a3378c300738a785ca0295f1665839fbdc8274a5bf6290ee6f40717277e3fc62

Analysis

user interaction
yes
max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/06/2026, 04:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
FortniteBurger.exe
Size 27.6MB
Sample260622-e7ctwsgz3l
SHA256 a3378c300738a785ca0295f1665839fbdc8274a5bf6290ee6f40717277e3fc62
MD5 8f2f51ac8842797663b74f57f153515c
SHA1 71ed6f78bf293f8c8941fdd4847b0361e1cbd0ed
SHA512 5fdaa1fe6ef29071eba64d3759e849e4e26931cdfae32ad2fffd506a3c1d717afdab2edf6dcf2062c715aa62259f82d68ab1e1fde58455bd8cc49feb32f84906
SSDEEP 393216:WqNLVJTfxpLx/AS1MVc1ZwCrHXA3mDDDy/WTAwo:rfPlASqgrHS
TLSH
T19A57516DE2E08CEBD43E76B526B81B12E69013BF93C19C673EFD915D4F362004426B69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery spyware trojan

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000\Control Panel\International\Geo\Nation	by0yg3unmx2.exe

Deletes itself 1 IoCs

pid	Process
4616	by0yg3unmx2.exe

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BurgerWorker.exe	by0yg3unmx2.exe

Executes dropped EXE 2 IoCs

pid	Process
4616	by0yg3unmx2.exe
1664	BurgerWorker.exe

Loads dropped DLL 7 IoCs

pid	Process
3584	FortniteBurger.exe
3584	FortniteBurger.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
1664	BurgerWorker.exe
1664	BurgerWorker.exe
1664	BurgerWorker.exe

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
12	raw.githubusercontent.com
13	raw.githubusercontent.com

Drops file in Program Files directory 5 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2280_1513774068\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2280_1513774068\nav_config.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2280_1005161304\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2280_1553107900\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2280_1553107900\protocols.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies trusted root certificate store through registry 1 TTPs 3 IoCs

A root certificate was added, modified, or removed in the trusted certificate store registry paths.

defense_evasion

Install Root Certificate

T1553.004

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\05FA46F95709D5ED960AEEDF39DAB6DA342246D0\Blob = 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	by0yg3unmx2.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\05FA46F95709D5ED960AEEDF39DAB6DA342246D0\Blob = 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	by0yg3unmx2.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\05FA46F95709D5ED960AEEDF39DAB6DA342246D0\Blob = 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	by0yg3unmx2.exe

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4832	msedge.exe
3080	msedge.exe
3848	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134265765181086238"	msedge.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{707B3C13-82DE-4FA1-A7DF-3851B5D8094D}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{38C098FC-2AA2-4297-990B-5CB3FC0FEE9A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings	by0yg3unmx2.exe

Modifies system certificate store 2 TTPs 1 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\05FA46F95709D5ED960AEEDF39DAB6DA342246D0	by0yg3unmx2.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4616	by0yg3unmx2.exe
1664	BurgerWorker.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4216	msedge.exe
4216	msedge.exe
4216	msedge.exe
4216	msedge.exe
3996	msedge.exe
3996	msedge.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	3584	FortniteBurger.exe
Token: SeDebugPrivilege	4616	by0yg3unmx2.exe
Token: SeDebugPrivilege	1664	BurgerWorker.exe

Suspicious use of FindShellTrayWindow 9 IoCs

pid	Process
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4216	msedge.exe
4216	msedge.exe
4216	msedge.exe
3996	msedge.exe
3996	msedge.exe

Suspicious use of SendNotifyMessage 4 IoCs

pid	Process
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe
4616	by0yg3unmx2.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1064	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3584 wrote to memory of 4616	3584	FortniteBurger.exe	89
PID 4616 wrote to memory of 1664	4616	by0yg3unmx2.exe	92
PID 4616 wrote to memory of 4216	4616	by0yg3unmx2.exe	93
PID 4216 wrote to memory of 1912	4216	msedge.exe	94
PID 4216 wrote to memory of 4832	4216	msedge.exe	95
PID 4216 wrote to memory of 3268	4216	msedge.exe	96
PID 4216 wrote to memory of 3268	4216	msedge.exe	96
PID 4216 wrote to memory of 3268	4216	msedge.exe	96
PID 4216 wrote to memory of 936	4216	msedge.exe	97
PID 4216 wrote to memory of 936	4216	msedge.exe	97
PID 4216 wrote to memory of 1724	4216	msedge.exe	98
PID 4216 wrote to memory of 1724	4216	msedge.exe	98
PID 4216 wrote to memory of 1724	4216	msedge.exe	98
PID 4216 wrote to memory of 1616	4216	msedge.exe	99
PID 4216 wrote to memory of 1616	4216	msedge.exe	99
PID 4216 wrote to memory of 1616	4216	msedge.exe	99
PID 4216 wrote to memory of 2284	4216	msedge.exe	101
PID 4216 wrote to memory of 2284	4216	msedge.exe	101
PID 4216 wrote to memory of 2284	4216	msedge.exe	101
PID 4216 wrote to memory of 3568	4216	msedge.exe	102
PID 4216 wrote to memory of 3568	4216	msedge.exe	102
PID 4216 wrote to memory of 3568	4216	msedge.exe	102
PID 4216 wrote to memory of 4024	4216	msedge.exe	104
PID 4216 wrote to memory of 4024	4216	msedge.exe	104
PID 4216 wrote to memory of 2304	4216	msedge.exe	105
PID 4216 wrote to memory of 2304	4216	msedge.exe	105
PID 4216 wrote to memory of 4652	4216	msedge.exe	107
PID 4216 wrote to memory of 4652	4216	msedge.exe	107
PID 4216 wrote to memory of 1648	4216	msedge.exe	108
PID 4216 wrote to memory of 1648	4216	msedge.exe	108
PID 4216 wrote to memory of 4704	4216	msedge.exe	110
PID 4216 wrote to memory of 2944	4216	msedge.exe	116
PID 4216 wrote to memory of 2944	4216	msedge.exe	116
PID 4216 wrote to memory of 3820	4216	msedge.exe	114
PID 4216 wrote to memory of 3820	4216	msedge.exe	114
PID 4616 wrote to memory of 3996	4616	by0yg3unmx2.exe	117
PID 3996 wrote to memory of 4108	3996	msedge.exe	118
PID 3996 wrote to memory of 3080	3996	msedge.exe	119
PID 3996 wrote to memory of 896	3996	msedge.exe	120
PID 3996 wrote to memory of 896	3996	msedge.exe	120
PID 3996 wrote to memory of 896	3996	msedge.exe	120
PID 3996 wrote to memory of 1596	3996	msedge.exe	122
PID 3996 wrote to memory of 1596	3996	msedge.exe	122
PID 3996 wrote to memory of 876	3996	msedge.exe	123
PID 3996 wrote to memory of 876	3996	msedge.exe	123
PID 3996 wrote to memory of 876	3996	msedge.exe	123
PID 3996 wrote to memory of 760	3996	msedge.exe	124
PID 3996 wrote to memory of 760	3996	msedge.exe	124
PID 3996 wrote to memory of 760	3996	msedge.exe	124
PID 3996 wrote to memory of 4948	3996	msedge.exe	125
PID 3996 wrote to memory of 4948	3996	msedge.exe	125
PID 3996 wrote to memory of 3968	3996	msedge.exe	127
PID 3996 wrote to memory of 3968	3996	msedge.exe	127
PID 3996 wrote to memory of 2280	3996	msedge.exe	128
PID 2280 wrote to memory of 5080	2280	msedge.exe	129
PID 2280 wrote to memory of 3848	2280	msedge.exe	131
PID 2280 wrote to memory of 4272	2280	msedge.exe	132
PID 2280 wrote to memory of 4272	2280	msedge.exe	132
PID 2280 wrote to memory of 4272	2280	msedge.exe	132
PID 2280 wrote to memory of 632	2280	msedge.exe	133
PID 2280 wrote to memory of 632	2280	msedge.exe	133
PID 2280 wrote to memory of 2456	2280	msedge.exe	136
PID 2280 wrote to memory of 2456	2280	msedge.exe	136
PID 2280 wrote to memory of 2412	2280	msedge.exe	138

