B2F5B3C5AD14992D75FB32B8C59F	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\PackageCode = "37A5212A55C94A945BB8F4D831536C9F"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\Language = "1033"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\InstanceType = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\D5C7183FF10C7384486436871FD13753	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\D5C7183FF10C7384486436871FD13753\7894B2F5B3C5AD14992D75FB32B8C59F	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\SourceList	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\SourceList\PackageName = "EdgeAlert_net8.msi"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\ProductName = "EdgeAlert"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\AdvertiseFlags = "388"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\SourceList\Net	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Roaming\\Edgebits\\EdgeAlert 1.15.2.0\\install\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\SourceList\Media	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Roaming\\Edgebits\\EdgeAlert 1.15.2.0\\install\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\Version = "17760258"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\Assignment = "1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\ProductIcon = "C:\\Windows\\Installer\\{5F2B4987-5C3B-41DA-99D2-57BF238B5CF9}\\EdgeAlertIcon2.exe"	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\Clients = 3a0000000000	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\7894B2F5B3C5AD14992D75FB32B8C59F\MainFeature	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\AuthorizedLUAApp = "0"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\DeploymentFlags = "3"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\SourceList\Media\DiskPrompt = "[1]"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\7894B2F5B3C5AD14992D75FB32B8C59F\SourceList\Media\1 = "Disk1;Disk1"	msiexec.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1944	msiexec.exe
1944	msiexec.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeSecurityPrivilege	1944	msiexec.exe
Token: SeCreateTokenPrivilege	2796	EdgeAlert Version 15.exe
Token: SeAssignPrimaryTokenPrivilege	2796	EdgeAlert Version 15.exe
Token: SeLockMemoryPrivilege	2796	EdgeAlert Version 15.exe
Token: SeIncreaseQuotaPrivilege	2796	EdgeAlert Version 15.exe
Token: SeMachineAccountPrivilege	2796	EdgeAlert Version 15.exe
Token: SeTcbPrivilege	2796	EdgeAlert Version 15.exe
Token: SeSecurityPrivilege	2796	EdgeAlert Version 15.exe
Token: SeTakeOwnershipPrivilege	2796	EdgeAlert Version 15.exe
Token: SeLoadDriverPrivilege	2796	EdgeAlert Version 15.exe
Token: SeSystemProfilePrivilege	2796	EdgeAlert Version 15.exe
Token: SeSystemtimePrivilege	2796	EdgeAlert Version 15.exe
Token: SeProfSingleProcessPrivilege	2796	EdgeAlert Version 15.exe
Token: SeIncBasePriorityPrivilege	2796	EdgeAlert Version 15.exe
Token: SeCreatePagefilePrivilege	2796	EdgeAlert Version 15.exe
Token: SeCreatePermanentPrivilege	2796	EdgeAlert Version 15.exe
Token: SeBackupPrivilege	2796	EdgeAlert Version 15.exe
Token: SeRestorePrivilege	2796	EdgeAlert Version 15.exe
Token: SeShutdownPrivilege	2796	EdgeAlert Version 15.exe
Token: SeDebugPrivilege	2796	EdgeAlert Version 15.exe
Token: SeAuditPrivilege	2796	EdgeAlert Version 15.exe
Token: SeSystemEnvironmentPrivilege	2796	EdgeAlert Version 15.exe
Token: SeChangeNotifyPrivilege	2796	EdgeAlert Version 15.exe
Token: SeRemoteShutdownPrivilege	2796	EdgeAlert Version 15.exe
Token: SeUndockPrivilege	2796	EdgeAlert Version 15.exe
Token: SeSyncAgentPrivilege	2796	EdgeAlert Version 15.exe
Token: SeEnableDelegationPrivilege	2796	EdgeAlert Version 15.exe
Token: SeManageVolumePrivilege	2796	EdgeAlert Version 15.exe
Token: SeImpersonatePrivilege	2796	EdgeAlert Version 15.exe
Token: SeCreateGlobalPrivilege	2796	EdgeAlert Version 15.exe
Token: SeCreateTokenPrivilege	2796	EdgeAlert Version 15.exe
Token: SeAssignPrimaryTokenPrivilege	2796	EdgeAlert Version 15.exe
Token: SeLockMemoryPrivilege	2796	EdgeAlert Version 15.exe
Token: SeIncreaseQuotaPrivilege	2796	EdgeAlert Version 15.exe
Token: SeMachineAccountPrivilege	2796	EdgeAlert Version 15.exe
Token: SeTcbPrivilege	2796	EdgeAlert Version 15.exe
Token: SeSecurityPrivilege	2796	EdgeAlert Version 15.exe
Token: SeTakeOwnershipPrivilege	2796	EdgeAlert Version 15.exe
Token: SeLoadDriverPrivilege	2796	EdgeAlert Version 15.exe
Token: SeSystemProfilePrivilege	2796	EdgeAlert Version 15.exe
Token: SeSystemtimePrivilege	2796	EdgeAlert Version 15.exe
Token: SeProfSingleProcessPrivilege	2796	EdgeAlert Version 15.exe
Token: SeIncBasePriorityPrivilege	2796	EdgeAlert Version 15.exe
Token: SeCreatePagefilePrivilege	2796	EdgeAlert Version 15.exe
Token: SeCreatePermanentPrivilege	2796	EdgeAlert Version 15.exe
Token: SeBackupPrivilege	2796	EdgeAlert Version 15.exe
Token: SeRestorePrivilege	2796	EdgeAlert Version 15.exe
Token: SeShutdownPrivilege	2796	EdgeAlert Version 15.exe
Token: SeDebugPrivilege	2796	EdgeAlert Version 15.exe
Token: SeAuditPrivilege	2796	EdgeAlert Version 15.exe
Token: SeSystemEnvironmentPrivilege	2796	EdgeAlert Version 15.exe
Token: SeChangeNotifyPrivilege	2796	EdgeAlert Version 15.exe
Token: SeRemoteShutdownPrivilege	2796	EdgeAlert Version 15.exe
Token: SeUndockPrivilege	2796	EdgeAlert Version 15.exe
Token: SeSyncAgentPrivilege	2796	EdgeAlert Version 15.exe
Token: SeEnableDelegationPrivilege	2796	EdgeAlert Version 15.exe
Token: SeManageVolumePrivilege	2796	EdgeAlert Version 15.exe
Token: SeImpersonatePrivilege	2796	EdgeAlert Version 15.exe
Token: SeCreateGlobalPrivilege	2796	EdgeAlert Version 15.exe
Token: SeCreateTokenPrivilege	2796	EdgeAlert Version 15.exe
Token: SeAssignPrimaryTokenPrivilege	2796	EdgeAlert Version 15.exe
Token: SeLockMemoryPrivilege	2796	EdgeAlert Version 15.exe
Token: SeIncreaseQuotaPrivilege	2796	EdgeAlert Version 15.exe
Token: SeMachineAccountPrivilege	2796	EdgeAlert Version 15.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
2796	EdgeAlert Version 15.exe
2256	msiexec.exe
2256	msiexec.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 1944 wrote to memory of 672	1944	msiexec.exe	80
PID 2796 wrote to memory of 2256	2796	EdgeAlert Version 15.exe	81
PID 1944 wrote to memory of 1784	1944	msiexec.exe	85
PID 1944 wrote to memory of 1748	1944	msiexec.exe	87
PID 1944 wrote to memory of 3104	1944	msiexec.exe	88
PID 1944 wrote to memory of 4956	1944	msiexec.exe	92

