a3378c300738a785ca0295f1665839fbdc8274a5bf6290ee6f40717277e3fc62

Analysis

user interaction
yes
max time kernel
115s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/07/2026, 20:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
FortniteBurger.exe
Size 27.6MB
Sample260702-zh4arsew2y
SHA256 a3378c300738a785ca0295f1665839fbdc8274a5bf6290ee6f40717277e3fc62
MD5 8f2f51ac8842797663b74f57f153515c
SHA1 71ed6f78bf293f8c8941fdd4847b0361e1cbd0ed
SHA512 5fdaa1fe6ef29071eba64d3759e849e4e26931cdfae32ad2fffd506a3c1d717afdab2edf6dcf2062c715aa62259f82d68ab1e1fde58455bd8cc49feb32f84906
SSDEEP 393216:WqNLVJTfxpLx/AS1MVc1ZwCrHXA3mDDDy/WTAwo:rfPlASqgrHS
TLSH
T19A57516DE2E08CEBD43E76B526B81B12E69013BF93C19C673EFD915D4F362004426B69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery spyware trojan

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000\Control Panel\International\Geo\Nation	s2c1p2hetgu.exe

Deletes itself 1 IoCs

pid	Process
868	s2c1p2hetgu.exe

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BurgerWorker.exe	s2c1p2hetgu.exe

Executes dropped EXE 2 IoCs

pid	Process
868	s2c1p2hetgu.exe
2448	BurgerWorker.exe

Loads dropped DLL 7 IoCs

pid	Process
2224	FortniteBurger.exe
2224	FortniteBurger.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
2448	BurgerWorker.exe
2448	BurgerWorker.exe
2448	BurgerWorker.exe

Contacts third-party web service commonly abused for C2 1 TTPs 9 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
10	raw.githubusercontent.com
99	discord.com
100	discord.com
102	discord.com
113	discord.com
250	discord.com
11	raw.githubusercontent.com
251	discord.com
253	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies trusted root certificate store through registry 1 TTPs 3 IoCs

A root certificate was added, modified, or removed in the trusted certificate store registry paths.

defense_evasion

Install Root Certificate

T1553.004

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\5054202E5686AB9850347088914896F3A4891DD5\Blob = 0300000001000000140000005054202e5686ab9850347088914896f3a4891dd52000000001000000930300003082038f30820277a003020102021000c4f7f0ec6e32fa29c26b53e914bd7f300d06092a864886f70d01010b05003060312b3029060355040b0c224372656174656420627920687474703a2f2f7777772e666964646c6572322e636f6d31183016060355040a0c0f444f5f4e4f545f54525553545f42433117301506035504030c0e466f72746e697465427572676572301e170d3236303632353030303030305a170d3336303730323231343535335a3060312b3029060355040b0c224372656174656420627920687474703a2f2f7777772e666964646c6572322e636f6d31183016060355040a0c0f444f5f4e4f545f54525553545f42433117301506035504030c0e466f72746e69746542757267657230820122300d06092a864886f70d01010105000382010f003082010a02820101009f7382c201fa1542fef3b5eb660f13cc1e646ce9957ef68c70ccba8293fedb1f4610e0cfdff73a513643c2bdaef5302543b6c159a796448ac4c28824b1e04d248753bbde1f352f218899088dd7bc6e02ecd7b490faa2250a330e7107d8829374d42afe92aa0fa7a5d9dc2328baa0512e9e71e77d1e09a2682fe67282f5dae3600e4fdc46e3dc0829c4212dce7320ce75e03eff25d0d5d6174b4cbf41f9790ebd1cea09894dfc45fe594b885f526de5f7e18ac7c683b286a7a5a2d5d8738414aa5ecb34e6f8f3b563f8763e84ec7e3893e96646756d4d85dfa8fbfa994acc7a0c7fd3b95e7247a5034a27eccc3f925b2298006d07ecadf53ac86b638e19fbe7d50203010001a345304330120603551d130101ff040830060101ff020100300e0603551d0f0101ff040403020204301d0603551d0e04160414fcec8dcf8f049226e7a9d83f716cd693c392bf1c300d06092a864886f70d01010b0500038201010019c265f94540aed2b6377aaf327bcc8db9419462298b75aa319e6893e0ec0d2bcd2033296e45064f0cfef760354de53c345b16cfcd03733fd5b1059af3e14811feaab8db0a54985b7988e66a7426f6ada91bb646a6e46b6f12114f6c6434a965a375f3e6898f91fddb03b6968755278961477d25b56a72d536810a694457c455c460cd898af951d7d3da5781bcbf609b669a57d31944043d1a113892c8acccd5917786839f4d609598baee8eaeb864e34eb0e85237df1edd05694d92f26b0e0ae87f7cbca86590b048e2377a7f500c8993f9ffd66fbabf62cd09839edcd6ca5cf9e9abb7bb733ed95bd7df00b2f590c5d4523ff9d8b42e80e50546010f01d37a	s2c1p2hetgu.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\5054202E5686AB9850347088914896F3A4891DD5\Blob = 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	s2c1p2hetgu.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\5054202E5686AB9850347088914896F3A4891DD5\Blob = 5c00000001000000040000000008000019000000010000001000000015584b11fb6f260c43fc6cf5a15e89420f0000000100000020000000e2bcea446bacde2565214c4fbf5c36c93393531648e0ca205deedf06b83bf95a0300000001000000140000005054202e5686ab9850347088914896f3a4891dd5140000000100000014000000fcec8dcf8f049226e7a9d83f716cd693c392bf1c040000000100000010000000a1e6531bf39ea2db9cd757e694ebf5d12000000001000000930300003082038f30820277a003020102021000c4f7f0ec6e32fa29c26b53e914bd7f300d06092a864886f70d01010b05003060312b3029060355040b0c224372656174656420627920687474703a2f2f7777772e666964646c6572322e636f6d31183016060355040a0c0f444f5f4e4f545f54525553545f42433117301506035504030c0e466f72746e697465427572676572301e170d3236303632353030303030305a170d3336303730323231343535335a3060312b3029060355040b0c224372656174656420627920687474703a2f2f7777772e666964646c6572322e636f6d31183016060355040a0c0f444f5f4e4f545f54525553545f42433117301506035504030c0e466f72746e69746542757267657230820122300d06092a864886f70d01010105000382010f003082010a02820101009f7382c201fa1542fef3b5eb660f13cc1e646ce9957ef68c70ccba8293fedb1f4610e0cfdff73a513643c2bdaef5302543b6c159a796448ac4c28824b1e04d248753bbde1f352f218899088dd7bc6e02ecd7b490faa2250a330e7107d8829374d42afe92aa0fa7a5d9dc2328baa0512e9e71e77d1e09a2682fe67282f5dae3600e4fdc46e3dc0829c4212dce7320ce75e03eff25d0d5d6174b4cbf41f9790ebd1cea09894dfc45fe594b885f526de5f7e18ac7c683b286a7a5a2d5d8738414aa5ecb34e6f8f3b563f8763e84ec7e3893e96646756d4d85dfa8fbfa994acc7a0c7fd3b95e7247a5034a27eccc3f925b2298006d07ecadf53ac86b638e19fbe7d50203010001a345304330120603551d130101ff040830060101ff020100300e0603551d0f0101ff040403020204301d0603551d0e04160414fcec8dcf8f049226e7a9d83f716cd693c392bf1c300d06092a864886f70d01010b0500038201010019c265f94540aed2b6377aaf327bcc8db9419462298b75aa319e6893e0ec0d2bcd2033296e45064f0cfef760354de53c345b16cfcd03733fd5b1059af3e14811feaab8db0a54985b7988e66a7426f6ada91bb646a6e46b6f12114f6c6434a965a375f3e6898f91fddb03b6968755278961477d25b56a72d536810a694457c455c460cd898af951d7d3da5781bcbf609b669a57d31944043d1a113892c8acccd5917786839f4d609598baee8eaeb864e34eb0e85237df1edd05694d92f26b0e0ae87f7cbca86590b048e2377a7f500c8993f9ffd66fbabf62cd09839edcd6ca5cf9e9abb7bb733ed95bd7df00b2f590c5d4523ff9d8b42e80e50546010f01d37a	s2c1p2hetgu.exe