C:\Users\Admin\AppData\Local\Temp\FortniteBurger.exe
"C:\Users\Admin\AppData\Local\Temp\FortniteBurger.exe"
1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3584
- C:\Users\Admin\AppData\Local\Temp\by0yg3unmx2.exe
  "C:\Users\Admin\AppData\Local\Temp\by0yg3unmx2.exe" --delete-old "C:\Users\Admin\AppData\Local\Temp\FortniteBurger.exe"
  2⤵
  - Checks computer location settings
  - Deletes itself
  - Drops startup file
  - Executes dropped EXE
  - Loads dropped DLL
  - Modifies trusted root certificate store through registry
  - Modifies registry class
  - Modifies system certificate store
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:4616
- - C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BurgerWorker.exe
    "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BurgerWorker.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:1664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://github.com/Fortnite-Burger/DeadByDaylight-Unlocker-v2/releases/latest
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:4216
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2a0,0x2d4,0x7ffb1702c188,0x7ffb1702c194,0x7ffb1702c1a0
      4⤵
      PID:1912
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,3900877022175436428,8110892126280008571,524288 --field-trial-handle=2288,i,14618270058141783878,12535823165235816505,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
      4⤵
      System Time Discovery
      PID:4832
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1716,i,2446167090018232345,7421611686095092625,262144 --field-trial-handle=2288,i,14618270058141783878,12535823165235816505,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
      4⤵
      PID:3268
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,7290421611636749700,13055003051376007161,524288 --field-trial-handle=2288,i,14618270058141783878,12535823165235816505,262144 --variations-seed-version --mojo-platform-channel-handle=2800 /prefetch:8
      4⤵
      PID:936
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,10845993937778345731,12966055130325154365,2097152 --field-trial-handle=2288,i,14618270058141783878,12535823165235816505,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
      4⤵
      PID:1724
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,10283758856948921029,94169663327618118,2097152 --field-trial-handle=2288,i,14618270058141783878,12535823165235816505,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
      4⤵
      PID:1616
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,16498291949325799213,11516021845124054135,2097152 --field-trial-handle=2288,i,14618270058141783878,12535823165235816505,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
      4⤵
      PID:2284
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,570310763381694375,5287128003664871397,2097152 --field-trial-handle=2288,i,14618270058141783878,12535823165235816505,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:2
      4⤵
      PID:3568
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,17572087690561679418,17107362373748806699,524288 --field-trial-handle=2288,i,14618270058141783878,12535823165235816505,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:8
      4⤵
      PID:4024
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,4424161283046811739,13749159291661036998,524288 --field-trial-handle=2288,i,14618270058141783878,12535823165235816505,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:8
      4⤵
      PID:2304
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,5035419889373769357,13894999256970227671,524288 --field-trial-handle=2288,i,14618270058141783878,12535823165235816505,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
      4⤵
      PID:4652
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,12188439356784283367,8651148112070798461,524288 --field-trial-handle=2288,i,14618270058141783878,12535823165235816505,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
      4⤵
      PID:1648
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,5709756158425491029,3653783128457634337,524288 --field-trial-handle=2288,i,14618270058141783878,12535823165235816505,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
      4⤵
      PID:3260
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,5709756158425491029,3653783128457634337,524288 --field-trial-handle=2288,i,14618270058141783878,12535823165235816505,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
      4⤵
      PID:4704
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,8966220610248169807,16421406943145769532,524288 --field-trial-handle=2288,i,14618270058141783878,12535823165235816505,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:8
      4⤵
      PID:2944
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,205966485803063546,10725572467115160120,524288 --field-trial-handle=2288,i,14618270058141783878,12535823165235816505,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
      4⤵
      PID:3820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://fortniteburger.vip/
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:3996
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2ec,0x7ffb1702c188,0x7ffb1702c194,0x7ffb1702c1a0
      4⤵
      PID:4108
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,14570103676370809146,16731165318046822104,524288 --field-trial-handle=2288,i,2509570026948994259,12376395607826819765,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
      4⤵
      System Time Discovery
      PID:3080
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,3905119227302657776,18057289559228810042,262144 --field-trial-handle=2288,i,2509570026948994259,12376395607826819765,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
      4⤵
      PID:896
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,2003918752795523800,18391063554236885026,524288 --field-trial-handle=2288,i,2509570026948994259,12376395607826819765,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
      4⤵
      PID:1596
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,17232921456759414544,4271860628369522208,2097152 --field-trial-handle=2288,i,2509570026948994259,12376395607826819765,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
      4⤵
      PID:876
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,4471135521816223795,1157724155074956363,2097152 --field-trial-handle=2288,i,2509570026948994259,12376395607826819765,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
      4⤵
      PID:760
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4884,i,14036564700370302750,7223073025715931815,524288 --field-trial-handle=2288,i,2509570026948994259,12376395607826819765,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:8
      4⤵
      PID:4948
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,1755898795900526944,9262271568242460467,524288 --field-trial-handle=2288,i,2509570026948994259,12376395607826819765,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
      4⤵
      PID:3968
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
      4⤵
      Drops file in Program Files directory
      Checks processor information in registry
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      Suspicious use of WriteProcessMemory
      PID:2280
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffb1702c188,0x7ffb1702c194,0x7ffb1702c1a0
        5⤵
        
        PID:5080
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,15620936126059386400,5958087429612621868,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
        5⤵
        System Time Discovery
        
        PID:3848
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,10499235142457835748,3242032327842933123,262144 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
        5⤵
        
        PID:4272
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,3196641614436200342,5263790503771490754,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
        5⤵
        
        PID:632
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,14694638955883394900,5840893903957251833,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
        5⤵
        
        PID:2456
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,12103427318240709925,8774215319272883233,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
        5⤵
        
        PID:3760
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,12103427318240709925,8774215319272883233,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
        5⤵
        
        PID:2412
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4428,i,2639871191415342510,17034300742846940281,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
        5⤵
        
        PID:4624
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4712,i,12056400059734905316,16088333454156822275,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:8
        5⤵
        
        PID:2096
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,1938592794132884718,3213684858716958948,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=4616 /prefetch:8
        5⤵
        
        PID:4680
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4940,i,7292479700619543853,14961586884966511747,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:8
        5⤵
        
        PID:560
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4784,i,16829667584655570025,17734485389686927026,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:8
        5⤵
        
        PID:1596
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,3782268077875776844,17206675838459822286,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:8
        5⤵
        
        PID:5384
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,4135773466311762216,16324754264581835938,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:8
        5⤵
        
        PID:5332
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,1936449552308884259,14988543348629262957,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
        5⤵
        
        PID:5364
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,6596590347531073942,18202139357499949237,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:8
        5⤵
        
        PID:5376
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,11532572091586472549,12926627134116084998,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:8
        5⤵
        
        PID:988
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4596,i,13955064081710329467,11412245213127482792,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
        5⤵
        
        PID:5236
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,12120317918737267619,10342378615198816831,524288 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
        5⤵
        
        PID:5304
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5064,i,3478332444325271633,17508974130556009285,262144 --field-trial-handle=2288,i,17372145887048378056,17818159653216436604,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:8
        5⤵
        
        PID:1928

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3680

C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding
1⤵
PID:2944

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4228

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2824

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3296

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:1064

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2280_1005161304\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2280_1513774068\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2280_1553107900\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

SkinsPerks.json

Path C:\Users\Admin\AppData\Local\FortniteBurger\Configs\Profiles\SkinsPerks.json
Size 1.0MB
SHA256 2c9b6eb161c7376ca9e75809a0c216a37d04e7ce577620e48dce9d9f273ee8fc
MD5 1140c26bc9f4667bcd375870cb9314d3
SHA1 98d421902ee2fd139ce56e8c6f39a907719fa9d6
SHA512 2ca55622c70455ffa58234ee81d6db9a7cf7c2164137b09dea457b13498cd7d56eb62430721b11221c32a5b03b31e5a6a093bdc5235cae522bb288b5e23f8e09
SSDEEP 3072:OYP2djp8Vufokqb0YPeYRaTW0bG6vlqo5mr3lc5XoR+oORwSw58FhO9RfMFIye1S:0oORwSw58FhO9RfMFIye0
TLSH
T1A8353E3EA1B68D6E243E537523692742F800536F52857C03BBFE96DD8F32741291AB27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkinsWithItems.json

Path C:\Users\Admin\AppData\Local\FortniteBurger\Configs\Profiles\SkinsWithItems.json
Size 761KB
SHA256 92b150782e29c9a2b820b995c7d65f2e2ca8cc506d9f35aa200125277d3bf250
MD5 f309cf47f7c5585dcee31a6e6b7de39a
SHA1 0499670b8b412d51bf9e81fba92d00521333d13d
SHA512 b102dcd3a69055bcddb3dc6a582e44ce8d4a63328c4e0b470825fe8769cd0208f8a55ff13468a068117746b0f68053ac3899529905c74e56fe11ee7ce2ac75e0
SSDEEP 6144:k0FIx7L+Y7j/aSZQWqsD2DSaq+gyQgdvQ2zKwfMDCels/:k0FIx7L+Y7j/aSZQWqsnq
TLSH
T13EF48A7D12F1C9BD303529C76763BEA4C460741BA780BC52FBCF919A9206ED9481E72E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5d2c4e39ddbeb0ac61628bae04f1ac5787600ec893b0e230d1a84d61470771a9
MD5 cd6e704306442404371caebfec7f5b29
SHA1 e4beab8b7820af3633bf7c75a5498a958a95832e
SHA512 de66681a9245e8ece7d7e2ea2080251c395f2aeb8a885ac007eaf16f2ee3a3e36610d2afc17be964a038704371cedfbe4da91143ebed5adac20dbda97768d6e6
TLSH
T13AD080273A196404F7964175A483D7061319956129579712F310C44C99775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1c8e6fcbb66aba64fe595f222fc4117e00e82ccdc0eef2100a1b4f7babb04f87
MD5 398d1e7948d46a763209c466fdacd0fb
SHA1 b26f2c32bc106089a59ce779d792beaba59f92bf
SHA512 a0bbf31d803e7333d004f03de9c261732d00cceb5d82dd64b5f0decf8adc8b840891187c72bb21cce83873e6d4dd2fab89d4c7efa320afe2ef3589678dcb1424
TLSH
T1B6D080277A196004F3964175A483D7061319956129575711F310C44CA9775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 95a83639d50b8cbfaff567acb1d96e73e015b60ca767d72289f421259a29929c
MD5 4f98b26f6a8477b5b90839f1f67cf326
SHA1 80b7d9c9a8897933b746688f9edb896b176c7844
SHA512 bac2437860a7557be9519bd497a011378e470cc0a5ec2e20fdccc7ce5e1c5e0ed6934b7238fd2f3efcce677782cf14549f2e553c70a5466a66521e105ddaf264
TLSH
T16DD023237D3975D4F36901799453D701131D66B32A535715F300CC0C9D760D157C16C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7211b2baa7dee01841403fe998ec00e69dd207ad1c6ff902d7a09ab8cb666d26
MD5 5b4fcae859f79f99c7a89758cca775fa
SHA1 1bfdfd1ed9be792466456390d1cc5b5fafaa77aa
SHA512 df9e0158ee173f62a06db67a21553d6248386e1f6bc9f37920e06c8767c935707ad669a9208ea75739cf0993b81fe46873e0157e253110c444a087ca86d9af7c
TLSH
T12AD023237A286C04E75592746843DF011315D9AB69135665E350C84DA92B0D493C51C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 aa73e74f179005185d0a21d499405ba4cfd414acb482a4ffbdc9a664c5bf9bc6
MD5 87e777b144a617c64dc43f8e26a25676
SHA1 e08b12bb0242dc6945c6c2b28d1e3a947be36b42
SHA512 e60f460ce2ddf5a7de277e744a063ae327267a3b3e165831fe60d3004f15a81b7ce74a8b42ee27675546c30e187e7f0d90d8d4f20e13fba0fc0a5a6581a38729
TLSH
T1FCD023237E28AC04E7559274AC53DF011315D9EF69135665E350C84D992B0D493C51C2
MD5 SHA1 SHA512 TLSH