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\EDGEALERT Installers\EdgeAlert Version 15.exe
"C:\Users\Admin\AppData\Local\Temp\EDGEALERT Installers\EdgeAlert Version 15.exe"
1⤵
- Enumerates connected drives
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2796
- C:\Windows\SysWOW64\msiexec.exe
  "C:\Windows\system32\msiexec.exe" /i "C:\Users\Admin\AppData\Roaming\Edgebits\EdgeAlert 1.15.2.0\install\EdgeAlert_net8.msi" AI_SETUPEXEPATH="C:\Users\Admin\AppData\Local\Temp\EDGEALERT Installers\EdgeAlert Version 15.exe" SETUPEXEDIR="C:\Users\Admin\AppData\Local\Temp\EDGEALERT Installers\" EXE_CMD_LINE="/exenoupdates /forcecleanup /wintime 1776004372 "
  2⤵
  - Enumerates connected drives
  - System Location Discovery: System Language Discovery
  - System Time Discovery
  - Suspicious use of FindShellTrayWindow
  PID:2256

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1944
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding C687EF3A45206656D302153F7D9605CE C
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:672
- C:\Windows\system32\srtasks.exe
  C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
  2⤵
  PID:1784
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 135DFBC40E15915841FCC1241B776264
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:1748
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 3C51180CBE723BC44506E3E8A254E22A E Global\MSI0000
  2⤵
  - Loads dropped DLL
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  PID:3104
- C:\Program Files (x86)\Edgebits\EdgeAlert\EdgeAlert_Updater.exe
  "C:\Program Files (x86)\Edgebits\EdgeAlert\EdgeAlert_Updater.exe" /configservice -name "EdgeAlert_Updater"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:4956

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
PID:2732

C:\Program Files (x86)\Edgebits\EdgeAlert\EdgebitsService\EdgebitsService.exe
"C:\Program Files (x86)\Edgebits\EdgeAlert\EdgebitsService\EdgebitsService.exe"
1⤵
- Executes dropped EXE
PID:4664

C:\PROGRA~2\Edgebits\EDGEAL~1\EdgeAlertSignalClient.exe
C:\PROGRA~2\Edgebits\EDGEAL~1\EDGEAL~1.EXE
1⤵
- Executes dropped EXE
PID:2932

C:\Program Files (x86)\Edgebits\EdgeAlert\EdgeAlert_Updater.exe
"C:\Program Files (x86)\Edgebits\EdgeAlert\EdgeAlert_Updater.exe" /runservice
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:2160

C:\Program Files (x86)\Edgebits\EdgeAlert\EdgeAlertSignalClient.exe
"C:\Program Files (x86)\Edgebits\EdgeAlert\EdgeAlertSignalClient.exe"
1⤵
- Executes dropped EXE
PID:1276

C:\Program Files (x86)\Edgebits\EdgeAlert\EdgeAlertSignalClient.exe
"C:\Program Files (x86)\Edgebits\EdgeAlert\EdgeAlertSignalClient.exe"
1⤵
- Executes dropped EXE
PID:1748

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e585458.rbs

Path C:\Config.Msi\e585458.rbs
Size 353KB
SHA256 1616871529d93aa24ec725db20ffbb75b49ae00b933c582697b9e15944f6d2cf
MD5 99229fbcc75ac9857f652056e66134d7
SHA1 90c8d2c5fa578c527e2383d60d1346cf8e4d1bbd
SHA512 d3338f33ef12cb6d34f4199bec2f9896a350140501e73f010c18b6e813da0d8c80e111ad28edee2361e1b79a9bbf3bb8565ec9c3172c28f1bfcbe8b87f6e98ee
SSDEEP 6144:GLFUPXmDRWxuDvQB9sMujuJQoopHlj5FU06uMzH5ufwmJQOMnJJ:VPXmAuDvQBzNSoopFj5+TRufwmJ6nr
TLSH
T12E746B516982C572E76E197426BDDFAB5739BA20CF6048CB73880F2A5EB01C16F34E17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeAlertSignalClient.deps.json

Path C:\PROGRA~2\Edgebits\EDGEAL~1\EdgeAlertSignalClient.deps.json
Size 61KB
SHA256 817117aec7bf0bba92859b216ad3c895306eb142d9323e1b45b9e82ef8b692e6
MD5 c30dc07b46d5e70be29c6e4503f59e97
SHA1 327895c11cfaeef04fab8b305f1ed726856b3638
SHA512 23df651f675ed0f5da71bdb65bb17ac23f6a0948ebc29370839cc5057f3c5c3673d95b34848c55fbb2cab8789ca7b4fcc56fdfc754a4daa16fc149e4157c0aac
SSDEEP 384:CxhxVE2MlbCEwiN8ytxSMEa2MYSeuUSV4KnJAO0zzdr76HfhZ0Sds5jQGeT+:CrA2MlbCEwiN8EcXOc6Hff0is5jd
TLSH
T15A53DB25D8941EA74176BBE9A8B90542F635437F5100698F7CFC204D8F77EAAE092F38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeAlertSignalClient.dll

Path C:\PROGRA~2\Edgebits\EDGEAL~1\EdgeAlertSignalClient.dll
Size 6.0MB
SHA256 d4e4947d967ae72cc4241768bcb6f89565c6a9fa1c0c0fb73db183bf457d74c6
MD5 ae7e02ac8d574fe4f4656765cde106c1
SHA1 b853df66d991b9d1dcf32c76b3751b6bdad29e35
SHA512 97372e06023275023d96d92570b2f429c2e12eabd8b16cda05984d9243ec04d715b5f9fc34d1a4cdeab99d877ce664952a74a3ea309e8317d4eec26f071ce838
SSDEEP 49152:P2P1sFK4frEchEEL1ILzHzuk3I9QxrJO+8diMcDW+4QPY1KFpGr1DGFWtTOgMC:P5FKHcyELqak3IQ5p4QQ1Ope1DEWTM
TLSH
T1C4560903F6974991E3882732C4DB422487A1D993B643F78F7A8E23691B537BA4F4534B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeAlertSignalClient.runtimeconfig.json

Path C:\PROGRA~2\Edgebits\EDGEAL~1\EdgeAlertSignalClient.runtimeconfig.json
Size 464B
SHA256 0ab07ad4279a6d12301ae1eefde81fb95e86de42b5918c1f4d0955d19dccddd7
MD5 9786a30152eefa9ed82b2eb410778d97
SHA1 c994d397347c1af9cc2004130a45db0a3d7a53aa
SHA512 15d8cb1976653839c2889d5e7b021c8c28924ace003400dc977457c4a3917abe2fbe08a2b3daf6d9c40ad0fb382fb4d64a376655845c9d389f50eb81bab9544f
TLSH
T1C3F0ED7ADA106DB715F03BBED12AC187FA3057AB00150D1AB6FD190C2F361B26011F88
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.Extensions.Configuration.Abstractions.dll