System Time Discovery 1 TTPs 5 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3092	msedge.exe
2308	msedge.exe
4948	msedge.exe
5992	msedge.exe
4032	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 15 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134274986858907120"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{47977EDB-6A65-4298-AC46-86E050FE91CA}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings	s2c1p2hetgu.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{CF769F6E-A2AB-4849-B370-92282A11FC20}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{090BFB2B-DAE0-4E21-9778-FDFA47EDB3F4}	msedge.exe

Modifies system certificate store 2 TTPs 1 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\5054202E5686AB9850347088914896F3A4891DD5	s2c1p2hetgu.exe

Suspicious behavior: EnumeratesProcesses 23 IoCs

pid	Process
868	s2c1p2hetgu.exe
2448	BurgerWorker.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe

Suspicious behavior: LoadsDriver 7 IoCs

pid	Process
656	Process not Found
656	Process not Found
656	Process not Found
656	Process not Found
656	Process not Found
656	Process not Found
656	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs

pid	Process
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe
5688	msedge.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	2224	FortniteBurger.exe
Token: SeDebugPrivilege	868	s2c1p2hetgu.exe
Token: SeDebugPrivilege	2448	BurgerWorker.exe

Suspicious use of FindShellTrayWindow 13 IoCs

pid	Process
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
4260	msedge.exe
4260	msedge.exe
4260	msedge.exe
3484	msedge.exe
3484	msedge.exe
4792	msedge.exe
4792	msedge.exe
5688	msedge.exe
5688	msedge.exe

Suspicious use of SendNotifyMessage 4 IoCs

pid	Process
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe
868	s2c1p2hetgu.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4128	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2224 wrote to memory of 868	2224	FortniteBurger.exe	88
PID 868 wrote to memory of 2448	868	s2c1p2hetgu.exe	89
PID 868 wrote to memory of 4260	868	s2c1p2hetgu.exe	90
PID 4260 wrote to memory of 4020	4260	msedge.exe	91
PID 4260 wrote to memory of 3092	4260	msedge.exe	92
PID 4260 wrote to memory of 2780	4260	msedge.exe	93
PID 4260 wrote to memory of 2780	4260	msedge.exe	93
PID 4260 wrote to memory of 2780	4260	msedge.exe	93
PID 4260 wrote to memory of 4064	4260	msedge.exe	94
PID 4260 wrote to memory of 4064	4260	msedge.exe	94
PID 4260 wrote to memory of 2204	4260	msedge.exe	96
PID 4260 wrote to memory of 2204	4260	msedge.exe	96
PID 4260 wrote to memory of 2032	4260	msedge.exe	97
PID 4260 wrote to memory of 2204	4260	msedge.exe	96
PID 4260 wrote to memory of 2032	4260	msedge.exe	97
PID 4260 wrote to memory of 2032	4260	msedge.exe	97
PID 4260 wrote to memory of 1868	4260	msedge.exe	98
PID 4260 wrote to memory of 1868	4260	msedge.exe	98
PID 4260 wrote to memory of 1868	4260	msedge.exe	98
PID 4260 wrote to memory of 4596	4260	msedge.exe	99
PID 4260 wrote to memory of 4596	4260	msedge.exe	99
PID 4260 wrote to memory of 4596	4260	msedge.exe	99
PID 4260 wrote to memory of 4364	4260	msedge.exe	101
PID 4260 wrote to memory of 4364	4260	msedge.exe	101
PID 4260 wrote to memory of 860	4260	msedge.exe	102
PID 4260 wrote to memory of 860	4260	msedge.exe	102
PID 868 wrote to memory of 3484	868	s2c1p2hetgu.exe	111
PID 3484 wrote to memory of 1484	3484	msedge.exe	112
PID 3484 wrote to memory of 4456	3484	msedge.exe	114
PID 3484 wrote to memory of 2308	3484	msedge.exe	115
PID 3484 wrote to memory of 4456	3484	msedge.exe	114
PID 3484 wrote to memory of 4456	3484	msedge.exe	114
PID 3484 wrote to memory of 4568	3484	msedge.exe	116
PID 3484 wrote to memory of 4568	3484	msedge.exe	116
PID 3484 wrote to memory of 1096	3484	msedge.exe	117
PID 3484 wrote to memory of 716	3484	msedge.exe	118
PID 3484 wrote to memory of 1096	3484	msedge.exe	117
PID 3484 wrote to memory of 1096	3484	msedge.exe	117
PID 3484 wrote to memory of 716	3484	msedge.exe	118
PID 3484 wrote to memory of 716	3484	msedge.exe	118
PID 3484 wrote to memory of 3684	3484	msedge.exe	119
PID 3484 wrote to memory of 3684	3484	msedge.exe	119
PID 3484 wrote to memory of 3772	3484	msedge.exe	120
PID 3484 wrote to memory of 3772	3484	msedge.exe	120
PID 3484 wrote to memory of 540	3484	msedge.exe	122
PID 3484 wrote to memory of 540	3484	msedge.exe	122
PID 3484 wrote to memory of 540	3484	msedge.exe	122
PID 3484 wrote to memory of 4792	3484	msedge.exe	123
PID 4792 wrote to memory of 2024	4792	msedge.exe	124
PID 4792 wrote to memory of 4948	4792	msedge.exe	125
PID 4792 wrote to memory of 1052	4792	msedge.exe	126
PID 4792 wrote to memory of 1052	4792	msedge.exe	126
PID 4792 wrote to memory of 1052	4792	msedge.exe	126
PID 4792 wrote to memory of 3208	4792	msedge.exe	127
PID 4792 wrote to memory of 3208	4792	msedge.exe	127
PID 4792 wrote to memory of 864	4792	msedge.exe	130
PID 4792 wrote to memory of 864	4792	msedge.exe	130
PID 4792 wrote to memory of 4528	4792	msedge.exe	132
PID 4792 wrote to memory of 4528	4792	msedge.exe	132
PID 4792 wrote to memory of 4648	4792	msedge.exe	134
PID 4792 wrote to memory of 2592	4792	msedge.exe	135
PID 4792 wrote to memory of 2592	4792	msedge.exe	135
PID 868 wrote to memory of 3804	868	s2c1p2hetgu.exe	136
PID 4792 wrote to memory of 3468	4792	msedge.exe	137