Submit Download

45c7bcb6-12fd-4597-9079-35973aab5d41.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\45c7bcb6-12fd-4597-9079-35973aab5d41.tmp
Size 414B
SHA256 53cfa623417a642e880c27a55b06c450b2baa88f38516e6e9277faf8cd57d168
MD5 0bbc4da7a9d433bffe3d79af19b425ed
SHA1 9cbb5aaac73223ac9ca2fe5597bbaa31140b85a5
SHA512 46efddfec3ebdd307780d5ce093dec4c6dfab424f0fc7441185eed70cacdeea5f8ad80769feeed461a9459194cf40bc6e1a285b8024863abacc9793bf1cdfc22
TLSH
T1FBE0ECB6C9119C2709F90719B0554746E741136B2751484F7A3EC1084FB4A65459185C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 af1d7b27c7886418fab75e553885a3dc839919318c4348e8bfd098d0eb377f83
MD5 296811146ef1e5175512fccf2de43724
SHA1 b9f1c7fbf7b1429c27de3df668fdf276d6d89388
SHA512 57a9e18aa9ca58f4c826c056cd9b583a8798ae33135c45c784983cefabfb8496938a8d1f632195ba581898a34c8603b433dbf70e091c5b9bcf854047bceb991d
SSDEEP 96:LVTuu3XJ6Vx2+OGCupI5dmPwn7D9t/Isk1cvZmEVAoPGP7+ntVIkTxDjJkZUOYv9:LVThnJ6gGCupI5dmPwn7DD/I91cv4EV3
TLSH
T167C13C368183618CDF643FF950D69224373082FAFF2B4E6A2F44CBB12A3E3545A05CA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 5f464e15bb73511245a10d1f1668063d2d4123e5e9ff27b1a92baf2f2ad01d8c
MD5 defcd049b35bf7605c47da7849435970
SHA1 ecfe69015ac12f43a080b17ac15f652c2d94080f
SHA512 48cb7e759696507bddbcce97d49ee766e7defc74bcd993cf4dcd0b5f1f5b6a87138298c52a1bc6859ec7cba4e204517ea0fea0d87d9e7d703c9cb23dee21ded5
SSDEEP 96:gvAhXGFfVwcd2g6xbkPuGkkRmtIDwFWqmgaIba0kKtdZIOzV+hExj5nwEGGLf4Ej:CAhXGFfVwcd2g6xYPuGVRmtIDwFmgaIb
TLSH
T14CC12C36C1836188DF643FF950D69620373182FAFF2B4E6A2F44CBB16A3E3551A05CA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58659b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58659b.TMP
Size 3KB
SHA256 cd012490f9446c5f3af17d0371c1c77077e12b9399fe8b6e115e4591b47dcaae
MD5 33343f9b2517906d6e6c8ddf31eec583
SHA1 2ec9e2436e5dfc6d6637e99f17bc2c0e64d3fefb
SHA512 7c99781d72385b9af856f45a25b1669d907477d57139f7b56aa6733493d596316e43f51b4cd8abfec0b1be019b71c1048f7a56f02b152d5922a9c8a69e35ad7e
TLSH
T1718161370282A6C0D3A4273990E68224367082EBFF6F5F7D3B9459F12B767254E19DC8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

168ca9e9-ca5d-4a07-9147-a18b5129f537.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\168ca9e9-ca5d-4a07-9147-a18b5129f537.tmp
Size 1KB
SHA256 1f86c847f27ee6b146954112987c519214518bdd15872fc82c672d2959a2493a
MD5 0f1b591842f46783545e052d35be4b0d
SHA1 a07b3a0d2e2eb759762d14a1b4ae980c6995d81a
SHA512 ec0df9029cdb1d7a87326597ee88bb6a94c4ae911462a0fd2a1ca92edcb893d05fe4fd9779b1dee75058d9703552ae864b990217c9d082602f46498664022e97
TLSH
T10B21AF9FC5FAB47B106D4C6F0C2CBC01A9B994351253A4F2EAD6C22CF0924F35E66036
MD5 SHA1 SHA512 TLSH