Path C:\PROGRA~2\Edgebits\EDGEAL~1\Microsoft.Extensions.Configuration.Abstractions.dll
Size 27KB
SHA256 fefcdb267a73099cb90e5af56b5ef2bca59bed974339b3a6810352bde23537a6
MD5 e1f852e450395bd9cad83625ca41afab
SHA1 8a5c6332c4208e319e648c8850ab709c82efe48d
SHA512 54fd5acaa24c426b42aee7b855b6614c9c1e2676d0f54683d4a2b059db7c9bda70988c6ceb43f488abc34759f575cbdb75c3f0649cf932cf5fa2f53a66cf2881
SSDEEP 384:Hxrv7hVmaET50kv96TG/FwzzRjz6qMvckxGMCWsfNWCx5kHRN78DuNNPR9zbKrQV:97hUaETSkXZp32No8D69zQGF
TLSH
T1C1C26C6953AC9327CCAB1F71F5F1D4412E36E7E27811DA2E589EF1090867B805B32729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.FileExtensions.dll

Path C:\PROGRA~2\Edgebits\EDGEAL~1\Microsoft.Extensions.Configuration.FileExtensions.dll
Size 27KB
SHA256 d90fd867b38c134678d31c4354f4514b9f3efff494f7e9eecac8df6ef07a77c9
MD5 f36d31e5e59f75b3eb9b17e2a28aad7e
SHA1 00805eb75a624f544cf77f8cc8e883e3d4a9ac4e
SHA512 4421625c14285d339391d2ef2cfdc5f7f6f0ea7fa9539a84721adbcd07389e9970e6a280cadae78a0ca2b7ecb83b9ea78dab15a8dfc94fa1032c5c5ed75be89a
SSDEEP 384:/MczpIwUCdKetxyFCLJNsLghXABAqWqf6Wx65kHRN7fh2JNNPR9zbKXwH:Ect7lVtfMewAE1LJ2H9z2wH
TLSH
T1B9C24E6297BC4303CDBF0F31E8F0E841193AE7C77810DA6D599DE00819A37959E61BBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Json.dll

Path C:\PROGRA~2\Edgebits\EDGEAL~1\Microsoft.Extensions.Configuration.Json.dll
Size 26KB
SHA256 96920caa680f7583888e3387e17950bb9f39f6df8e24fcb4d356454dd2b8e494
MD5 59689c24292a786205cddcb16b267c39
SHA1 cc347360c8abf385ceacb48249aa3cf0753bfcce
SHA512 ce3f9dee2ca1aaf079724578e6e31dac94184a98e184a8c04eb2621c0c874825ceea48d4c7e0f6c3b33faed63b5d290082965882a7c678a3a5c5d604d39ad3fa
SSDEEP 384:z+J1o5egFMvqo5e1l6vWkf2W8GTb2HRN7qI+R9zJKbn:Q1WFMbhNUG/iNi9zET
TLSH
T1E3C25C6593B88327D9BF1F3099F0EE452D39E7926911D62E199EE10908777C08F3272A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.UserSecrets.dll

Path C:\PROGRA~2\Edgebits\EDGEAL~1\Microsoft.Extensions.Configuration.UserSecrets.dll
Size 24KB
SHA256 a415ecb7ebdf4f6598c19fbbdf54899ce488477e1c81972ba575910efb54a0c4
MD5 a2d4648be3ffc29d4037cf7538c9f00e
SHA1 d91e6678bc4612ef3c93d13db8fc1942807ac91d
SHA512 6340ba6e8357402123d642699f7c41319ae5dac8d0f0d907f6ca981040eebfb9cc77c15e0439c7907eb027349cb3b9df78f9f7c85cadd3f4e739ef8fed8f2f17
SSDEEP 384:a/sfDn/DN9gRxL1iF8gSE1LGDW9PCWiTb2HRN7rLpV5DNR9zqt9Pz:7bNmxcRGee/iPpL9zWz
TLSH
T1AEB24B86A7FC4312FDBB0E32F9B5E5812D79BB979812A52D086DA00D0477BC4CB31729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.dll

Path C:\PROGRA~2\Edgebits\EDGEAL~1\Microsoft.Extensions.Configuration.dll
Size 42KB
SHA256 b5cd9da2c3364a5b201cecb0c80e25227d27ba44d96343d2894ff8ef3fd81550
MD5 ebf181ef6f8cbfdd9149d9d609059051
SHA1 05cd721a76c1afb00df1b6417e6b8b1a7f344e67
SHA512 fa2f59833721fb50500d89ae5a3c8c7474e247a684440c01bd30d46a8962cbcbe8f216d41bba9ebc075ac2e1ee19c37a46d0e1db922db23a3e261b5c68155877
SSDEEP 768:MLJOZTEW1WTsTeVnrI/yqCtHUafO+ukucyOgn9zT8B:MLJOpEQzTp/AX2+uMyOg9zTc
TLSH
T1D8135D5A63AC8B2BC67E0B76F5F0A9451F39D2477912E71E4C9EB09609273C04B1273B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.Abstractions.dll

Path C:\PROGRA~2\Edgebits\EDGEAL~1\Microsoft.Extensions.DependencyInjection.Abstractions.dll
Size 62KB
SHA256 4e594bffd358313910cf45acce035d2ebc129fea8591de8ba40c3ba7e458b26b
MD5 111e8cb3d3453e58b8802842396dd901
SHA1 3938d02b0803a5016a955a6662c8557b3416e3e1
SHA512 7531a1347c844383105fc67ead62542f9b9f72c1ac1cb3806990f82b2f2e8d48f83c378d0246132e9d495e2f38f45e65b33102ca83767eec37d0183352fc7270
SSDEEP 1536:sCYbKF0XEQqb7Uo5hGrrd0i0A7Hf6dbW9yfUazz:YXp0pk/6dK9y7
TLSH
T13E535A54B3FC6727CBFF0A70227690215738BE872106F70A696BD0B509A37D84A61BF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Abstractions.dll

Path C:\PROGRA~2\Edgebits\EDGEAL~1\Microsoft.Extensions.FileProviders.Abstractions.dll
Size 21KB
SHA256 f08b1f597abb3647ab6e844282ded763e6078dbef6dd54b9d956ca419fac42fe
MD5 504acfd4f683b6f4859d240c1f6cd749
SHA1 ae54915150997136f132bf61bdd9e7859f56d9bb
SHA512 a05f8507a8830ac33c45942bae06c49a23242f35b4c01b3d677f8fef0199c8cdbd956967bb73374bc52956d3bbfc82d422885800006c644d4c4aea4717287239
SSDEEP 384:ggH8Tv2So+MVV1CMHWs/hWuTb2HRN7TI+R9zJKhJ:ggcTvlGFtr/iMi9zEhJ
TLSH
T178A25C66DFA88362CCFA0E7064A4CD473D3DD7E75801E92E0999E1091EF3B849631B39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Physical.dll