C:\Users\Admin\AppData\Local\Temp\FortniteBurger.exe
"C:\Users\Admin\AppData\Local\Temp\FortniteBurger.exe"
1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2224
- C:\Users\Admin\AppData\Local\Temp\s2c1p2hetgu.exe
  "C:\Users\Admin\AppData\Local\Temp\s2c1p2hetgu.exe" --delete-old "C:\Users\Admin\AppData\Local\Temp\FortniteBurger.exe"
  2⤵
  - Checks computer location settings
  - Deletes itself
  - Drops startup file
  - Executes dropped EXE
  - Loads dropped DLL
  - Modifies trusted root certificate store through registry
  - Modifies registry class
  - Modifies system certificate store
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:868
- - C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BurgerWorker.exe
    "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BurgerWorker.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:2448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://github.com/Fortnite-Burger/DeadByDaylight-Unlocker-v2/releases/latest
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:4260
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2ec,0x7ffba632c188,0x7ffba632c194,0x7ffba632c1a0
      4⤵
      PID:4020
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,1355897625714775639,5312913170839474309,524288 --field-trial-handle=2360,i,884110319404310058,8322106030755263352,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:3
      4⤵
      System Time Discovery
      PID:3092
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,14246497044979976531,17171075450190951404,262144 --field-trial-handle=2360,i,884110319404310058,8322106030755263352,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
      4⤵
      PID:2780
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,11343597359709267777,17374790562101985659,524288 --field-trial-handle=2360,i,884110319404310058,8322106030755263352,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:8
      4⤵
      PID:4064
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,9411648952422962421,10424880336762936754,2097152 --field-trial-handle=2360,i,884110319404310058,8322106030755263352,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
      4⤵
      PID:2204
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,10609023127230931097,1105920344212571400,2097152 --field-trial-handle=2360,i,884110319404310058,8322106030755263352,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
      4⤵
      PID:2032
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,541249932624597999,15813862143539893409,2097152 --field-trial-handle=2360,i,884110319404310058,8322106030755263352,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
      4⤵
      PID:1868
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,2795018229014528749,15312736172440070737,2097152 --field-trial-handle=2360,i,884110319404310058,8322106030755263352,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:2
      4⤵
      PID:4596
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,11995843217580804856,16723447679688979537,524288 --field-trial-handle=2360,i,884110319404310058,8322106030755263352,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:8
      4⤵
      PID:4364
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,5082092953542745942,6767099119571410613,524288 --field-trial-handle=2360,i,884110319404310058,8322106030755263352,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:8
      4⤵
      PID:860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.gg/ySsrsYdGwx
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:3484
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2e8,0x7ffba632c188,0x7ffba632c194,0x7ffba632c1a0
      4⤵
      PID:1484
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,10328255711306399100,8257015051018472977,262144 --field-trial-handle=2300,i,468858634274255402,2599219769258983118,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
      4⤵
      PID:4456
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,17751671097534709572,2723095502073350118,524288 --field-trial-handle=2300,i,468858634274255402,2599219769258983118,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
      4⤵
      System Time Discovery
      PID:2308
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,3422093429068793830,7020988207619952651,524288 --field-trial-handle=2300,i,468858634274255402,2599219769258983118,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
      4⤵
      PID:4568
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,17422942895568495008,2918032865863207673,2097152 --field-trial-handle=2300,i,468858634274255402,2599219769258983118,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
      4⤵
      PID:1096
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,7214379365754458357,7349883263630116771,2097152 --field-trial-handle=2300,i,468858634274255402,2599219769258983118,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
      4⤵
      PID:716
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,12506693763227988522,16946553269396062725,524288 --field-trial-handle=2300,i,468858634274255402,2599219769258983118,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:8
      4⤵
      PID:3684
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,3114896524056528345,9069348849240205135,524288 --field-trial-handle=2300,i,468858634274255402,2599219769258983118,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:8
      4⤵
      PID:3772
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4980,i,11888391904197698744,960388573098861880,2097152 --field-trial-handle=2300,i,468858634274255402,2599219769258983118,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:1
      4⤵
      PID:540
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
      4⤵
      Checks processor information in registry
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:4792
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x2ac,0x7ffba632c188,0x7ffba632c194,0x7ffba632c1a0
        5⤵
        
        PID:2024
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,1946066863841133066,12369654930416115350,524288 --field-trial-handle=2288,i,8271718071828074610,16154393104183277545,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
        5⤵
        System Time Discovery
        
        PID:4948
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,8961584265683778293,15434843727937739451,262144 --field-trial-handle=2288,i,8271718071828074610,16154393104183277545,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
        5⤵
        
        PID:1052
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2568,i,10965749367690325163,14080444338334491056,524288 --field-trial-handle=2288,i,8271718071828074610,16154393104183277545,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:8
        5⤵
        