Submit Download

507eca39-a509-4a89-b5df-c798b225fef3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\507eca39-a509-4a89-b5df-c798b225fef3.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 81eecebbd232104cc506ebe19299a837f77ecb89573b19b6f23929cec8ad4fdd
MD5 680e0eead621ce1a681dbb6b79845224
SHA1 2c8f99c6282919a5856d23d29e2a233f18568b01
SHA512 50886a94e8501bf3e67f3b6f551767a0cbe0b674e96c96ded3617ad10dbea6b0ba37c3380955260941f6b555af0d710d4125780f409c0c5f8fcd41091472b019
TLSH
T142318CF7C3E5857D8A0256F4BA18AE2BCE6D0914931C3C6AC4E46E1BD7E28B1E24055F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 351d2db2a7e2543464e20a121e887274b9aa35224bb766c55ba60152d921ab02
MD5 3f18b3093c48db84917d7a45065fda38
SHA1 201af0f00416df0ce51b2196969e19568a0136cf
SHA512 850900c6049b91c9f79c3af4452a91170373260cec6d882f03b675bdbfab39fdbca9e4e31bf1084da8718590d76a6ebef161d30eebaafbdb4f5fb47bbffb6e58
TLSH
T1FA619CF7C3E8866D8E0155F5BB186E1B8E580954935C3C5BC5E4AE0F97E28F1E24054E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 1a9285e52806247e21761d256468710ee7c71ff82c84925cdb2c2fb548c3ab28
MD5 a29d6c9e78d7d1fe2f468a0a317c0fc7
SHA1 41cd5a75062f99a3d6c6628ce5aa6fc9a6627176
SHA512 0d3d54d52c8ae904fa4edfc1366a80402019184821d1f962244ff1059e199116b96c8165b9534ff571ead4dbdc4f09448af15dc93bf97c5e20f3cab024c5a823
TLSH
T1E181ADF7C3E8866E8E0155F5BB186E1B8F1D0954935C3C5AC5E4AF0F97E28B0D28064E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 1751ac2a1ebe76b5b0538cbef33ef992fb13ce209f20a40139df645d02ed385e
MD5 8d1d09b011d70c1f14353cc7d6b7bb35
SHA1 aa0a6e4a28cc1db013902eefb29641490d0d283a
SHA512 9149e34bb1b87fe6b3d2c4fe260919ed40a6ad2c74b023b9218fca43c38526d397b676cb6cf47e560a0c790636bf00c197403a841acf01245c631a4380bb2069
SSDEEP 192:sxZzRzyM/jK1Ml8sjV/fGseWpVxf/Edp9BwHW6+WN2tvY/YG+9rsrUIgJJ:sxZz/hV/fGseWvxfMMHbb/Cs8z
TLSH
T1D462E8126A34597BCCDBD219FA55BF53D6F81422E6950E48DAFC8A1C01E6AEC230381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 8ec91ad70b2ee4c1bce82ae3c48dbb5870ee808480368a3e1ad9c516444c6a2d
MD5 e8a43a76558a75ccc260c665f7ef48fe
SHA1 59eb717874adc748ea459ed1b4ea7b9055d702da
SHA512 cc470b0aa11f5b5d04d13739b0cc208823f8b62c076495af8f2dd05d5a107acfcb778f650dfd6cf0ae9ca387eced296909dbaaf802427d4f9daa8cf683cb3297
SSDEEP 192:sxZzRzyM/jK1hl8+jV/fGspWpVPfkzkdp9SkwHW6+WNZ9i/UdvY/YGaEkrsdUIgz:sxZzg3V/fGspWvPfp0Hbt6/0sez
TLSH
T15E62DA126A34597BCCDBD219FA55BB53D6F81423E6950E489AFC8A1C01E6FEC230381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 33b9e323f6990c1264b2d5e138e75e95ff6f918677882d5efe422814cb2c0967
MD5 8cabb24865c72d661e3917df2bb5027d
SHA1 72038c18c4f1b9049ab2ae17f2d505b1f0bcb51e
SHA512 92f5075e1fc96b2289c5e64eee964759a872485c632fb07a346d8856b4fbb46542267cf14e3eab00f960aaa977a1b7215d86592ce5cb00e38d71ed0ddf60ee5b
SSDEEP 768:Eh8bqC+WvSCt68F1+UoAYDCx9Tuqh0VfUC9xbog/OVDZLlRTKV0roE:Eh8bqC+WvSCt6u1jaUZLbWVfE
TLSH
T11DE20A3B280CCB7E4F805E5CED2A6F962DD801CB6B988D4447FA884C03C76EA511B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 48919e6aff1ea4250098e2ed8e6ba9446fb07ae3ba27c87cbcd76d17c9d35d03
MD5 df5e64c02b134d957d0ea6e454a6cb9d
SHA1 ab9b7640dea2cfabae337eae3f5de644d01ada65
SHA512 4287f24497f97e81f1293ad46756ea83be63d100863836175a0e7c9b4e7e031fe5e964f2500a5c0cbdb080078bca598bb0d4d127e857630da2b785043bc40cbf
SSDEEP 96:KoX6K0gCKQoKpOXwgK92SWXOKo4DLqf7hND:EBbljlT
TLSH
T199B1F212303F124638BE2524A3B2953BCE4173573915A8BF3B7920628D6AE515DFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3b14ecdc-c43d-4016-a3f4-5e44d4b8a111.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3b14ecdc-c43d-4016-a3f4-5e44d4b8a111.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 49KB
SHA256 caed05c34519fc8aca0c4bfa254253a64f2c085183017440ad9ce7325498b2db
MD5 bdd2b65e10db1709232fea0ea59d4705
SHA1 17367fd742c12923ac0545d501fb421fa3d7788f
SHA512 4101071bc79f810f5ba35889a74939576f4a44a94a3ec0be44a6469a4c44ef311bf5db2a0ce5d1445f2df090d897a3a33d546e9967d54398e663c52fc738cf63
SSDEEP 768:8Fij+9V3iwgYAIezIMQMh49JfVYEdaRNcWPgRyVQDQOoBtKn92lx+vO:o9V3NBgvPTVCQSk+vO
TLSH
T11C3328F198D789BBC8AE83C7633D6E0659BCC023B5895984B7D86A0CDC875BFC346815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 0033036a389b5a18781f80f795a204da1d68439faeee41c5eabd0d144b79fb35
MD5 32fc0bacaab1f072d832b8a86751f455
SHA1 8baa2e05fc0ad95f105adcefe072aac30cf58dc6
SHA512 07482e0f07563a83f5f37e2d8beac3a3169b50468fabc738899022d7aae299c9ae9993e343549c46a73ae4dc700974fbbcc6ac0e8c753cb3e7b8d185d2155116
SSDEEP 384:nhtNn/s3n9SI3sNiPaUYTwEa+ld8ysJ82MbdbJzxHU/7IzKx9O:hj+9V3Y7Da8/Cix+vO
TLSH
T1A8A27D316934ACAB4EE2D94AF1562F076FF4516795CB2E44E5ED9F0E00C7AAC034BC29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 379cad98abfe0e2774fe78735902aa32a422a1436d275bd53e727c3fde8e4af4
MD5 fcf7248d5f5ae7c663c6ecb0b8bd5db9
SHA1 3bc975f8d9ee7bbbe0fb541969899b3e0b7ae62a
SHA512 7cdabae44cfdd9117e7f341bf990e334d2e08897f6262cec05996f8692d809a1285761b1ade550e59973e1b0ddd831fa766ff96ba884044eba0964ee2d3ed8d2
SSDEEP 384:nk3sNAYaUYvwEa+ld8QsrASSNo19THU82MbdbJzxHU/7Izm:k3f3Da8ThSF19DUixy
TLSH
T1ABA23BB0E4645CD748A1D9CAB646EA033EF80137C58E1D1CE6F9BA3E309F8B95357816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 e6c725981568e698f2a53703074c38185ac0a9e840f0dcb6f5e5e0abb1042a15
MD5 8a5b3e263b057981f219266b120da878
SHA1 7221a20b94fbf9ce9cb7a07923eed35a8a7925b2
SHA512 085b76bed38d66fb2f268667a5f4b3eea46b4f78b7606b8da06285ea5410a8c42310df754abe2431e1de567f8d5532aab580e260d9569cba21fa70314a033d13
SSDEEP 384:nusNEsaUmVwEa+ld8bvCBAStiY1s89TH782MbdbJz1:uv1Da8oFSG89D7ixf
TLSH
T176A239B0D4641DEB45B2E9C6B546E5032EB84137858E1D0CE6F9BA3D319F9FC131782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 46db9f2b3b19c8c3129aea29bd93a7ac94fa67bd20e273a7554d6375acc5a4ee
MD5 a122120e5804e005cb1dabaf6721a164
SHA1 fae1dbfd020e35a5c8fbedd49958eab8b82c8820
SHA512 8aadc5a6e6a7afd753fc1cc012395ec37abebf62b46e5806be1ef23c9705cc494a51be8b35002a627db0d0a403db761e80c5b1d5f7b49cb0b4d6a0eecfad01a6
SSDEEP 192:vON3p6Db6QmiUyDRHBa+j2+FdCrtm5RggJWU6:vON56u8HBa+ld85AWU6
TLSH
T1F202DA3568786CBB9EB2AE49F4873B175FD4207BDA9A2B84DAD85F0C00D765C1307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6212bb0f127de8a420cd4dc9144d8bd35ff8da893044083ba84833cb2b3d2933
MD5 93dfa8d6a6f06a30d70e1bf2c5cea8b2
SHA1 c7fd8e4d1ec7d4de05e80809b3950c751ce29af9
SHA512 14f27b43002af22d7e901e76defcadf58390e9e2cddaed6c7b2b2ba6a88315edc59a9a3c4ffc6a39eedbe661e192ef7d2dfb369df149c878a95df4fefe65ce4d
SSDEEP 192:VONl6DblQmiUyNRlGBa+j2+FdCrtmEpe4GONzAqvl/U6:VONl678wBa+ld83v/U6
TLSH
T1EE120835687C9C6B4EE2A559F4C737539EE810779D8B6F84E6D84F0C00D7A9C270B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 2be5343c8810af186202c9df9cdede32d497bca902d4f469a27d90552327ae9d
MD5 b64ce955c270eb8109ec46c91b9ee296
SHA1 5b99dc3719bb753964df80578cfa472b3cbe9881
SHA512 1f4e1153e40aa077700634d7c002f92e5fe34608ce281346037bc527f48b622eca27aa69254abc7bb839bbc37b50d4c58faf2e8038bc8de8bc308148be5968da
SSDEEP 384:nztNn/s3n9SI3sNiyaUYTwEa+ld8ysJ82MbdbJzxHU/7IzKx9O:zj+9V3H7Da8/Cix+vO
TLSH
T1D4927D316934ACAB4EE2D94AF1562F076FF4516795CB2E44E5EDAF0D00C76AC034BC29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 8e53b05ae27ee2e3813a67e3fb22b1379a272f11245bdae7ae8032febdd674ec
MD5 8a321dfccb7e1fa300d9fbedd299a833
SHA1 e6ad75373b75a476040d1080d08606104f15e3f8
SHA512 4f49a47102d7800d5a7f2f056b4e9a55a1786c2b03c2fc8c51762c8bf00d06e574d4bbcb4bfae7b0ddfc5ace0f6ef44d207d2e39814969b4969de39841ff875b
SSDEEP 384:nk3sNiYaUYLwEa+ld8SsJ82MbdbJzxHU/7Izm:k3FzDa85Cixy
TLSH
T15C725D3568746CA74EF7E90AF1562B036FF45067958B2E44E6ED9F0D00C76AC134BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 880b4306c51cbaf95604d4282fe5a394d726f7ef8c36eff9f90a389810b6160e
MD5 aed9f479d08b1b8bd6e6c750cb7f396b
SHA1 deb866316e6fd333881054c996b1b9594320ae4d
SHA512 fa8ede884805862d3830d3f7798ddd4dbe9fcd01acb84fe429a761b96bf4b01c4384ff6467fb8a8e3be2b00bc18f1f41358ae9f3dc0cbeb5666705876627e115
SSDEEP 384:nEtNn/s3n9SI3sNfPaUYTwEa+ld8A+ZvtAn92z2MbdbJzxHU/7IzKx9O:Ej+9V3b7Da8/+tKn927x+vO
TLSH
T1F4B26C7168249CEB48E6D4C9B2467A073EB84137958A2E4CE1FCBF1D20DF9BC434781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 6cf39920747abfb9d3f2baa86c7a275b03ed8197c07cf73ffd27b3cd15b74d80
MD5 47a02cc3fb013f3168ca2145085dd23d
SHA1 3dee4695025667f2f6b332c1a3690614ca573712
SHA512 49794952636d2d8dbb7c984391cdba7e06dda57cdc83238c77c8abb86daea838e8fa796401e5f526891f091fd4c9899b72c1260265c8da42af16669cb04d1559
SSDEEP 384:nusNAsaUm3wEa+ld8hT82MbdbJzxHU/7Iz7:u7XDa8yTixn
TLSH
T133726C3668749CBB0DE3E145F5563A036FF481678A8B2E44E6ED9F0E01DB6AC034BC19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

e8e0e558-6c4f-48b2-8ada-62e105db5174.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e8e0e558-6c4f-48b2-8ada-62e105db5174.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e2b42b7d2fc2a48fc82a20c5a92cd293a59b919627deb51db89e454a408638e2
MD5 5753afec1ff959bab4162ce1f1d644f1
SHA1 3154da2d317155b5c173051c2a9e3fd5b10cde35
SHA512 68a7fbbcd1033cfaf8d68778545a98fc57119a4c68a82a03452006fa557cd7c2655af77e5981d97afd3912d46ae0752c92bfe48b5e7721bdc032875f3e92102e
TLSH
T193412C58B6ED1048B3B77E5AABF6686D483F7D772E0AD49D10110E4E4A32B00C871737
MD5 SHA1 SHA512 TLSH