Path C:\PROGRA~2\Edgebits\EDGEAL~1\Microsoft.Extensions.FileProviders.Physical.dll
Size 43KB
SHA256 9f67076c79a953f5068c0792114f9722527cfa17ed7414c73fd14833bfe59918
MD5 08ac1d14ad47498891953e40909fe293
SHA1 996492040743ce3af3734e07ed1610a6ab4ff375
SHA512 0a108f138dd52bb47892d836f0d54eeeac00e9218abc02964316e3bbfad25d54b095e4c7d7d676922246ad42998cb37745c7ce9cf4a7e0c30f7742d37d89cb08
SSDEEP 768:/0uMdRozKWWyAWxcnuHeHopdtU6LCxZF+dD/ic9zxz:/PMSeWWyZcnuHeIpdtUxZF+dTiUzR
TLSH
T13D138D22A3EC4317CAFE5BB029B0F5460735F3DB6102FB5E1D59B18A389378457606BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileSystemGlobbing.dll

Path C:\PROGRA~2\Edgebits\EDGEAL~1\Microsoft.Extensions.FileSystemGlobbing.dll
Size 44KB
SHA256 ed0855b522f09b5a9ddbb85de62042c25e07d10044086da8620c845de41e473c
MD5 470ad714b6cb486c3a64a918e72497a7
SHA1 13583e2627ff47fa64c192d8f91e06c4472e6cda
SHA512 6237af61b1f592fd10692906024fc970cd41f3db971c2a869aed392ad686a904edb19dae81cc247b691a26a7e5e554affdf0853b1e29938d6cea799e20343c77
SSDEEP 768:m0PO7gRE3x5o7UP04wqgYtqPRw02KO7I9Yfwbhgv5NFcEn9zT8n3:m02GE3xOwP04wqgYtm2nQY4Ngv5NFT96
TLSH
T1CC236C55E7AC8327CABE4B78B0F4A0400A39D667B422F34E4E8CF6895C737809661777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Hosting.Abstractions.dll

Path C:\PROGRA~2\Edgebits\EDGEAL~1\Microsoft.Extensions.Hosting.Abstractions.dll
Size 50KB
SHA256 1765c6147ed43b7ce3c0e98db3367791a3821def124775015bdce6278f9295c5
MD5 ae682f374a15699eddd7399ed9584370
SHA1 0e6060c65e140e033c18c683feb5aa7833b1c119
SHA512 79c2967dcd369513ecc160f7c700886dc15d318d662a2f035ce78567600654a414b6e2394a702b383284abd8283d1e1b29f22d21f2d452ecdf6ef252a9dc1176
SSDEEP 768:G1xwFY6xnU7GjPb6vXCMVOm4e+X9CzJ67Mo7tKoV2nwsyQYvZt164yCmi3FbTojf:FFJnU7GjPb6vxWFvTbTojVi8zz
TLSH
T14A33C641A3F85225FAF73F34A9F891258A3ABD56BC34E62D154861DD09B3B80C97073B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Hosting.dll

Path C:\PROGRA~2\Edgebits\EDGEAL~1\Microsoft.Extensions.Hosting.dll
Size 70KB
SHA256 746b030485bcf78deb83f6faae9edad0dc803fb8fa1ee6dfe57112a96ac682dc
MD5 61c625b8a96eda720e40a5c3424081cb
SHA1 029729391574267b1c964578900fe72fc140ed6c
SHA512 e8021004b83b223cba57a6716060fffca161b74a947007551c67679824f76da066bacd3d588032e6158919e19c539295fa8e4da4691af72ee6c42974be30a3ae
SSDEEP 1536:Gxfx+lXPSWgC19p3ibv6bbac5qt+FvzCR:YZ+p6AzRbbaZE1u
TLSH
T1A3637C5293BC0713EBEF5AFAA8B491550A32D757A415F71D1D9DF0A808E7BC00B2236B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Primitives.dll

Path C:\PROGRA~2\Edgebits\EDGEAL~1\Microsoft.Extensions.Primitives.dll
Size 42KB
SHA256 446ff16e903e7479558816e213a3adee9a1c1adad65a56d853801b10933e29d7
MD5 f45226e320f41097397b1ba7468c2d1c
SHA1 1181845c7d16ac4c525eec67ec3a6dcfaa78a433
SHA512 417466f57fa8c6d942be5d86b14da5915d507dfbd7aa8d2700b4dd79a9668897a6a6abaab225be45076bdb8d86ccf4777bb3c699b4002a081e4407604f4e2f87
SSDEEP 768:CKEGbmbB0QERF7v6EtkKS+1ke97a1O33ttBOP7yW5yfyqTuia+15OFyx/iCL9zRv:CpGe0QERFhkKSM7ag33ttBOP7yVfHTuu
TLSH
T132135B52B79C8333CEFE9E34A4A4D1442A38939A7923EB5E5488E4651C737C4873227F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Serilog.Settings.Configuration.dll

Path C:\PROGRA~2\Edgebits\EDGEAL~1\Serilog.Settings.Configuration.dll
Size 73KB
SHA256 1159398c7ea29d8d388af7a903d9c0177857fd3ee686ef4cd7f7a0f77aa1a493
MD5 c5aaed10383596cddab49277aa8fb3b4
SHA1 1bb942ec27a03821dba5cde86aa7bde2a649483f
SHA512 85f9faaa7480ee2651912f81e93002b9acc4fccc3125fb3820e383285a2fc555cc33928369dba55380e3d6d6f1d3ebc44a0509e4dec61a3a33e25a1de1f3eeec
SSDEEP 1536:L1Cm+xfMELPKKwkN6V922M9qc+5pT781ytcUy83uf0S8:L1Cm+xfMELPEzV9luV+bMkcUy83uI
TLSH
T19D73296273DE0B15D3FE0BBEB8B521140F70F556706AE7DC9D9E68EE0A61B204D003A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeAlertSignalClient.dll.config

Path C:\Program Files (x86)\Edgebits\EdgeAlert\EdgeAlertSignalClient.dll.config
Size 842B
SHA256 220e25009d8b494c2891c09e3d088046af9bc99fc12fdc9d42a49bd212bb8c5a
MD5 4d8a16f7ee5912b9ac691ec561a784f7
SHA1 d24cfeabe5a0d126825d87941056c78581762bcf
SHA512 c89f7851dd510bcea9a7e34e4543a3116f83ca2cbb93d9efd4d036ef07e5cd046958dd13738173ea590626bed7cf9f5dc20da1c364acc3d70c220d3c51eff6f4
TLSH
T1A6016D2132A4FE6B02431F32C95483411EB143F7D1752428F93E76A89F2688A0B8337F
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeAlertSignalClient.exe