        PID:3208
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,1919012847473365417,2811809303876025181,524288 --field-trial-handle=2288,i,8271718071828074610,16154393104183277545,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
        5⤵
        
        PID:864
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,9572969656111438532,16909209359509091862,524288 --field-trial-handle=2288,i,8271718071828074610,16154393104183277545,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
        5⤵
        
        PID:4528
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4708,i,15416575058549975152,3957972244471420798,524288 --field-trial-handle=2288,i,8271718071828074610,16154393104183277545,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:8
        5⤵
        
        PID:4568
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4708,i,15416575058549975152,3957972244471420798,524288 --field-trial-handle=2288,i,8271718071828074610,16154393104183277545,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:8
        5⤵
        
        PID:4648
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4648,i,12559195074193563626,4143646418825197298,524288 --field-trial-handle=2288,i,8271718071828074610,16154393104183277545,262144 --variations-seed-version --mojo-platform-channel-handle=4652 /prefetch:8
        5⤵
        
        PID:2592
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5076,i,7237285221758281239,10808034566254723383,2097152 --field-trial-handle=2288,i,8271718071828074610,16154393104183277545,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:1
        5⤵
        
        PID:3468
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5088,i,7111653988339871976,3566428261385825721,2097152 --field-trial-handle=2288,i,8271718071828074610,16154393104183277545,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:1
        5⤵
        
        PID:1832
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5580,i,10130017116367867505,16432679126195325688,524288 --field-trial-handle=2288,i,8271718071828074610,16154393104183277545,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:8
        5⤵
        
        PID:1840
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,1255402856639896269,9374701239259574886,524288 --field-trial-handle=2288,i,8271718071828074610,16154393104183277545,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:8
        5⤵
        
        PID:4248
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6328,i,8539912850508771695,15634124348362460876,2097152 --field-trial-handle=2288,i,8271718071828074610,16154393104183277545,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:1
        5⤵
        
        PID:2288
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6448,i,9517110939128421422,1115978835278140231,2097152 --field-trial-handle=2288,i,8271718071828074610,16154393104183277545,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:1
        5⤵
        
        PID:2116
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
        5⤵
        
        PID:5756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://fortniteburger.vip/
    3⤵
    PID:3804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://fortniteburger.vip/
    3⤵
    - Checks SCSI registry key(s)
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    PID:5688
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x334,0x7ffba632c188,0x7ffba632c194,0x7ffba632c1a0
      4⤵
      PID:5800
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,4240259379387441366,2524841101004959102,262144 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2
      4⤵
      PID:5984
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,1963695543496623336,8579061531086183661,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:3
      4⤵
      System Time Discovery
      PID:5992
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2524,i,11723079643280349265,9899709544657796007,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
      4⤵
      PID:6052
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,8456188196326574992,7088481085254010062,2097152 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
      4⤵
      PID:364
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,18056726762812801141,9358660516263215180,2097152 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
      4⤵
      PID:2784
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4784,i,8337166926884101381,805931815618350552,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:8
      4⤵
      PID:5464
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4780,i,259382665799929850,12115111976404146562,2097152 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:1
      4⤵
      PID:5504
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4980,i,8136693548423160479,14832693295235277058,2097152 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=3404 /prefetch:1
      4⤵
      PID:3972
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,12850882437858544305,12468348552895127786,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:8
      4⤵
      PID:5160
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,2659897888830402557,15228206514148892855,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
      4⤵
      PID:3284
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,14120860265361766495,13969875535729150916,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
      4⤵
      PID:3396
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,12778699799565322156,14172427743350196595,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
      4⤵
      PID:5748
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,12778699799565322156,14172427743350196595,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
      4⤵
      PID:2044
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,3978906239464517236,1290515778612405595,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:8
      4⤵
      PID:3948
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6424,i,455213426680326606,1530665385154099654,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:8
      4⤵
      PID:5100
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,17214881930329649820,5527221771545216256,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:8
      4⤵
      PID:3516
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,1114504788124081718,18086474960369505555,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:8
      4⤵
      PID:3208
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6812,i,1764612290740197620,10038108322823470591,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:8
      4⤵
      PID:5160
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6940,i,18200393229190507323,1979198523942873076,2097152 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:1
      4⤵
      PID:5604
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6360,i,7163849588289339485,17887949614557980365,2097152 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=6852 /prefetch:1
      4⤵
      PID:4828
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4632,i,13260858246491661539,7855281738569554852,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:8
      4⤵
      PID:2760
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,16260205016096747690,15451980226910150419,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:8
      4⤵
      PID:1272
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,5794016172107328562,14266688839138610577,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:8
      4⤵
      PID:1664
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6820,i,4829193429674260726,16729974502759700820,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:8
      4⤵
      PID:5768
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,14860748201930395478,5640686124010241400,524288 --field-trial-handle=2240,i,11254738420406946561,18412233228687490384,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:8
      4⤵
      PID:3312
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
      4⤵
      Checks processor information in registry
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      PID:5164
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffba632c188,0x7ffba632c194,0x7ffba632c1a0
        5⤵
        
        PID:1192
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,14975820326293309779,8199464979785800402,524288 --field-trial-handle=2340,i,16913325041196983694,9486126699187050147,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:3
        5⤵
        System Time Discovery
        
        PID:4032
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,4861524177828249529,14950104305144165136,262144 --field-trial-handle=2340,i,16913325041196983694,9486126699187050147,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
        5⤵
        
        PID:864
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2456,i,1837146704786975577,10428435910423327068,524288 --field-trial-handle=2340,i,16913325041196983694,9486126699187050147,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:8
        5⤵
        
        PID:2132
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,2079158320183039802,12603167985652039851,524288 --field-trial-handle=2340,i,16913325041196983694,9486126699187050147,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
        5⤵
        
        PID:5404
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,2079158320183039802,12603167985652039851,524288 --field-trial-handle=2340,i,16913325041196983694,9486126699187050147,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
        5⤵
        
        PID:180
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4796,i,3725906078370542600,1494064807177807512,524288 --field-trial-handle=2340,i,16913325041196983694,9486126699187050147,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:8
        5⤵
        
        PID:3960
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3312,i,8990271936304698626,2706388390840424154,524288 --field-trial-handle=2340,i,16913325041196983694,9486126699187050147,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
        5⤵
        
        PID:4996
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,2144958545284352295,14521916024860182009,524288 --field-trial-handle=2340,i,16913325041196983694,9486126699187050147,262144 --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:8
        5⤵
        
        PID:5540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.gg/ySsrsYdGwx
    3⤵
    PID:5292