Submit Download

BurgerWorker.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BurgerWorker\KViFU+Z1eTRgb8PSk+++KuLKmRQ4+cU=\BurgerWorker.dll
Size 20KB
SHA256 2182f4b0a54ad92fd9f20af5e776424f94918e54d21b8f75184fb12099bd3a85
MD5 2ca23190c3eaed6a103badf7993b0143
SHA1 6e42329a7c521f11743bbf65f8b0623984c3518b
SHA512 7170d15642892b3df70a13da7a43b976f9db1da9b07828d05441ee03f61cd7154f5665ba879f641fe5b1b7030e47fee79edbdeee836db73da51cd948002b3817
SSDEEP 384:gtVB/wFYS4IqptYcFwVc03KFc78SB0r2OnA/WkSFbOxxxxxxxxxxxxxxxxxxxxxB:gtbyP4IetYcFwVc6KF5SX7
TLSH
T13B92F705D7844215FDB142785AB38D6B8F3BFE166961A7DF344CB1AB2F723C282A3851
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NetDiscordRpc.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BurgerWorker\KViFU+Z1eTRgb8PSk+++KuLKmRQ4+cU=\NetDiscordRpc.dll
Size 178KB
SHA256 0e569f2b81e4b795d323f456a3e76e7b733c12ca840ac353de85417d80b12667
MD5 1f5c8c7386892eea3a6aa70ad7aeace8
SHA1 601aa25bafbda622aedff9931437c75b984e03a8
SHA512 08576ef29f224875c04930be1a034a1606e2018432fbbd1a5ad89ced44743ed1e9d579054c164792635218010624fbc1f37e7549f7cf1480b07c3f0b74d297c3
SSDEEP 3072:HxJC4kXsNmaK0lIl26o0VtGs7i8Y2AIH104i2W9+mZddWs7fSB:MYm6OE2AIi4i2u+mTdTjm
TLSH
T15304271593E84506F6BF977C94B3C20187B7B84A6721C3CB4664A5892F57BC2BE32732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Newtonsoft.Json.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BurgerWorker\KViFU+Z1eTRgb8PSk+++KuLKmRQ4+cU=\Newtonsoft.Json.dll
Size 1.8MB
SHA256 c69ec2bb5e2275a3c7b5a276a310ac0ca59c1eef33aae345f8586e2921f72006
MD5 e56ff0ce43155049e4460bc41803e9e0
SHA1 b6f4fb5f94c69dc99b14e9c40ee329d6323b3a1e
SHA512 4c8d131c8118626b52a6641afe122b3af743f013d9b41b84df5f33a01ccd468e1cb405a704d305e88d073bb13cc3d6b0671c12bf87720899aa3c55af0c9698d7
SSDEEP 24576:N99C8jMjYpHiFSsqeyQucw/PuFBG4ZjPSduVNTpm7PppZCadycB7jW5JMta1Ck3Q:N99CjFSss6xAAcB7jAtBr
TLSH
T161858D06E3D8CB01E9AF56BD9D325406C6F1F15B2361D6CB1404E9842F57BC3AB363AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\AutoUpdater.NET.dll
Size 248KB
SHA256 91f8f0038d5f6597e32229353116dbcbbfa8b1991a22321af4ca56c86de69e09
MD5 272e9904ebf29859c9dcf549320661f5
SHA1 7ab1613570303aaa1bc60603a7f74aca68d496c3
SHA512 26e4d98467df60f5956968b8d11cc081921ba1292235b98167f83b6173e43520f57b05f3153c2f8a33e6ebc530dbc5300162b14fc8001af9d762da7e70936098
SSDEEP 6144:Hl+tHMXIsl0eG2kBiJysWUL06jTwzrm7:UHMXIsl0eG2kBizC6jTcr
TLSH
T18F443A02FFE5C325C1663AF5983581A107357E96A900CA6A34B8764E4F33267CF6276F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BCMakeCert.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\BCMakeCert.dll
Size 600KB
SHA256 93ba40952f4be52de0c6afb0d66e8c306489edc682ad4515fb12cac8bee2630e
MD5 404918448fcc85fc40193430d0fc2580
SHA1 f01ca0b39a3bfa2e9c47ed2ecc7a033630c1f002
SHA512 ccd9a3014d8b6b424ef70efe0350fb75a19e8d60e2db277436434144b5f37bf0fbfb2b31f7f49ccb4b7b8d1185140fcd2f480a094392aeaa1582eb2560027878
SSDEEP 12288:lx97VGJc0V51wlTLau+3pgEkH5HBiG7LRK5H8:lx9L9au+3pgEkH5HBiG7gx8
TLSH
T16ED47D08A7F41326E19ED7B5C0705865DAF0F029B26BEB5F1CC276FA5953B128C41B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BasicFormatsForCore.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\BasicFormatsForCore.dll
Size 145KB
SHA256 f60f48e8a320b6fa2760d2f8fc5dcd5dff2fb526f967545dd2d620d09b9c5675
MD5 b5e3cb1cac8689c46633460289791f61
SHA1 c4f904be98a59a3a9154c8a3c36b62d66ee530c0
SHA512 45501bd2a58cf4e9753c464fc9adc8c92d43a963caf957de3515392ad68649ce908224f513159864686576b71a32846b2b1155c2a48ae189a72f643cd86eb67f
SSDEEP 3072:zM4HNvwUesP/3d9r9PM9NjeilcwUP0s8nrV+YHOyjO6njKr8iS:wIwU19ziWd+/O6nji8iS
TLSH
T1E2E36C4833E85600E1FFAF7A95B085114B75B516A973E79E0DC490AE2DB3781CE64F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DotNetZip.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\DotNetZip.dll
Size 234KB
SHA256 309f84521fff1f48c3509f7110f1789347a272501992c79af3ef6e6d3b3de7d2
MD5 efadf1780d4ea45d067f7163c4c7a80e
SHA1 a460c0033a007ff979a66153e501023c5d9ab514
SHA512 b785689b51d4be82390fc3b582ba394044dee7f154d703ad4dd688d1c67acdde59d8c51326cdb47341e4576e24ae4fc19b19e43b285dde25b1716887f332249f
SSDEEP 6144:h5S2GuvzjoNuTdR/jZiWAzLIUjIcOF8sszR2:22PvPsAT/b+cF8Tzg
TLSH
T104345B0423ED4F6AF6EE67B9D0B59192C3B2B46134BEDB4E5D4460FE18173A0D9107A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FiddlerCore.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\FiddlerCore.dll
Size 774KB
SHA256 e7e7572d2c3028ffaa0b58c765a526525b2bdb5cc9696045e34f36b01ba847fb
MD5 06b6694b72df565e06e919ca4570b20b
SHA1 e4d2f2b7b6292cb2e8047f8eada5ac7e12e44743
SHA512 ad8c7d0a1e34067c84c539c56aa134ed9cc1963ad15647f48ed2a1be7b779798388371cf330457d3b1668b4c93d57a99db135cef88131b97530376b80e44a683
SSDEEP 12288:qwgpE6bmSuMZVnSuBbYSdTHaEpFdlYRdEI9VO:q/Y0f0OHaClYRHq
TLSH
T10EF4061027F85A11F2FBAB789DB225008BB9B896ED25CB5F0940C09D0D72BA5DD52F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FontAwesome.WPF.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\FontAwesome.WPF.dll
Size 204KB
SHA256 63d50dbe094bbce5d7bf8af08c0d919cfa5e057ca05ae7b27704a8477c8b348f
MD5 2ace85429eee9e8320c82d878e5562b4
SHA1 77ed8b89210930d1de2495ba363519b696d0b6e2
SHA512 7ce3467d1469acdb544f4f42864d94c5ae0ada252c5f096329e16d4b571fc1800bd572e52cfe902ee5d4b91d59a1a4182b07f40b7a4dfe54e338ca46684af989
SSDEEP 6144:Z8P7/P97ilHDqO01ktQOzB4YjDnX08RYA3fP5S:Z8PpilHD+kQA4uk8RYA3f
TLSH
T1F924C077B640664AC6474631FC0BB74221FAE1629D1F4B16FFC4A98E3296B504E22F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Hardcodet.NotifyIcon.Wpf.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Hardcodet.NotifyIcon.Wpf.dll
Size 101KB
SHA256 2059222c4ae5d0291fce13bd296adcc448d79b6fae27746aedf347608ed3090c
MD5 2cfde828cdbfbb545be5aa61fe1e62a1
SHA1 d376bde7322118787f6f08131ab34a17eb711789
SHA512 2a1215dde4bfc4626cc4fe9696b6465a0893a8787ce4ff41ca0c08908bb8aa52a992a156c3320deb0fefb225acb4c3132286d8c04a0caed93282b86adc011cda
SSDEEP 3072:5oy+75OQW4pg9xXsGQTckaX4kGsdO5UInM34:5+75ON4pg9xX7kzsTInM
TLSH
T1B1A3CF8523FC405AC1FEA73478B532148771FD837A61CF2A498262B849B77D91AD07EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.Core.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Microsoft.Web.WebView2.Core.dll
Size 461KB
SHA256 c6feb73ec1cb9271f2004d2586fe1833621a0fcd3d04a6fc1dcf08557d634ac0
MD5 0901d7f2f8b621433f3eaee6a63cb8d1
SHA1 12bf14a2ad26f568f78e4a9304234a6a990757ba
SHA512 e428770009468c5e48e843031758d2ec2af3ceb3c0614248b17e90105415d7ddbf9783e5cfa77738731cf3aceaca788afa7405944dea0af3247ac5f0a4638b40
SSDEEP 12288:5MYWHzByTrx3YSi+iKmRFNge1+imQ9pRFZNIEJdIElxPrEIgcvLcglxMwCepM1SW:5HWTBFI
TLSH
T10DA44F2223FE425AF9F37F75557412204AF6FCD6B93AE75E0998A16D0C32B4089A1333
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.WinForms.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Microsoft.Web.WebView2.WinForms.dll
Size 37KB
SHA256 983a69e9ae41e7cc91962704a903a2c2dd49d464f243a7d101d0b715f723f1c6
MD5 f696f28047246a651f90900475186ea1
SHA1 f87c665f212a7b8b3393060ca84d2e576e6bced6
SHA512 45588b89a24f3db2b5a56bb841480b991efeef9f4778b10e4b8a9a58c651cc12be81c8bf1ceda5badc0b76a03046bdf4b457a00130e1ac0e93cf724e71e756d2
SSDEEP 768:qN9HFciVtBZDgcEST3p4Jjrjh2jJ+SG2auxvxJKia5/Zi/ZGQKqu6bX6uTHRt8cF:29fVtBZDgcEST3p4JjrjaJ+SG2auVxJD
TLSH
T1A2034B0083ACC617EAEB5EB8A5B485620B7ABE837D60D39D5C88F1E90DB37E05514377
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.Wpf.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Microsoft.Web.WebView2.Wpf.dll
Size 43KB
SHA256 29f6e7dac224fc0ba91e45145e209fdb18c985781280d778aeedbd1ea885f137
MD5 c83529d6c90dc9644779207d81bb6539
SHA1 771dcb61c27bdbee4b749ba6d831107756412f77
SHA512 e42703c1d36c21542ccdef6071d2699b50fabec327b8c4db87e3b830fcb40e7d3f8ae3e951cfeca53c2297089b417e199be07105f199335fd3880ea816424cad
SSDEEP 768:k+Q2cVseHJ4Wgs0WZ8lBDP/ryEH0yBy4JjrD1h2jBhsUaGzkI7hKKa5/Bi/IGCvS:NmseHzxZ8lBDP/ryEH0yBy4JjrD1aBhl
TLSH
T11213289543EC492ADBEF6B74A07496610A3AFE437D71E78C1AC4B0E50EB77D025403AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Newtonsoft.Json.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Newtonsoft.Json.dll
Size 695KB
SHA256 22c649f75fce5be7c7ccda8880473b634ef69ecf33f5d1ab8ad892caf47d5a07
MD5 adf3e3eecde20b7c9661e9c47106a14a
SHA1 f3130f7fd4b414b5aec04eb87ed800eb84dd2154
SHA512 6a644bfd4544950ed2d39190393b716c8314f551488380ec8bd35b5062aa143342dfd145e92e3b6b81e80285cac108d201b6bbd160cb768dc002c49f4c603c0b
SSDEEP 12288:mFIM0KteTMN4Or4D3OdmZg5WHEaEDIGBBjgrIQtD+tVqDMW:6zMTMNNd+g5Wk78GBBjgrIQtDF
TLSH
T165E45A2123E99B2BE0AF2775B032491647FAF542F6B7D78F5604D8AA1C43F558D82323
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Steamworks.NET.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Steamworks.NET.dll
Size 365KB
SHA256 a61778cbce992f1d3ab48577d8c6c1c43778727b6127cdfa8b97eccc353ce6ab
MD5 9cad80b5a72727b344d5fb46734af788
SHA1 e83420c8b362944f9fe861c808172ecd7057030b
SHA512 0e34d5f47398b52005cd41dba28d58a2e8128ecf3add668757c246946cbeb5d4d8f72d67c5a36f6d13ef8b2e30248b035630a444c3a6bf040978d338d489e927
SSDEEP 6144:38Z9REsOmCo0SIepPqX2lbRbRU/TB9nflJxSpbnk25pRk/9:38Z9q8tqzvflJir3RI
TLSH
T13484F82D7320793BC029433664B75E0BE6A0E4C2231B6E6F764249395DB77C49E3B2D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.CodeDom.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\System.CodeDom.dll
Size 183KB
SHA256 7b2ba5ede11ae8ac2d1d67df100fbd23e45558f8b29cf7ca767bb41d4f88281c
MD5 34f6f6df02024f033c0d9cecc9e19f5e
SHA1 0f72071a867d7ca61edac4cc70752ef608fe9926
SHA512 5a7e9d6c023cbc4de9360686149a001e0b6192580939224af193e952d1e62e3e0ba3577cded85f012d90678bd681245bfd25ff258d596c235a5c3afdb65b21b8
SSDEEP 3072:MFxaB6x7l+gq0WENWTv23phTvrgnlLXb8EVY3H+1Rzbbh1pTiWk:U33hEoURwE23yRznV2J
TLSH
T108043A713398823BCEDE5235E0A9405042F5E56A7382DB9F5C8965FA5E23F60ED20E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.Composition.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\System.ComponentModel.Composition.dll
Size 262KB
SHA256 7e65f888588c79f69acb593d9b39990c33fd58377fc48300a0a93fc8dbaa159f
MD5 e0bab5ab0d5835d00acc36eda1a4e3a2
SHA1 3b4dc4b656922e71deea58d7e4f51aa68e6680be
SHA512 e3faeae0346a62ac0f38ee42119213b39c4d1fa2372ef9d02514e95050eac70a67a92edf0019392642e3a08964e2a838edb8629e4346f5b68d40839173416733
SSDEEP 3072:DJDT6qZG065+dP14WQuE3pu4Y62v903SoIrEjFSikDdLRKVgWjqrgKQqktCsa6AP:1Bd4WQoCGmSoIlRA4itCsa6A5oM7
TLSH
T15944291237FD1366EAEF1B7CB67488118AB5F962B50AE74C2C4994FD0963F908521B33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Management.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\System.Management.dll
Size 288KB
SHA256 75b833e2aea56dafa94f0d2728925db405f9dd758ff19d43924a7a268202c94d
MD5 bf74ada4da38cdb4a8decbdae77249b7
SHA1 bb419a9fb2b61bd2ab00f10266635cc47a9e0ffc
SHA512 f0f2ac9ccc3d217446fed2c2e78a5e503455cc7ae60f060a05a1e160109cdd542e75f6b044a7d5a356cf8fedd4ad15cf92e1df1361373fae7f55b6f923fbde3a