Path C:\Program Files (x86)\Edgebits\EdgeAlert\EdgeAlertSignalClient.exe
Size 152KB
SHA256 09a95ea84cb9337c6efbc1b27127abb54b0c3e8450989ac61ddc4c4082bbfeae
MD5 a6c745b7fea093b0b59c1a70ba405b65
SHA1 e9d586c66b71642d5599887b80ecec518f5730f1
SHA512 1dbc08fdb312e48293c78a9f7a1f10d273767b717b7f9636a8c9bc7b9c76980b80b501fb5be65a016bac2362bee41fadbf2b41ed136629d62ee34dbd81257f0f
SSDEEP 1536:69YXnq9YamgiYSoGR6Ok84vKqILjiCBs86QKLRwqzm4XxCY01NTZZ2bo+W26mzI1:lqvmgiYSoIk8uIHzlqRwa/YB26mzIgS
TLSH
T1F4E33B07E2A851BEE1B6D679CD924C41FB7278568B71A7CF075049B60E73BD0AE39302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeAlert_Updater.exe

Path C:\Program Files (x86)\Edgebits\EdgeAlert\EdgeAlert_Updater.exe
Size 1.1MB
SHA256 77e6ffc9fdda4eb231fcca46c828e8c06669bdb6c79c7f115d4c2ffc05006d34
MD5 2540f0a565b5f5e2da86ac392dba1ddd
SHA1 417f3728295b45849f65835dc0cdbf2101e2ad12
SHA512 1c26bbf169761b0fd5586d15c23efec129a531467cdac1b9bf66f2f9b08efb26495c61fa720e026a3890d02869a749d144a17e2a9fe67304d78864313eb0c247
SSDEEP 24576:AhWQfBZqcAJPcC06g0A7VDaqYzRumS6Z:AhppMnJPaR0A7VDOzRumS6Z
TLSH
T11D354A3036C7C43BC9A11470656C8A7E16B97F774F3298DBA6C80B7A05B99C11B35F2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeAlert_Updater.ini

Path C:\Program Files (x86)\Edgebits\EdgeAlert\EdgeAlert_Updater.ini
Size 456B
SHA256 8932e3956b8de7fcba2dae00ba3b96b342bb944e4583897f19d18f5eef62b516
MD5 5281e41e341d831e911ca5ff9b63ea24
SHA1 ab7654b208423efe617d1db1d2d7842f3d0ad3b4
SHA512 c88d40f4d9ce5cceb17653c7c1cacb949668656c3312f67c73c41c78ff398c1eb67d21e50b1b4f50749ad49ce8cdac62f3154bbe33a071b576098e8a24b90658
TLSH
T13BF05CF74997DAE23302E4D9A21D40536512C14FDFF4181054D8350BF6D4C2B1F2E427
MD5 SHA1 SHA512 TLSH

Submit Download

EdgebitsService.deps.json

Path C:\Program Files (x86)\Edgebits\EdgeAlert\EdgebitsService\EdgebitsService.deps.json
Size 5KB
SHA256 2202a2bc00f081c32d76f14e36374ba93ceed58dafbb106693d1d015eb424378
MD5 76fc55f9377929c1cd454bf313fe6a5a
SHA1 c3e5ee0f38717fd0962f408dc024373423b3e26e
SHA512 941ae7d441b765eb587e574548508205fcc5ed555ebe8c7df6257955a0d6d4aecae6ab03362f8c89306c67b64d6f82096aeb356abcba1b2310f86d35d6ba0203
SSDEEP 96:1BKZA3MisCBN9rCk2hPqBDeYWzP8mmaMFpGIFpfbsc7:1BKUBN9rCBrY1VaMDzP7
TLSH
T115C1FD56E5946EAB04B36FF690794201F635833F1004294EB8FD245CCF36ACBA296F35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgebitsService.dll

Path C:\Program Files (x86)\Edgebits\EdgeAlert\EdgebitsService\EdgebitsService.dll
Size 12KB
SHA256 5edea1af093c3cc09d7b7d8b66fae4c1d1d7a0735e4d71eac1d60c640702eab1
MD5 1c386be207d0c11be8bbfb2cb445450f
SHA1 a6b29b3edb195449bf6d36af6c7394f6ec34a051
SHA512 81f28c6ecad02874bcc0283be39049ed7332aa32e9d020adc2a928b73b573501635795aa3480cbacade0956ffd932c5bfb53fcc2ce3e6ca287d5c31c9855932b
SSDEEP 192:kapViQ8hmo/MgLMC/Wj+3+cq6OLFGEFbnIw108stYcFwVc03KY:kPkCMst/If1Q20ptYcFwVc03K
TLSH
T11642090393C04272D9B60A7AADB34741DB36B65B6807A66D34CC540F3FA664E83732E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgebitsService.exe

Path C:\Program Files (x86)\Edgebits\EdgeAlert\EdgebitsService\EdgebitsService.exe
Size 153KB
SHA256 b06902092747db5acce52ffa18489a8034fe322bec43a54238c3c0ce902f7723
MD5 9ccd1a22c7ad5804629ed9dffc105b70
SHA1 e09c5927dfc49ec768c07289ec9e431a537fcc37
SHA512 d1ae373ef1f39e742148fe010d5e93b5161fb2b2a0b9bc07aa403a79c1bd0697006517bc13008b09b444b77047e845abbb62d69a9a27e32fe7de7e1f46a1f664
SSDEEP 3072:jIl9mTYDNDK36o4zEsb3q3BIIi4bKIYl/I8esNqY:jIvK36o44QadTfYl/IpAq
TLSH
T1B4E33A0672AD11FCE1B7E27889A24A02F77638164371A7CF13A1467A1F77BD0AE79311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgebitsService.runtimeconfig.json

Path C:\Program Files (x86)\Edgebits\EdgeAlert\EdgebitsService\EdgebitsService.runtimeconfig.json
Size 288B
SHA256 2123ca128e77c29ee655af5803e95899f18196707d4af83ec8a6a15d376902bc
MD5 5060067fab327922ce137f17d7840054
SHA1 d28b05b433f97e6d2624d32a48c5e6e629bed03b
SHA512 ecccb26ca51ded1a8cb62a0e7df9efa83b2a4bfab5358cbd772937e4990083bb975c885c2a3232730389f9977b4136b17e4dd3a902f3c56c1e046f840b296070
TLSH
T125D02B66DE106D7312F127B5E071C143F921A3270010085574FE2D0C1F371B60051F85
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.Abstractions.dll

Path C:\Program Files (x86)\Edgebits\EdgeAlert\EdgebitsService\Microsoft.Extensions.DependencyInjection.Abstractions.dll
Size 60KB
SHA256 7cb8f2b3d88600f7abdae8806cebb05155452cda69a42b53e3884ae54ca7a6c9
MD5 63ecafcf7e06350966b3a7be352b33b3
SHA1 77c3f575bc2985ae6318eb2095a5101876da596e
SHA512 0845de9cd6a13df77801e947218586eb91998b3d6b7f995d4ebac1a8f59cd5418219ac48bae74f21d004a0dc7017a894b818bd8525b27ff0a41c5312ac458540
SSDEEP 1536:OIl05L7yvOUb+V427OcZabv/EwcTL3N3VlsiY+zE0r:Oav/EwSL3NVPg0r
TLSH
T1B8531905BBFDD317DBED1A30257295198F38BB472601D30E3A97C06D09D6BC4A893AE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.dll