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3332

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3488

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2400

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1868

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2400

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1508

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:4128

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

SkinsPerks.json

Path C:\Users\Admin\AppData\Local\FortniteBurger\Configs\Profiles\SkinsPerks.json
Size 686KB
SHA256 4827e4d1eabafbe9a1ef139decce03310de8652e973435df2a91266447c998d9
MD5 cfba02739683448316c45681275cacb2
SHA1 d468a92246f7f7435360be431bf86c6267f04e91
SHA512 029b60208eaf9cd9a3b2fca18a627a738f384a486d14932cc3837bebab2914e19ef7de939408dff3adc1dc6d71372eaf829b561e4806d6b560706563ec54345d
SSDEEP 3072:RBaT82QtULqR1POFBa7B4/mzFOjf6k0giX8WJF:vF
TLSH
T1F7E44D3E91E68C6A443E167907697F46E900536FA388780377FE965D8F32381690FB27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkinsWithItems.json

Path C:\Users\Admin\AppData\Local\FortniteBurger\Configs\Profiles\SkinsWithItems.json
Size 765KB
SHA256 db92ded71700960d31174508d754ac5fe217c638f90577a1a14d876ce3cfe5f8
MD5 7b76ac1636ca110ccad395edfac47667
SHA1 ce520393a019a6e41cbbb102eda74b22936182d6
SHA512 6a8033b75b9ffcbfe61203465761c8dffce8fdb046a06b255585729683afa391f1aa2aee0df586f8e7fe3a41940a73f7dacb9c4bd393f89d3c2dbe2cf6295f04
SSDEEP 6144:7KMlki+LW59oHvbGRRixteP3HTxvhx0ihrOnBSleL7emF:7KMlki+LW59oHvbGRRirX
TLSH
T172F4597D02F298BAA0356DCB575BFF84C561641EF340BC0276CBD19AA2066DA841F37E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 708e876707839da9f639c204692b3c7a035a923d8480bfb6c7765a2198bb38e6
MD5 71fae70e2f75e14b7fc750c2504962a8
SHA1 dca44375c034bad5f03d4e7ff5bd98f142aeddb7
SHA512 0bac6462d77f39f1e98fa8981fba5b3b17f08e4847d969397284b28faa95d662242739bcc7a1f9ad6a62dd9fdeaad5c0e4263a0673b24d45eecbbbb99c0fd5db
TLSH
T15AD0A722791D7495E32F42359522D21056691073A6625305B314CC1D99784C456D1BD6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 edb1c1a8d892ea6893bcaf421cec652fbb4f3da16cebb6562759a6ba51259dd1
MD5 6280bb3ad61569601b972f9d1c51bfe6
SHA1 3cc326e2ab18c81f7bdb8dbc6c342e51f9f76385
SHA512 e231b3110123fa39df8c167d415c3d5c108f71993aecdb74e535f69ddd9d6e9519d97ffc3f84456f90e23140d9da30a785edfb38f59beb438d8d386d3ffaa944
TLSH
T1B3D0A722791D7495E32F42359522D210666910B3A6625305B314CC1D99784C456D1BD6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4c85fe8c7365f4a9f8417187bfd90209a752c9384779d74f2f887004d09593f8
MD5 45407d75f96fbce1a639aa4922ac877d
SHA1 aaf045c87c06f704cb1a225ce3856af1cc1ced1c
SHA512 7ef299cb1788439382b732cba2b9301ccbc41d95012ba1e7b0f22febe977dc674486cb789710dcad9c37c4218e38aa11f169796ce928873e14f41eb7e07bd5ed
TLSH
T1B3D0A76475397896D23E10355431D210F6655063622582457210880D9D7C8855BD57A6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2dc82326151b9d784ed76de9ee273fcf7aeaca031b3010217df72df10170386e
MD5 92a3e024cbd4b259ba235ebb660036b4
SHA1 6c253ba2e6b491f2084fc6e6dc5774da75ad9b0c
SHA512 f5f424c156942fc620aba105213b91212ba9dffb6d99e5a04a0088bf12dcf5a01ae6ee7b255f631a12c00f2a4ffd134f11761095d4de75aa42a4d7434e041255
TLSH
T144D0A76475297996D23E10355430D210F6655063B22582457210880D9D7C8855BD67A6
MD5 SHA1 SHA512 TLSH