SSDEEP 6144:Xd4rRwgJrgMmbwipdLEoWkFPMcBIABGBcz7:XqrRwWiUA/
TLSH
T10D543B3037F8C196C5BE8EB9A03011948FB1B3AF244EDB9D5562BCED28B1781D65712B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Telerik.NetworkConnections.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Telerik.NetworkConnections.dll
Size 67KB
SHA256 14a8afece485815896fc9f098d66b0457d1be374b10366b48c706dfdbb275094
MD5 f442ae4be024c27c59ef737902303a86
SHA1 c8191737225509a110a6fc42f9e0291fd6576c8d
SHA512 8b3f768ba5232db3d5355e8d4a719597f16f06a438f39365e494df4b30125f433dacaab5aee2bfbfde910c4b86ee0ca6903c703863b28c5d4a39c62103522af6
SSDEEP 1536:qpjTrvVmDDDy/WTAAPfi82uA+J+GwclhzF8FgaUK:qpX7VmDDDy/WTAa68JBJ+GwclhzF8FZX
TLSH
T158636D4133AC532BE7FF4F35A0B6A21004B6FB55BA23FBAE145450AD5C627C126217EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\WebView2Loader.dll
Size 156KB
SHA256 8d6fe8b14529e1d6a02a7f2d5991ee72ace0d7e2f1901c71cfd7df310600f4c1
MD5 e8894bce4a8fbd1a059023b3b3c7849e
SHA1 5ce5ea789dcfd04effc7ec2aa40d704bb42cb31b
SHA512 405b90498c9b71c0514129d72ff1bac345bca7188cd268ee3e6aa4ec6529f94ab91ea271a6e8e6d7e9343359e6e7e9fd8b275fb761abd14d100a36201e0538ab
SSDEEP 3072:rKLKQDEW3JHtcGNd/SzCzkYLSq9hX4qSd/8SALTcYrEtnWldxVKW6:mTBt9Nd/9d18qSyEtmG
TLSH
T1D0F36C57B3E5007BE1678274C9934A56E77378510B60AFDF03A482691F237E4AE3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\ar\AutoUpdater.NET.resources.dll
Size 10KB
SHA256 cf2b1c3cf607e7884fe8dbeb87b74ce6c42f4536fb92131704df5abfad96ecd5
MD5 15f7af014cf402523f0f00a2897158b6
SHA1 e02d2ccc3c1e278f822ca303389f7c41aff137c6
SHA512 334e0644c29be7f6f0c829a31ce730fc93a0d2a1efeb8c35dac539e0a539196910d664ef082a167d22b7e590527fc8ea2429e99f3fecfbd0e1d02198e46c16ba
SSDEEP 192:fXhMivXhRlfM2j+jurjyjYtVfXwiRx7ofVsXiFRqe7eKMw:iivXhRlfM2j+jurjyjY3fXwiRKfVsXSr
TLSH
T1E72245122BFD5275E5B39A7694B66194C63BBE72DD21EA1E0496010DCCB2317CBB0F32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\cs\AutoUpdater.NET.resources.dll
Size 9KB
SHA256 18b1eb31160b5d3ef6e8424204dcfdd2df69a48ff191f08810fd01a95bf3f9a0
MD5 2a6292b0c3bcb81a18ae8b44a275ee96
SHA1 a9fbfc94728909d9909e48b60dcdd432460dea4e
SHA512 39d213392cc638e9fa786352e12d0353fc96112ad2d19bf031382206cc028d5f7d4cae29b4ed402b2ccc651717c9f1b3c808ea556c095814fc6bd331048147b1
SSDEEP 192:D8hP7iLXYgXY8M2jbju/jTjjt2M9l87+EXRgXCeWKMw:AjiLXhX/M2jbju/jTjj4MQqEXaXCeWY
TLSH
T1171251122BFD0239F8B35A766A764190873ABB71EE35C66F0495010D4CB2356CEB1F32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\da\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 3d1dac05f707e995b1fa1a1a1c89dff452036fbf20273e6334afbb4b00033aa6
MD5 cfdbc013e1ac53ef5da16582054a4c58
SHA1 6831e26ff9ae73c210ded5379be3946918d33f01
SHA512 626243ad4a05c584771773d5d8f494a65d4d7cbf5571beba293a09b909d9d5ca82167605d7ac03486cd48bc2ad93776734d095f7ed064d7b1f1c07fc3ea4bda7
SSDEEP 192:KbXqigKM2jbjKhjOjD9M7OWLvoRGKMwi:figKM2jbjKhjOj5MqW/Yi
TLSH
T196F143136BF8433AE4F36BBA693A5255863AFA76D930C62F4484011D5DB37118BB1F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\de\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 408bbd72954cdd8e830ebd0787f9214405b5acc15d06c3336d7015cdaebb71ef
MD5 cb9f885e34df02e77aeb8d304019a372
SHA1 f9a787fa782799e4a84679ed18fc51041b451954
SHA512 f2f3ad6687a61f43d8c974934b5cb6e8eb74b0325c1bcee1eab5329e9a945955e3490ae71961525509c11089e0077061ce74fe274e35551bd2a9f41161769a3e
SSDEEP 192:f7hjFiYEM2j6j+ijAjD3fUMASZWLv6aIBKMw:PiYEM2j6j+ijAjzUM7WbcY
TLSH
T1320275122FF9423AF5F36B7E197641559A3AFA75AA31C61E0580111E5DB33228F60F33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\es\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 d689092b0e4d74e1a55d0c6fe43abf65580a3fbf52b3b8368285d8639b1d2cb7
MD5 7d94426173a5be2b84fb5ecbbea4ac86
SHA1 75d186b84c28ef5ebb088a9a7cfaecde7bdcfeaf
SHA512 708a94708f126034829e5ea2f2a1508420cce0660a071f10ed3c59800ae2736ac9e871061a593dbd98aa46843d309666097e6275d5be45bf05a3bbaead04e3da
SSDEEP 192:5GhlB/igwM2jGj+Ej9jLXdMLfMmihMn5sWLvaGNL1CBeKMw:Yv/igwM2jGj+Ej9jLIfMrUGWGKweY
TLSH
T1F00277126BEC0239F4F36B766E7645529636FA75BD34C62E4080020E5C72746CE72F63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\fr\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 2fb47dfb09f9f24585b8bfa71c773d855b93744dbbd8c376ed8c3edfd3f36064
MD5 399becfbbd24131839c31eb023556e47
SHA1 6e2c7c11e256f534e87c1868624774a2bebcb05c
SHA512 e1425ead6674ad37e59908675e4fff42bb3b184fffa00f3cea19e4faf63e26c7901958e55d449ba3713689870ea1a4ee0370f6b99fb6a3483f5ac1fa74397e1f
SSDEEP 192:mW0UiHxoM2jcjiZj8j7qUCzL4MpCWLvxOLVVKMw:ZiHiM2jcjiZj8j7qp4M8WWbY
TLSH
T17F0263072BFC126AF5F36B766A7692518637FA79ED31D72E0481020D58723118AB2F36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\it\AutoUpdater.NET.resources.dll
Size 9KB
SHA256 eea2adbc5356ce05b2d9fc418e99ef0711e9c7fcdeff3d0c6d85c3758a49a75f
MD5 0c987d6182959a0a9bffa4ab31f08c0e
SHA1 e39e497924d8a0eadd514d47ce47cd1685f49b75
SHA512 814b171319f85c39dab237c146f1d811f303fd982ca919cb7e418dfa49dcda145a0f75d436409b4b0cc82381c019558a400932227faa54adf97652c5e09bc5e1
SSDEEP 192:KVh35iwkM2jUjf8j6jlV7MDAP6X/aBXjLxu7KMw:GpiwkM2jUjf8j6jlV7MTX/aBXvE7Y
TLSH
T17C1264222BFD0239F0F32B7A59765181977BB975FD20DA2E0485010D59B27429AB1F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\ja-JP\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 3370fbd2efb274b714a02ce32b3b642c65fa19a896f3ed7ac0a9502fe7d6beeb
MD5 39605f921bb6d87527972f23f17f4e7b
SHA1 eaeb878e8a12d36cdffb0b605ea3dc8181d4dc82
SHA512 5afaf1f311c54465b0db0e2c8bebbd7ae01239d9bc9f30fdf2ebbd68d2026c51d1e970ea6d0d6966f8410f909375b3879f8fac1bd8cc45f6e9ca1a36717ad390
SSDEEP 192:05qdi/h2uM2jijfjjOjdLMaXoWLvIKMw:oyiJhM2jijfjjOjdLMXWkY
TLSH
T1D802632D67E8026AE8F32A72287A52818536FE75ED31D72F045C811D6D7231ECA71F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\ko\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 c5b8a8e7da93b9b50d3a1ef3330035b41c514ef6f361188be97ac273716919ac
MD5 9e6898093a38b2c4da2d9cdf2dfd13ed
SHA1 936c0e03e4d8d4f5b5023694d47e10c2ed393096
SHA512 84f9be33177151418cd7f125f46508538f2d8b36bcc2c739ad6e5b528a24c25f0907d4821c3060e316ff048bf8a7d0965744c56e951170c091f72f1f018224ce
SSDEEP 192:T2C1gid3M2jDjDijDjdM5IirBWLvl1dKMw:rgid3M2jDjDijDjdMlrBWZ1dY
TLSH
T1E80284921FEE0279E4F36E7A2E75A241867AF974FE32C61E4844050D9D723128E71F63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\lv\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 b00f6217cb875a0daedfea0e00d3311d2608d03c0bee74d524d177de06f4da74
MD5 224ffe50479ba20cd6a210d5ee920d7d
SHA1 322147636cf8b1c1c2d38f3fc94e8632a6c9a7e9
SHA512 b93a7335970f293f071680e56e8710f904c12f129d07144a3c83c7baba3186573514c751ca11150b65342f20b274beee7ba37ab63654fcde0a502d13d1c92547
SSDEEP 192:Kh0UmiwRrM2jtjYUjCjqdWMpHsejeWLvtrEKMw:O07iwRrM2jtjYUjCjbM5sejeWBrEY
TLSH
T1A10252222BFD06B9F5F36AB61A76915145BAFB74BD21C62F0485020E8D723158EB1F22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\nl\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 6e9df964edd743039174e6dffc068219e59f40cafd33902581e74a08dc72edf2
MD5 77b89a64c5aeb6f43ee89f87c46f97a9
SHA1 6b479246676ee768010a76baf36cc3197afa6aa3
SHA512 70dbf04206eccaa9c8998a7b260439e77554fd93b401540f17f2d3fd8bfcb3704c632d4c50162c2c944a5a025d47254012333d11197027bc15ba836fd213c448
SSDEEP 192:55OqiyaM2jGjEnjSj1iu+bOFMgNscL7WWLvPMRKMw:viyaM2jGjEnjSjEu+bOFM9cL7WWDMRY
TLSH
T185F185172BF9423EF5F35A7A58768292863BFA75DE31C62E4444021D5CB23128EB1F63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\pl\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 a041069ac5e288d2704ab670efa6753dd268bf86b3223003e4e094754a337936
MD5 7f9bc29eef52c3b890c5b1e245626952
SHA1 c1592857e7e023a22eed970f66c4a84d80c58ec9
SHA512 c9a75131406961f20fd9807fe9168fd36c2859f9879f31841d3a10f02bdd9614fa41060135fb01b1f799f2263c7a647b60a0e83ab2d215458e36d67f9da3ed3b
SSDEEP 192:EJU/WiYeM2jDjUwjej9ul8LMfK6D5WLvN2JKMw:siYeM2jDjUwjej9ul8LMy6D5WRoY
TLSH
T1320285116BF8023AF8F36A7A6A765255893AFA75EC30C65F4441110E9C723528EB2F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\pt-BR\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 ae81bc07e5daf06825a77b68d5ec12cc5998348c2a73bdbf6d5e6fcef9d64f70
MD5 0eabb0e7abd788c23b3c142fa7fe51fd
SHA1 6d6495bdf98765cb0e1a9d61f636d34a3feea9f0
SHA512 a8eeae1b31f7e14db61146e535e4ab1d16bdb66eb2ab9f9d5ec9df4bf16c8a65b1ee31b2351022f4c464149f0b4af633d099b0f39639dc38d19e7fd591c4c820
SSDEEP 192:p+3IilOM2jnjmzjtjmMweWLvF2i82OKMw:k4ilOM2jnjmzjtjmMTWxYNY
TLSH
T1A10263222FF90239F8B32B76593A9612963AFA35ED24D65F4581060E5D723428E71F33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\pt\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 1212b1aa059492afa336dcc83a96a409f9d00198f7fc20e340f60619cf3f63b0
MD5 67817d2edd9b0675d4f7485700abb972
SHA1 ffe63a1bd069b684bf38541410ea5e551cc19c20
SHA512 7e2b80cf825f1e989a0fee378a9f7bff048a950df4c7b12a154ace1c0b363e699f944f14cc646843b1dfface148986ebedf07193d88b0f759f5be0bbffdac0fb
SSDEEP 192:1NhIxipGXM2jUjlvjJj/JMsWfWLvFmi8lLdKMw:JEipGXM2jUjlvjJj/JMzWZoNdY
TLSH
T15F0275222FF80239F4B36B76293657558A7AFA75FD34CA5E8580060E5C723418E71F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\ru\AutoUpdater.NET.resources.dll
Size 9KB
SHA256 97314053709366284705558e17873ee11b29eac1344306c851c29e4e559fea55
MD5 f96858ad3330d500c34efceebee620db
SHA1 7f07b4ff7035a33ba5b9c1c65a7aa9363e6714dc
SHA512 dcfab9ee51b6c71848c1c4784030b435e66416ab6f3f36c5f5c4a0a452b374d64e9cd736a02cd6e30afaf61ff45b9e6a8ce18d522163899f0808aec44394772e
SSDEEP 192:pdhnm+M53i4bM2j81jsJjkjMeLMQV/WLvJNKMw:d6i4bM2jOjsJjkj3MO/WlNY
TLSH
T1661231122BEA11ADE1B3653AD9355A056537BABDBF32C71E0490192E6CF23018A71F26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\sk\AutoUpdater.NET.resources.dll
Size 9KB
SHA256 1408db02419f71222248b0019446b2d501c7e68584fc155445ed7af56074c9d9
MD5 48d1a998361ddcddf8528cd7d8ecd52d
SHA1 5b0c585235dba229088b3cea9ccde5f3a78c2601
SHA512 d7182ddbe61ac0028d8ae3a95e6dc0ac1cbf922f4b931a06d2b8fb42d1ac6576573e6da7dbf97f2075027f4c46dbb75e9259cc9f274a5fae6d435e4d1339eaf0
SSDEEP 192:ZErh+OipXYgXXM2jbjOSjXjbbUMxGcwXRgXF146KMw:cipXhXXM2jbjOSjXjboMscwXaXjpY
TLSH
T1DD1272222BED4239F5F35A765A765291863EFA74AD34C62F4881020E4CB2355CAB1F33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\sv\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 c428be2722773a6234ade47ac9c7977dfea0bb671fdd893efe74b22665097fb6
MD5 31d1028b4630c2e3318a12becd4c0062
SHA1 31ce3ad6fe249806078ab39821993f6675b86a7f
SHA512 f4496320f958070170c05dcbd1729dcda68afc4b993809ffbeb6b593b37d7ca2398e6aca3c12f5397b385b97a650abd8743c63b0b5e30088b17aeb3c67cee938
SSDEEP 192:GhQxiyhM2jIj28jljXkEM+eKXTgXDKMw:6EiyhM2jIj28jljXkEMFKXUXDY
TLSH
T1970294122FF9423AF4F36A7669764295893BFA76AE31DA1E40C5011D5DB33018BB1F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