Path C:\Program Files (x86)\Edgebits\EdgeAlert\EdgebitsService\Microsoft.Extensions.DependencyInjection.dll
Size 90KB
SHA256 4db7c5ebd978fc315ebdc8f0238e5d10506039c1dcb625bfe998c6f2e79aa2eb
MD5 1d7e8c290457bcec9811eb223cb762b2
SHA1 c946ed09dfcc6c5b445cdd54bfbfeecbe4f52af4
SHA512 2b6c4da50c9d13cb21498b43a6b97f8952445ae3438c8cb248e3eab9222dd5ada2bec225bb7998e3b12c3c93e57b796808bb0ae4018140e3d8f2aff76226ec8f
SSDEEP 1536:uldIgF4Xbz2Xybvc7IcZnQnZEsuRxUx06IfTE9j6Ae15IyqL+tlhzU5d:uldMXRbvc7aARc0JE9j6TPqajhY5d
TLSH
T160936B3863EC8B23D9EF1A74687541044F79B58B3007E75E5ED4A4AD199BFC10B223BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Serilog.Sinks.File.dll

Path C:\Program Files (x86)\Edgebits\EdgeAlert\EdgebitsService\Serilog.Sinks.File.dll
Size 30KB
SHA256 192a97f6a2e408c36d9ec8a0eee6bba33a516ddedf3662c031d88e744629f991
MD5 e5ae6947f5ef06d6a52a86d07cebcb3b
SHA1 ae0bd8bd58231799c2d116b50081a6ee06b6b081
SHA512 64884fcf807f3cb5edb6f3958683ce075a6a75451992ebc409f551efebe54e5559923c314cdc834477fac9f2975a7cb454fa6f519e87522981ba998a16fc2849
SSDEEP 768:JUqoXsEgfFHoiikZ9y3BHdD+XR/tGo06B:SLrgfPw3mXREa
TLSH
T1F8E22945ABDD421BE2EE5B7CFAF416510736FAA6FC22EF0D099C406A1C22F044E117A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Serilog.dll

Path C:\Program Files (x86)\Edgebits\EdgeAlert\EdgebitsService\Serilog.dll
Size 137KB
SHA256 6b67fb3f104513036a7446ce4da3b49449ec9cea00437c38333910e47bfa41cb
MD5 70a130a463be183b190e8ba1b3673e8c
SHA1 16a42c6f413c810f3b6005413928e3877a9e9a9c
SHA512 52707ad851351b10de30b2509b58561e80d991c59a9c4aecde7f695784694efbf467cb8ee6f07086e049bc43ff58b6bfcfc88e12cba7059013955d10c78d4259
SSDEEP 3072:IfrvplYBATpOdUPBwos7OPp57actMqokE1WliNjfvMWx367:Ifrvp8ATpOSCo9acWbkE+ix356
TLSH
T11FD36B16B3ED0B25EBFE2A3594F8510007B9F55B2037F79F6909ADFA28533414A503A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.dll

Path C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.DependencyInjection.dll
Size 90KB
SHA256 8d6e7b64cce554f0a0fbdb2ba80745895fa0b4e6cc378b9fedfe8ce86f0d8ae4
MD5 7d40b6217fc409171015d905a22f8e85
SHA1 27a31ec52498d9db2b09707ef603860a80fdb2cc
SHA512 e998ab21e2a7f4df84f33c5d7bcb6d04c11481633362f4988f3a22820aa1f84744f51503947492217668b9db39e651d13cab0ef09d804b961aea2434314a3d66
SSDEEP 1536:6sS1Tz5tF1bQWVsdJCKTvZEmwbyQMUiEVzz:3QH5tsWUvZEmNQMAVn
TLSH
T16C936B2467EC4B33EBEF19B8A87440044BB9E55B3102E74D5DD4A4B91AE7FC20B712B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyModel.dll

Path C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.DependencyModel.dll
Size 77KB
SHA256 73e69da2a4462dcdc89136a741c41631a21baf5bd1362d8b273eeb8aa451f153
MD5 7079b76a00c482299f4e18e50f50a672
SHA1 7f2791bebdf420ec4e03197735ea7c123c8c4718
SHA512 efb0f2ac09a71f894f6f911499095498b34bcf7fc7a5f27d4c48e947e9d48cb314c0d036d12c1e1626ae90779c1b9ab01139fed90cc195ac3ad59c95050cde6a
SSDEEP 1536:2jb/MfZHHdIKfHTgZFLonkWDMEEj50DXUi+1mOQpLiG9zTi:2jundI6T0LonkWDMEgKUmOQpJ9vi
TLSH
T1F4736C016BEC8716DBEF1A79B871A0954776F75E7413FB2DAE0DA0890853BC04701ABB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.dll

Path C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.Logging.dll
Size 49KB
SHA256 4330a5efe9d110afb7f8e567d5b43eee976e0f7f6802d13a211b65d747529179
MD5 5d938dc7ea664a133622c549c75f34f9
SHA1 31be5da67b58f47282f4581a587bb39d9cbc17e7
SHA512 b38899246011715224c32ecb6ccb41c4fa338aa32a72c3ac20da8e1fda4a2237c5812b1ce6a4f327f2ebfd878f7a25cdf6c2ea60315fda8469d15e0dcbf5d57d
SSDEEP 768:SbyNvwqX2LvG84aSFWZNSYv6VmTygGPSikiw64yw64Ibdez7+Rs7XTfWDs/idaiy:nd2C9a2+EYYbgGB4ImYYWDMida+zET
TLSH
T11F336B4153AC6327DEAE0E38F9F4A8415E39D7537402EB6B5ECDB0911CB37D486212AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.dll

Path C:\Program Files (x86)\Edgebits\EdgeAlert\Microsoft.Extensions.Options.dll
Size 63KB
SHA256 5e01894cbc0661bacb8ca8f485a40d5ee4e02f28fef58007668a0276431b4693
MD5 18638600345307f00b51037bdf4374a1
SHA1 e8fca245a2b9a21589bfe18526c97c22939abf1b
SHA512 6a15b951c71d03ea49677ef3bc4f0095cb78cf2180e2199422da4497e3e3bc7004272e10ad4b2dfad27948f4c94e843f9617bfe6ddd3fa5bca4cd10bf1618b09
SSDEEP 1536:UahqHoZX+NmzYUGrCUidKHPhwMEbBolCixzZr:UYXfFGrCLQvhwME+l7tr
TLSH
T1C1536C05E7888712DEFF8931B4ACB6620F30C35BF507B76745EDE95429233908E6563A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Serilog.Extensions.Logging.dll