Submit Download

1800a79f-b6b6-424c-9daf-7031a6ff2de2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1800a79f-b6b6-424c-9daf-7031a6ff2de2.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 5KB
SHA256 a0f612370f14405c43e70df0b523608608c7308b519179fba406bdcf51f8c3cf
MD5 a09cd1ae598fca78b8d608d626030cf1
SHA1 750d1bb593a90c1b2ec3130a3979cbe429e96888
SHA512 fecdf85598442363c0fbb6b4aadc31ae752888457deb688a274ddc81ecd10243c250fc1e80b7cfd3bd1e9c557082e0e6b39c8af89ed56c26043c672711737f1d
SSDEEP 96:MBQ4olUTMufs2Mk54LJ+a41whB1vauRbF6D3bl+c8b:MBbo8Mufs2o9BNakID3b0b
TLSH
T128C1F82607A9E6E4F720C2B0ADF28E2BB9304C68785F6D534DE86C72F92A714475742D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 3d700707856ce805a025580893c9b903da150e26922d69df443ed1eb81534f10
MD5 96b06a08a2b17b8bdc95452e7af73154
SHA1 85105ab0cb915b94bd3a57c58d9873785ff7dae0
SHA512 05379b7770e19a0b20a4d88f58183b6946f9ae7a17be1e7eb865921aac24a1403487e82d09ecb8c54ac7ce0e25dcabee9da358637661285312081937ed4a263d
SSDEEP 96:OE8nJ39dLrDrA521CwIs+ds0jfsmsTqYUPJcP:Z8nxLu2QzsGsmsTT0cP
TLSH
T1F7B1D62407AAE6E4F714C2B199E25E2BB8708C68784F7D531CD86C72F92AB29475740C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 04d589d0206c97fb82be1e01b5e905a06f7ec44afce542c78ddcb5600043d331
MD5 b081f81e8123f25da0064a6d23ae0402
SHA1 04d9a4a1b56d67cf1333a5a02b74057b778809fd
SHA512 8a60ddf8cb9e4f2ff891a11cb120fc8e819791919106f592219010e43250a6eda6dcef653876b67c846cd2f9a1a2e28d3664f1a925a981a80d391b39593df824
SSDEEP 96:G1W+nDS+QeQOzsHtT0pn+KqDmYnxpiVYfDJvWl9Q:G5pzKx9KqDmYn/DfDJv+Q
TLSH
T136C1082A07F9E6E4F720C2B0ADF28E2BB9304C68785F6D4349E86C72F929714435742D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 9567fca05c1939d5faa9c4a2e05662e7c9c4281b4903b28c334986644cb8f8d6
MD5 26253fa2a8839e4bde2e500827cf6aa0
SHA1 dbecf15689b156439ed59e1ba6b4ab6db6ddfc82
SHA512 1a723eac23e4a35d56a9405a94aecd0c2a00054846bdfe52c2cdf9652b8e96aa6c8168a7879c5ee5419f155fccaa2c48046a17dd3b1f84de99547e2b8e976b86
SSDEEP 96:aZO2+89/HkkP66a1k5+YiVZ8f6J9wprAk12lDJ+Zr:mB9skPtaguZM6J9S54Dw9
TLSH
T16EC1082607B9E6E4F720C2B0ADF28E2BB9304C68784F6D434DE86C72F92A714475742D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 730c972be72b2b4203b9b2b8e24f5c53f5e9d716b32caabca2b11f432e436e5f
MD5 388c7f7ac5d515821ec97fc1fedbab31
SHA1 1a8cb70e59df45c5983806ae127635bc8f1ad65e
SHA512 227bf2dafa3466e5405dbbaeca01b5eba546b83aa90b545f46bc70cce62304a8f8fa2a52e42bfb2142a723645cf116dc049539f59085653aa6acc9028e3cc067
SSDEEP 96:gP6FB695GlEbdHufrfM854FJGGaB1919h1xauRZF6DqVl+R8Y:XBkGOHufrf8khfa6IDqVbY
TLSH
T19DD13A260BE9E6E4FB24C2B05DF25E2BBD708C68744F7D4349E86C71F969764071281D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58b774.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b774.TMP
Size 3KB
SHA256 cd9d7db6fb829c02dc3e30e8676c540ba98f33b119bd65c848d88dc5a1c471b4
MD5 40715fa384c3f4becc53b0e6176d59b3
SHA1 99c732428dd1c2aabc6dce72b4d248d2edabafd4
SHA512 9635b12d1f0541768920c8bd474b0e50334c36fe8d4a095fcb5603c2f11644d5986a5387046860509bb9ac7b8eb590b069aaf9d39439cfe8e841696c7f819ee8
TLSH
T1C061D52909F634B8F761C23095D21637FD718DBC795F9E5104EC6C72F90EB290756908
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 62cadf689f07e80b87677ba6b2e0cbf53f029f7f76be4e7af93f5b23c0be44bb
MD5 4156813c5e53cebf3846f181513427e6
SHA1 e0ade8c155371efa379c8d818e5ac92f1a106b00
SHA512 f816b7d8ebc5b2f5089d091bda7dae363c58612f27f5f219fe257c5b138981a2b134575823515f1c78dc17a09edcfab41d76c4e5a0d3835f930f581c38180a97
TLSH
T115415AF7C3E4956D8A0156F4AB14AE1FCF2C0914431C3C6AC5E46E1B93E39B1E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e47eb0eff1455e103187a74096ab1763fa699c3c63056c2d64b0f845b50ec534
MD5 69efa2a4574a419092f8c53e72b4f8da
SHA1 f8cbcf3c87104e3d265e90aef2434a1ad825b152
SHA512 eeaf38905d34a28e14745d9645757f2bdaaa40479bc3e8a63560612366aa523a6a5785d8e065ecd58f7bcdeef3ee3868146874ddad90085bf62bf587654b6fc2
TLSH
T1933188F7C3E5956E8A0196F0AA04AE1BCF2C0615831C3C6AC5E4BE1B93E3971E10165F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 87034d5873b8c4a5f3f6f169b0e0f63559021586522c71c6284e43b6a6eb9a88
MD5 1618b0425f074a7e87941e59096009d8
SHA1 802a8e26d327a4e7f35c84ff0c18f1221ee48df7
SHA512 b14b794ac8e8998ce37eb247321658232ef17193b217295a153d86c05e3f0de32ab920e01a25202e1805aebb6dbc36d33c309ec309c9d30fa6ca553e1b866328
SSDEEP 48:YALlr3SeBr3nofROxQroL7C8OwgyOiCsDzBmtmnEsAFmkJzsQawEsdrvsnrKsBfS:D7cZM7bzBmtmnAmqawxSz9zpWyGUauM
TLSH
T19C918BF7C2E8866E891152F0BB186E1EDE2C0954431C3C6AC5E9AF4F97F25B0E14164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 a3db894102df63abb95b4fd3c88233a6cf4d146a3408f8f11388e0f05f963141
MD5 f651726402598f74202e27ee30b6c9ac
SHA1 f17aa6cfc464210e9750cea7885920f3dd20dd41
SHA512 aab10a7c9c108289a6760d42bf911e9d7e94908351acc5e7578df4723e4ec41f9a12f461c287e31dc5e302a65052e4c550bb61a98511423cdbe69cc91ddc3ad4
TLSH
T1A6515CF7C3E8866E8A0195F4BB186E1ACF6C0954431C3C6BC5E5AE1F97F29B0E14054E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 849B
SHA256 4fe3b0a3136835219c50fa65e37966a57611be89966bb33073e3436084ab3fc9
MD5 8295f118ad78ddab06e7917e191a7ea9
SHA1 330827d9bac832f8ac2c851bc62a9da4c9e60d85
SHA512 863b83dd2a0761c6cfb825d0aad98a5eb4379b5dcf6b158ab13d7b31d072a8c3ff67dfcee61e0fea36fed2b02fa08cd0c12294262e542bf4eee65aaac8bba0ee
TLSH
T142016BA3C4FDF82B107A497F2D84FD4A2DB9A835105158F0CB59C22CA0950F74B5281A
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 853B
SHA256 9089549635ecd3e15b28416216279988f44a5daf286c9f06ac14fd9efe769e8e
MD5 7a6879f67ff9d221364311e3d2bcf004
SHA1 440b7af7c15156635bc0fce4eb1fdea70f7df047
SHA512 cc9e612f91e64a5a35e275d1745afedd1a7b03d9438832bbad953d535fad2f086797d280aca3ed205b2a75ff5ade7f5469134c9ce27791c4680f7c04f8efb19c
TLSH
T100016BA3C4BEF82B1069487F2D84FD0A2EB9E835105168F0CB59C22CA1950F74B5252A
MD5 SHA1 SHA512 TLSH