svchost.deps.json

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\svchost.deps.json
Size 20KB
SHA256 3cba949ef5a94d911b9d3ea6d973691df36d0628e02b0df74d8e39f2179ca5e9
MD5 5dee9e3be8d7d561228f25fa68ef1468
SHA1 9132a32584398adaa3eb7c4c7256ebf2ba6dd7ab
SHA512 426cdd6e68df388f2c1b8ce0eea2ba9df9660b466837a7104209823c34038a375632f152f60f39ab09d343673ed322397fded586937fa33872d03c4ffb7b6995
SSDEEP 192:+4AJleI07MpqWyB2eiUc8gRpKTSoXL4G3Ow:+4UleH7MpqWyWfRYmoXL4M
TLSH
T17492AB25DA849D7742726FA228384282F625536F50016D8F78FC259CDF73F8BA1A2F74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

svchost.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\svchost.dll
Size 22.4MB
SHA256 d307f383e1d24cec5271859be77b3dad20906898ee3a9ea7f5675c7cc4a4dc74
MD5 65cd40cfb6074da4f9bb0c1f50143230
SHA1 ea3cbdb422b82cdbba637cb009a333083706fc02
SHA512 87406b1421465abdc6a660b3084c9b77e142dfa5df14059b9a70a757a4b08c86081f690fd0d8eace5bb1e3000b69efb7e25c8822b2cda0e306edb8800c8040ef
SSDEEP 196608:wzII3rX0Ln/0z/1To0xpLxnRlAS1UVnRPzSCmLlrITKONNCrHZQy+:+NLVJTfxpLx/AS1MVc1ZwCrH
TLSH
T119371E6EE2E08CEBD43E76B526B81B16E29013BF93C19C673EFD915D4F3A1005026B59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