Path C:\Program Files (x86)\Edgebits\EdgeAlert\Serilog.Extensions.Logging.dll
Size 29KB
SHA256 a0b6c860fa5bdb3f0ebe5c7af709fc686a9aa575b616b706bd65a5d0c1fd4226
MD5 ef1687b53bd798976c843cbaa9066f8e
SHA1 8932cc0cec3e9b79e02ef051541f7d10d247c022
SHA512 55ffa5c101a31af429dff9129aeda7f21624d8d3d71cc71e5130483e88f64c5e4c0ece6e54175904658b4b5310fa14d41e0b6cb70b9d9ab0de8bd2b13aed9f24
SSDEEP 384:FqksxsSQ3CVWtkGaWQuYSMkYpetyGBJWORfyRTlFwSQI7VhggdDygcWUQ4iYLEBi:FqH0yVIotetvBnRKRTrNn7V+gByboak
TLSH
T16ED28C25ABFC43AAE9FF0B74ECB946500631E6312423E71E5E9935990CB3BA40B11373
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsettings.json

Path C:\Program Files (x86)\Edgebits\EdgeAlert\appsettings.json
Size 1KB
SHA256 756cef45b28fae9271dc020a5585dd371f209e5b6d0a91c2fba98b1ad6de7edb
MD5 1695e69d0fdc4b0210e780e9182f01e8
SHA1 f5cda431d45625e58ecd3aa87e9a6bd983e49075
SHA512 a5aa2fb50bef0c5f6ce5f161e9e8de68e10cd4611f33c1c822aee502a6b1775b6a25eb71994e41b33f40b7b3674adb0acb54e51830ce8255b38f876de1a46980
TLSH
T1BE310A6BD8645C20533667E0E8A99246FB2207EF44417D5F7E7C142F4F3F69A1181E24
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeAlert.lnk

Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EdgeAlert\EdgeAlert.lnk
Size 2KB
SHA256 0bcf7d8e79b17fea174c724de669fba3557fe65703db025019d75d48799caee0
MD5 bfb84adbc045f39eddd9adf8b4061690
SHA1 490d02c8029ff472d084059a984d659a741d00c1
SHA512 0c0a8f29620e6c3bcc1278e7ee6ad798341035ce3809806f544e369cd17865756d8120893aaffaf96ec29e20654282928eb28498d9672facab57c2a6a136ac3f
TLSH
T12E41B0305ADB0A6EF3358B712FB09732E621FC00E6549F2E0096804D0A63705697CD7B
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeAlert.lnk~RFe586387.TMP

Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EdgeAlert\EdgeAlert.lnk~RFe586387.TMP
Size 2KB
SHA256 5908298dbafa22c67ff6c15178101535c0a628cd553692e8c2f6315113f46400
MD5 8c00b1fe4c684803d3a42dafaccb7ce8
SHA1 5af8d2ebe417c7d8fc6185017afdde94fb64cb16
SHA512 21c3ea93c0ac64bd8c33465988509adcfd8ed8b49c57348e18810e280f5a6da48a175538bba1705a34249ba511eb9107941297fc7c01e156a4bdb9a3f87e9f12
TLSH
T18C418E305ADB0A6EF3758B716FB19732E522FC14E654AF2E0096804D0A63705697CE7B
MD5 SHA1 SHA512 TLSH

Submit Download

MSIE25.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSIE25.tmp
Size 381KB
SHA256 44ffc4959be0ddb18b02d59c75e78e3e721992e362a2f90cae19adb3271886b9
MD5 d90ab57e6c584f90fbbea74b566216e3
SHA1 4616e59aed33848f5870e5e1fe865f932721a162
SHA512 5b13fe1e34f4ec05ccacaf57fc67f49993e5d950e5396e715686749ddae0b18d5f2d70b3cd3a9ada3389db269213e915f19fd10a54330eaecd765475844e6695
SSDEEP 6144:JyVt6fHYx+8GOL2bS9Li0k9TY1fuMuwLspJaDsAkvAO5cSrQVKlbCS4T73:6tkeYbS9L/RuMuwLocopMlVSCS4T7
TLSH
T1F8846C2072DAC436D5BE4AB43A3CD99E44297EA59BF2C4EB13C81D1E09739C24635F27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeAlert_net8.msi

Path C:\Users\Admin\AppData\Roaming\Edgebits\EdgeAlert 1.15.2.0\install\EdgeAlert_net8.msi
Size 1.8MB
SHA256 1a1cac7529f8e11275aab8280ad73bc79293b26b6260a5a178ada642efab32fe
MD5 96c77f296bc69ccbfa8be6f80b58a88b
SHA1 3026ab03390e56e5ded6a245a2d880786817da4c
SHA512 bf4e5b56efe7f0cb38426276d03b69da11b010f6ea229d12ae1e2cc3a2d72cc80d90d03f90b07551fe19134d56f4a20d0cfb62ccd8cec6570cadf00b7b734cc9
SSDEEP 49152:NkxYJ+6Unm9oWVRT7TrIAbTtJxWCV60Gd:UYJrfeMcAb5LW
TLSH
T19A952A20B3E78232C6ED2570956D877A47EA2D73CF7564DFA3842A2A19B2DC10731B17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeAlert_net81.cab

Path C:\Users\Admin\AppData\Roaming\Edgebits\EdgeAlert 1.15.2.0\install\EdgeAlert_net81.cab
Size 31.2MB
SHA256 f54da133ec8a7684f48039172c73583b7c5523564de8e52eb2f463bbe51a5458
MD5 287e69379e96519f39289d7c218637e7
SHA1 88c3c0a25b694abae74f218c9d12bebae337db49
SHA512 26191327714c56d54040226de7921a231eedd327ecadcbe5e93cf461e981f7e6d0dd8b338aa1ba7c93905628fcfaa1db47854d8b9a231df17928fc9a9a9d6376
SSDEEP 786432:oTr0lhqc2PcfoYhRpsJRSlIF2SfbHnql7qT+90m0dZ:ovkoTkph3eulSDnqqE8Z
TLSH
T1287733965D5F982FFB368615C5375B896CAD78738C29243BEF1CBF4082720D93070A6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeAlert.lnk

Path C:\Users\Public\Desktop\EdgeAlert.lnk
Size 2KB
SHA256 51e9331a1ddee7cdd34000f774a149d74e37e2755368945422b9763c2cde82ce
MD5 b155f75d5faf9ae9b7be5ad56729fe96
SHA1 2dd3075bb92f217529621336e9024d00881f1868
SHA512 0a36796542cd7b7e00c795e88fd619da6e61557fff22734008396b8a061baa072e0ecaf4ca9dc9044fe486ff81c1ec7cf3617a984e508a1fb25680dff64bb10d
TLSH
T13E41CE306AEB066EF3318B716FB19722E621FC00E6049F2E008A804D0A63705697CE7B
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeAlert.lnk~RFe5863a7.TMP