Submit Download

dc9975f4-2c12-4496-a840-898a741fa7a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\dc9975f4-2c12-4496-a840-898a741fa7a2.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 1beec889e7aa18a6cd462a10cce24edc88d5568c2294540b907326495689c606
MD5 8c3c9aa8ea1dd6079bebd0697b150b46
SHA1 23994de5d744e29cb4c687f0217eb360b58f31bb
SHA512 638f06ba0fa97bd82583b0a34731f83a8b955865d92fc922d60e4810b5de4cdb3449331d16b9c6ef4dd51df630aa909eb287ea98222889f76b7eeba3277f0acc
SSDEEP 192:sxZuQUnBR5yM/jK1hl8ljG/fMslWpVN5AICkdpnw3HW6+WNmLUCXvfgdAn/YnxN2:sxZwnB6IG/fMslWvNyYiHbmoCwC/0lI
TLSH
T14562D812A63459BBCCDBD21DFA567B53D6F51562A6D00E44AAFC8E0C01E7AEC230381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 88f7150bc80aed34b14a68353f09f8bb21cb09d66ee709d7cef23e38bc02f18b
MD5 87a75c04196a19e8dbe7aee2890d584a
SHA1 3e31e0e0e63d185716361c83ef355981fc0105d7
SHA512 156943634d028c621ca3a88ae4682360b92d57c1e2408422679eac030d7cab46c0e43b029f9a80c183e29eb9cad762f249a9580bccc3b2e14e6a149b748fb959
SSDEEP 384:sxZwntaqG/fMsbWvNyf5jHbmoCn2i/0KCO:sitLG/fbYNyZHbmoCD0KT
TLSH
T1EC72EA17A63449BB8CDBD21DF956BB53D6F4156296904E4499FC8E0C02E7BEC630382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 269da4475584d4fe82aba3787daa92787e69f5e0cd0f296ed0611bc42f8ddfb0
MD5 4aee588b9377a48d2ea1851f97592d88
SHA1 ab6037ff925012c5e2db94cf0dfb1e9705a1acab
SHA512 f2bb6d28ff4cd425687c5796add0f6b2922981bf0e9afb93eadbdab081ee8a6b73b436ca897e3b35de7ac7f0c84df1fc850c3ebd0dd1783bebafd92bfa444af7
SSDEEP 192:sxZuQUntR5yM/jK1Wl8/jG/fMs6EWpVN5AbCkdpEj93HW6+WNmLUClIvfgS7gdAY:sxZwntDqG/fMsnWvNyRkHbmoCnNC/DlO
TLSH
T19A72C916663459BBCCDBD21DFA56BB63D6F41562E6900E449AFC8E0C01E7AEC6203C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 2181aeac44cd847e6661e6f87f8881c3b18da823a267b229ed594bd34f36d21b
MD5 c4be8600ec0ae5296a976235b372f6b4
SHA1 e817f87fe5752e805bf4f5dff8474fbfff35f14f
SHA512 ae2b6a974862960e00da4bde79e03f418bfb70b7c8b52f8a167ca93afcaf7d7a7e6013dbbff9828b80fdc5a0cbf10c6810140157deea3ab64200327cc614c3ee
SSDEEP 768:JwUZYGMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVgeLlPZ4RfroVg0C:JwUZYGMWvg0Pou1jaLeLZmRMlC
TLSH
T12BE20A2F280CCB7E4F844E5DEC266F963DD801CB5A584D5447EA894C02C77EF512B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 c8ab289ceaeb18c219627792052c5c6bec0086e6ef85577b1b0670472d2af2e5
MD5 2214c159a34c4f1fa04d9de5b84a5e79
SHA1 e80029b4b13ad1fe90cf5cb542e364d9a5c80fe2
SHA512 b731a18664a3a19b4a808bf93ed3a3592cd587ef801a40068da9b0e0ad6b30669b53d6723b64b03cc41a3e730b7f53a2aac557cd70bb1737253d0aa7686a7a4b
TLSH
T1ECD09707F0922094EF6B0B8B1A6230EA87243CC864D0844DF1833A6DC470B42D303ED2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 4381cce5e9bcf584cdb5bb2dcd21d596113c9bb6425c50f120557edc42450579
MD5 712646e70b1fb6009bffff92657f8896
SHA1 2f6ac66ff5e6e62c0eda20491091c358b18668fc
SHA512 6d25f3b208810f3e9db5d1bc01b7ebe4e761b85ad4194968eb756b3703f38768ce5b48701ced218b2880673a4a40f4258b3741e4670e38486183368e4fc00394
TLSH
T1C0D09707B0852094AFAF0F8B1A6230B687103CC860E8844DF1830A6DC850B42D303FD2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe599acf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe599acf.TMP
Size 138B
SHA256 dc765cf4c06f56a7c32609795b6df827b770307460039b00d358ba5b6688c838
MD5 5a6e09efa6b3d9c1cc4c94707633f837
SHA1 a033ac4229ad284044749dc9c7241632c078ed46
SHA512 6beba8abcc540e0e49353777fd36be7a31c99cc7960f3cb5b18e409462a20cbef21e509655c4efd1d656d91db5ab488f7a40989df6220327ac764d768647abff
TLSH
T18DC02BA3B08115518F2406840633209C43483DCC89CAC44DE103382C1070E13F303EE1
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 d6da837e48e7badf7c6972a25ff9f2629e09fb7da4c105817bd54125b7a146ab
MD5 5e68eb6c9d2b04142b17082f8cc34c37
SHA1 dd0375064e5f5adee4db6a30aa2c4dec18e6d880
SHA512 0ea6641da823e25abce397730c40637822d1030effd950e312498f3888fd6dc4cfe352b434a870b0f7bede6237b8625f07df194c7b84f591cc39aee1b8e25d96
SSDEEP 96:KA1eK2A8e8KziWa+EKLqUy8K7iSiKkKf6dinOiUN:EWDXgfn4inOiUN
TLSH
T14FD1148270BAC2513D7F2B088794C7568E8273637418E52B7BAC44B65E27E249DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