svchost.runtimeconfig.json

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\svchost.runtimeconfig.json
Size 372B
SHA256 1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a
MD5 d94cf983fba9ab1bb8a6cb3ad4a48f50
SHA1 04855d8b7a76b7ec74633043ef9986d4500ca63c
SHA512 09a9667d4f4622817116c8bc27d3d481d5d160380a2e19b8944bdd1271a83f718415ce5e6d66e82e36819e575ec1b55f19c45213e0013b877b8d61e6feb9d998
TLSH
T1CEE02C7BCA10ACB315F52BBAC02AC282FE20232B00004D2A35FC180C2F3AAB30012F49
MD5 SHA1 SHA512 TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\th\AutoUpdater.NET.resources.dll
Size 9KB
SHA256 048a52e5ea8c4a6d8d8cf7ec46c1f41ae67aced49c10d11d5d13ecacef886077
MD5 96b2559351f5d42f05b0e7194cdf86f1
SHA1 90a14dd3e4e82be11ec988eb34c726fde75938aa
SHA512 a9d569a6e82487d048d07852b1ecf11ce7d06bd9796adb457fa436ae83244547180bf10f39f29d18f3d3afdf55c8b7aaa21524a59c1e5588e6776d3a0f215611
SSDEEP 192:0CSstiNOW5pM2jIjMCj1jr5dOO6V8v0lSMjsBv5nT5TA5p5WLvqgbMfKMw:0siNL5pM2jIjMCj1jr5dO1S8lSM0v5n/
TLSH
T1281210632BE941B5F4F22A365A3A7285463ABE747E31F6DD0085115E69F13018922FF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\tr\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 749ebe2660ef8ce869ee88627cb1a7c4ef6f7049b65eb04ef25b610f7f50f9d5
MD5 1066670400388b5812741d8ea461d04d
SHA1 35e01c85f0625123f1a0489790ce87757bb9a7db
SHA512 54652196e76c72a552cbe5dfa2f9af2b351a625970a91b1716e51594b3a3e74fbc898aecbbbb920265695dc01024ed736287b4acb0feab8a8f5613f329be91fa
SSDEEP 192:Bt71KeqiG4M2jDjHBHj/jMaMk6wWLvVKMw:miG4M2jDjHBHj/jbMpwW5Y
TLSH
T10A0263122FFD023EF4F72AB669768166863AFA75F931D96F4441010E5D72312CA72F22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\zh-TW\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 93d21963b12a0553d4d5b1df679f3b8ff61e5fc699acab45266f0cd3e9764533
MD5 b485aff46f1cc1f6418de58d8c281bd7
SHA1 067b3acc70a323a5d4f0c06bb72f09a91350b7fb
SHA512 12a3fedd7109cf4b1d11799d0fd70c4c72d87ca40d50ff3dc23056b20496fe3a8dfed28fb82894b3faceca916c8bb8d289593467990157da562558df08a58569
SSDEEP 192:mkkiJ6cXaj9jWjnjUZMlDdb/eWLv9I8/mpFKGKMw:4iJ6cXaj9jWjnjUZMf/eWilLNY
TLSH
T13EF154266BFC027AF5F36A7A29B54252853BB979EC31DA2F4480010D5D727128E71F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\zh\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 4ea925fb369c847a76f2adc2e8b48b17189dc29eb13337865ed63e5fa88f3a31
MD5 851f713fe6a4013fde196b8d9591cff8
SHA1 7a01240bdd955f12cec5800c8184eeb0a439b2f9
SHA512 98b2091ed735d30ab6b8487fa76de66dc24db42bf4f1de92b8ab588e0f9711a30ac87d8751519c900a49ad9166d4beb2d304741dde9b6ab5a319141ef29b96f5
SSDEEP 192:ZW2likKM2j9j7UjjjtMIdknn6WLv+dFNKMw:tikKM2j9j7UjjjtMZn6WyRY
TLSH
T1C1F175621BF80239F5F36A762A7A9251C63AFA75ED31DA1F4480010D5D727128EB1F27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76b82261-e95d-4dbd-a8ae-da98f1893e8c.tmp

Path C:\Users\Admin\AppData\Local\Temp\76b82261-e95d-4dbd-a8ae-da98f1893e8c.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90906ffc-ba76-41a6-95da-a1458c1ed694.tmp

Path C:\Users\Admin\AppData\Local\Temp\90906ffc-ba76-41a6-95da-a1458c1ed694.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

Tmp6653.tmp

Path C:\Users\Admin\AppData\Local\Temp\Tmp6653.tmp
Size 2KB
SHA256 e7cf406275f3a74cdc51d494f3bcc20a79707caa3abc507494a575e81d07fcd9
MD5 3ca5efd1d463ad2ca0b2c82736a95de7
SHA1 6aa24aeed8c56ad8b2fbb4036ec32678cbdda13f
SHA512 3064ce5d3a14933c96f308db6db173dbf12b2a93e1de8f2a7a833570c524306a23738189332b569a8a5c399b657853c22de2c16d6b7c9207dba2fb96cbe1aeee
TLSH
T10451062E247C75EF3C5C4AAC0AED4C2560CCDBAA5864292FFC167A8D0E926147C6D353
MD5 SHA1 SHA512 TLSH

Submit Download

Tmp6693.tmp

Path C:\Users\Admin\AppData\Local\Temp\Tmp6693.tmp
Size 2KB
SHA256 199974087df111be38a54121765f2ba66ca487635931d20918355430bbd0dc26
MD5 f3ad73750413e3d118d24133ff4eb4d4
SHA1 5d09e1f220ca374abc7ae1eb0edcd23c9888ab9b
SHA512 c814ece3a5e5f81c31f8766cadd50443aa59962dcfd78eef343097d3a8370ee1e2df74ae0bbe60f3a8959e93948bb63afc9d1aa3257477b324b08517bfc62471
TLSH
T112514C30527E05D87F547AC6530CBF5620D94B4E0C0CB2AA6172B5C59D03F51E17E219
MD5 SHA1 SHA512 TLSH

Submit Download

Tmp8AC6.tmp

Path C:\Users\Admin\AppData\Local\Temp\Tmp8AC6.tmp
Size 2KB
SHA256 9b0d35d446d04828d80c3f797d789bf19d21f9b6fe452a7a92f43f4823b243e2
MD5 181053067521b22c8757a0321b211409
SHA1 4ba12095226e6934fa24ed2e6eb3c659b3905989
SHA512 52690d2676bdf9242fa60a6680c51d5e7f3833a6ad5418d5983e8988f058e0d73960871b65b0acce0182205e9969ab6572742b041fae3aece546a1bdd221ccf1
TLSH
T173511A1BA5F07C119C5EF51C7EDF8026A099C3D4BC4A226E022A85C9BD8675A671F4C4
MD5 SHA1 SHA512 TLSH

Submit Download

TmpF122.tmp

Path C:\Users\Admin\AppData\Local\Temp\TmpF122.tmp
Size 2KB
SHA256 c4c99b1fbb02fbcec4e17bab7ea1c07fc9f19e110e702dddc7a5d5b827e0b86e
MD5 5da133a3168f1d423352f19e0533a857
SHA1 a2273a49551c46b33cc8022c8c89c65f5acfce9c
SHA512 64ed71bdf36a52f5028de1eaf8fa0d83b3480985c23279d6b14fc0d7e2a7df22d827974afbc33eb6197963f50b0308f78e87b3c146c3fef404049ebbe793211e
TLSH
T1E9513A9F764D89055CA7DEB83557832ED0DADBC81049B34FB43216101EA33E224AF48A
MD5 SHA1 SHA512 TLSH

Submit Download

by0yg3unmx2.exe

Path C:\Users\Admin\AppData\Local\Temp\by0yg3unmx2.exe
Size 27.6MB
SHA256 ca278a5c4625eda85627b0a3d346b8f92e46db85fd16f1a3d5e05d2c007e57fe
MD5 84af2aadf9850606de4e8300e91d7f38
SHA1 75ca7fd2985b816d90cf35bad1d1bc2a08dcc754
SHA512 0d20e539800e059da788c4e812d559ab77f5500b59352d915ae8a5d274e2b9a0c69e517c21aa3a2142af755a8128097be8ca5d658d8bfbfd226ece81ea46b54c
SSDEEP 393216:WqNLVJTfxpLx/AS1MVc1ZwCrHXA3mDDDy/WTAwG:rfPlASqgrHE
TLSH
T1D557516DE2E08CEBD43E76B526B81B12E69013BF93C19C673EFD915D4F362004426B69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2280_420974127\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

749c90d1-d111-4878-9903-005c8b768d26.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4216_681964704\749c90d1-d111-4878-9903-005c8b768d26.tmp
Size 152KB
SHA256 f83832c37a0969ce89f77b16eaa07457b03f43029abaec00eaedce2674adbaf5
MD5 d2e80cd29c43ea745d16284dc1f58ea6
SHA1 53fe0165f9f303b333be9284865c8a74f3553c0b
SHA512 375fd3e65b12f80b92a63c1cf6f0ace9fe878c1a0cb5179d869c99aad0cfde14715fd1499eab22a04f353e5f292c19d6a5aeccb43ec2ff5cd6878a5226b005ca
SSDEEP 3072:bHVqfst2F+fBXzSKmg3n0OIH1iCylcLMLgaK9enj59Ah8MuBX8Yk17CF:b1qkfBXG801idlcLMLgaOeV9A2XdBkda
TLSH
T1DBE3E13C3EDACD26C21B20F97F287587C54D8F17A10BA50BE14A84015A76B5E17E2DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BurgerWorker.exe

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BurgerWorker.exe
Size 2.1MB
SHA256 b5edd3a53f8cb50d1ab5ddd6979f633b1a6ca2ac53992d6642907e6a7b6c8d44
MD5 2cf687bac91aea27154769ae642f2e39
SHA1 d65c1f3cbd581f091cf36c46b1c89ef32d1ff19b
SHA512 0f4302e023cc36c4d457aea4fd3de32827645f201d430dbf4ac89847eeb9539cbec1e50fd566abf5409c6ea117324d04cb31225c4440496043c7f4bc0095cda7
SSDEEP 24576:6nTS92u+mtKB99C8jMjYpHiFSsqeyQucw/PuFBG4ZjPSduVNTpm7PppZCadycB79:6mUu+mtc99CjFSss6xAAcB7jAtBrG
TLSH
T190A58D06A3D8C711E9AF967D98324406C7F1F55B2361D6CF2404E9842F67BC3AB363A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download