Path C:\Users\Public\Desktop\EdgeAlert.lnk~RFe5863a7.TMP
Size 2KB
SHA256 af4c17aa72d4f9844534779b449b589e1b90eb77b5426650cbf567d11c648ab7
MD5 9f499ce7912a1a845d548d2c49a19af4
SHA1 8fc7c689c440aab78dd2d6bbb5f88f2b7efd138a
SHA512 fc1b770b4d99b09bf9d0ecc56561a55524587c815822faf301e376429c79beb7784d48e69fd7c2529dfbc072089e741c8352f8d81ce6dd24540966cea766f3f3
TLSH
T1BD41A2305EEB066EF3718B716FB19722E521FC14E6549F2E409B804D0A63705697CE7B
MD5 SHA1 SHA512 TLSH

Submit Download

MSI562E.tmp

Path C:\Windows\Installer\MSI562E.tmp
Size 544KB
SHA256 2b49df58bd81213e63049559d8f520eaba62c877c0595b439b3ab68c0a06ee7a
MD5 15610cef504f677d67bf39c4429a113a
SHA1 66fe1379a4f18599bd6584020fc974fb891b1110
SHA512 5216eac25e3f381ddf6faf51192328cf8d22b0d454a32049587ea79d9bc0656080785248077f4c6b5471a1a44822c94bce28e71c32f76451f6ef874805d7bea7
SSDEEP 12288:SY/l2abn+1OQGxjllCHfB0HWjY8Nyut84AfJj4Y3V9VHuJ4:hTrxJIHpuWheTV64
TLSH
T1E3C44A20729AC136D56D05B01A6EDB6B51697FB10B7E58EBA3C85A7F09F08C20335F27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSI5B02.tmp

Path C:\Windows\Installer\MSI5B02.tmp
Size 142KB
SHA256 3654217e4c55a53f4883af0d9bc309780fd5b540e5cfacd18b9681a08dd989a4
MD5 5468bfeabd616677d7fb69a6b5abdf43
SHA1 0cb91ccd7c952fe64f8ab5f80d07133969389b0b
SHA512 e4c6c47328581f3480ef534da836d1806a47d79998b7822d3ef81645660d166bc9456feb0af86d41fc70095586e65bcb843e238b58641db039ca4f82948478d1
SSDEEP 3072:VsO1R/OPkjwcLiC7vnRWicuDvhv9oAbIzXZXzlBvUV6RLeDC:ZUPXmDRWxuDvQB9sMuC
TLSH
T156E36B207995C132D2BF1678147DDB66872E7A20CFB14CD773840A7E6EA46C19E31E2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSI5B22.tmp

Path C:\Windows\Installer\MSI5B22.tmp
Size 179KB
SHA256 e906f0b1e6fc2fc2c725def9c0c8d8c10a8108d3728cef9d113b0ea97d15f6e2
MD5 ca3c02e992760717dcac17e1b1c4a8d5
SHA1 eb526fa9e215396302420be93bd2247ffa000097
SHA512 9a5bff2cad6d4614c638a8ffd0d44a69b389417f8979d2f87e7685700a80034dfb5ed8b47c397981eeb34fffc60e594ba7d6bf05ed780f6eabb66454a99fabef
SSDEEP 3072:quWCQoopH5zj51bUbvxuPSqXg8OzHVT7ufwmnIClStlmjQxY3LgncqC:quJQoopHlj5FU06uMzH5ufwmJQOMnJC
TLSH
T144046B10B691D437D26E1530266EDBBA5B2D7A318FB184CBB7881F3A4E711C16E34E1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata-2

Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
Size 24.6MB
SHA256 771a0ff78187b97a33820140054f60f16d8f2d30dbeb9e09434f46d67ec0cd1a
MD5 f9cb5731d64fcab42ffa1357153aa2e8
SHA1 d052fcc3b11f3786a454b07f8b2aca4fe9b75354
SHA512 c4a72b897df16e108473455e9c8cdfd2f9389275266147b7ce03be414b5fa394faf13396555327f7d3d47248f32dca6491175267de088fd36520b360573fcb7f
SSDEEP 24576:H2gmSp1wdoO/vvTLEGveR0Xaf6pEQYrVWWMN3pkP2U64EjL6o0O47CFox:u
TLSH
T18047D12432FD2240E7F79E3D6CF0AA27493A7D5B9C159E8D45421B4E0921BB0E872F5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{3f7f1866-9247-4828-bc01-67b7bb6d5974}_OnDiskSnapshotProp

Path \??\Volume{a37a13d3-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{3f7f1866-9247-4828-bc01-67b7bb6d5974}_OnDiskSnapshotProp
Size 6KB
SHA256 e157a5f15fc0f837fda0eb61188b0250a38a2458cd7da8deabb4033ff2e52bf8
MD5 dc4cdfa1b6283475a430daac31417934
SHA1 18d5b4018d3cf7a2ea3c33a95d924c7acf9ba6cf
SHA512 3069414b78440e74676cf35cdd6751ac6cf00190d6506042c7087b7868a70ca4f21c58581b9b6da6358f237f1cd9ffdfd0d8231875edb4c90ff9562cf950224e
SSDEEP 96:Fgjstvc8DD84LTHzbOHXOHBlBRQ88Sc9XE56tOSVQpuN:KOb++ZVmN
TLSH
T136D18A185AF54711E2B3AB7229F18557A477B911EF33CB8E0198238E2670A10F876F5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/672-291-0x0000000001420000-0x000000000146A000-memory.dmp

Download

memory/672-18-0x0000000001420000-0x000000000146A000-memory.dmp

Download

memory/1276-328-0x0000019818200000-0x000001981820C000-memory.dmp

Download

memory/1276-327-0x000001577E5E0000-0x000001577E77A000-memory.dmp

Download

memory/1748-288-0x0000000001210000-0x000000000125A000-memory.dmp

Download

memory/1748-341-0x000002679FE30000-0x000002679FE3C000-memory.dmp

Download

memory/1748-340-0x0000022706330000-0x00000227064CA000-memory.dmp

Download

memory/1784-317-0x000002246A1E0000-0x000002246A37A000-memory.dmp

Download

memory/1784-314-0x000002246A1E0000-0x000002246A37A000-memory.dmp

Download

memory/1944-56-0x000002021A310000-0x000002021A4AA000-memory.dmp

Download

memory/1944-17-0x000002021A310000-0x000002021A4AA000-memory.dmp

Download

memory/2160-294-0x00000000005E0000-0x000000000062A000-memory.dmp

Download

memory/2256-290-0x0000000000B10000-0x0000000000B5A000-memory.dmp

Download

memory/2256-19-0x0000000000B10000-0x0000000000B5A000-memory.dmp

Download

memory/2732-115-0x0000017FB78F0000-0x0000017FB7A8A000-memory.dmp

Download

memory/2796-16-0x0000000000EA0000-0x0000000000EEA000-memory.dmp

Download

memory/2796-292-0x0000000000EA0000-0x0000000000EEA000-memory.dmp

Download

memory/2932-311-0x000001ABA29C0000-0x000001ABA2B5A000-memory.dmp

Download

memory/3104-289-0x0000000001210000-0x000000000125A000-memory.dmp

Download

memory/4664-202-0x000001D8A9600000-0x000001D8A979A000-memory.dmp

Download

memory/4956-273-0x0000000001210000-0x000000000125A000-memory.dmp

Download