db469a63-22fd-4de2-89d4-7d85da1e6191.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\db469a63-22fd-4de2-89d4-7d85da1e6191.tmp
Size 13KB
SHA256 2d2ec801fa9a9cc2b9662679d87d9e7854da88d6aabb559026b16ad736d3d325
MD5 a1af122f20f3a02fccfd94e9e52eb4a6
SHA1 2df7e366284b2a7b0e5ef79001b2746033af933b
SHA512 59146d1fe080f8914b1cc3946297a45d8c509d640a48c62e01c6dd544fd1b3e19bd74869ce613d0e0de73fd673a2302ae9762ffd60b2e61ae80138dd89aeb9b9
SSDEEP 192:sxZmR5yM/jK1Ml8hjG/fMs5WpVx6/TIEdpq3HW6+WN98An/YndNwAHIgEJ:sxZmdsG/fMs5WvxcfAHb5/YdI
TLSH
T19052E9126A3459BBCCDBD21DFA567F53D6F50423A6901E449AFC8A1C01E7AEC2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

faa611aa-7ba1-4510-b4e4-8700f4ffde0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\faa611aa-7ba1-4510-b4e4-8700f4ffde0f.tmp
Size 414B
SHA256 c5be3050fd476ab90b16334723adf68eebe53d8aee239bf50c14a596cb5943ce
MD5 4b2a1da78c035aaaeee9e9bec920ded7
SHA1 e571d8b9efdcdf53baf19687e67bf13a2a112283
SHA512 2135dd7fcc9a8734e62b221fb0d173995e69493d45d380fdc378d298935008a40c7e1a349ee39a673789f4e48f182c256203184e01d464164a12cf8921d8d6cb
TLSH
T1BCE02BAAC9319C6758F98B596058474AFB5413162B41694FB63CC24CCFB0676458581C
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 466fe319fc11e07e284b3bd8df13053fcb0d6fd5ab4d6602c8baecfd0e87ddde
MD5 a82b5e8ef1e0d6c9b754b212c0f5adc2
SHA1 28c2ef5508b05a3de13264dabbdf1c7eed455f00
SHA512 f6ba2c911a14fd398bff4146718a9b66026a1537a0cf669b74c0b027ffa95656a1910e173950e23d697519b9087538659d414985def4fd5e107a3b994ac3c210
SSDEEP 384:zusNYyIHOT1uwzX5od+s8YxiXP+rAStiI1sRkK4i41am3c:qPN4OlaPjS+eK4i41ams
TLSH
T1288208B1D4A5ACE704D6E4C8AA46F6136DF8203789885E4CD6FC7B38309F5FC2716826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4ad7a0d99ed85dd7c18a20f794ab5d0b7d23a42f7bf0e343629b7afc82eba525
MD5 67aa90be51396445db534466f6317409
SHA1 b96e4ed41f1db10e7f2654466e2711e5f4128343
SHA512 a25c2c0667573537bb4a7363de6273b18ea720a51bf8bbda7eca32d62876118ae90d991587a9644e049820b1ac6ea5d61e46db8008cab406ef124f79696d6eb9
SSDEEP 384:ze3sNvyIHOTc5wzX5od+s8YxiX7FeA8LBNiRkK4i41a23lF7IzI:63O34Ola7f82eK4i41a2p
TLSH
T1858208B1D4A6ACE708D6E4C8AA46F6136DF41037C9884E4CD6FC7B39309F5F92716826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 96357e2b04bd0adc773c10b9764b25afafae246792bda12c7b1353b1b3bfd7df
MD5 a87e44afb1b5a407bab279f382359855
SHA1 a4bc26a47e476627351aa40b2d6c327eb155e94a
SHA512 3c698d48d08c31ecf224a49e021177bd1a1a899e5a5013b156b1d2b4a0c514204bbc6196f955886684ba28ea46ae2523b66a3fa9bac5e226c4836868a68763a5
SSDEEP 384:nttNn/s3n9Sk3sNLSIHOTcedzX5od+s8YxiX9G+3lF7Iz5e:tj+9V3QQVOla9G+Oe
TLSH
T1B9725C3668296CA39DE3D949F94F3A175FF8106B96C41E80C9EC1F1D00C729C0317E2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 59b35d2298731c2ffc375a1e343bb5350f5ea37b4c3feaefa6b3fada7efe3689
MD5 548890fe4edd77e69bfddd550735ae0a
SHA1 d560d1e1231e87708e67f6e8b6375fbb5619e9b4
SHA512 85441c0deca1d93072754dc22f6bba04ed21eb6b0056c5293cba253c31203db97edc45123632f5abbfd86b929f5bebacc92b46040b719084888330e4c3cfed2f
SSDEEP 384:n6tNn/s3n9SisNLSIHOTRD1dzX5od+s8YxiXK65AS9NoOkK4i41auu3lF7Iz5e:6j+9RQ61VOlaKxSErK4i41atOe
TLSH
T1AFA24BB1D4A66CE708D2E4C8AA46F6126DF810378A885E0CD6FC7B3D309F6F81716526
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 eec4a47ea748ff00ead7970d0f6f12291bfab51d69f0ecfadc0e367c1129d212
MD5 9710db422318e343fb2e264c463838e0
SHA1 46095b74017ca8bbd2830a21d7766fd8ae13f2e0
SHA512 752a6b9e1abd1682b78491aec15418a6633f4f1cf2b27d1769eb4f72ede1d16fa1d8358f105966e2ce3877d40d72b04720e23a3736c972e5257f0b539f5a4d37
SSDEEP 192:UONh61AWQmiUyY7f/GX5Obd+jgjzorYyRNMiX1PjJ7qoWU6:UONh6Vn/GX5od+s8YxiXf+U6
TLSH
T1FF12E731A468EC675DD2F559B48B32939EE4207BEE856F80D2EC1F1C009769C275BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 adf27f7adb0bdf4a00e64a2736e73fde0ae9dc5fc6c3d8a26c57532b4466e5a2
MD5 886a39a86abdc93715975369e0380b91
SHA1 ac3b69b0b4f2c8d564576df8a30d259c98c3a7b6
SHA512 71f1e74e9871a4122d56bf53b8a798cd63ff6e996046ddb01a6b09b1055ae7867fc7af9419c008afe400901f2184fa380dcd31211524b7c7051e194a920a5201
SSDEEP 384:natNn/s3n9SQsN7ZIHOT9tG2zX5od+s8YxiXjcOASN/isPEMkKJ1wRl23lF7Iz5e:aj+9Ln+GqOlajgSkLRKJ1wL2Oe
TLSH
T1C8B239B294A56CE708D2D4C8AA06F5162DF8413BC6885E4CD2FD7B3E319F5FC531642A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a772b695c95dea80f4271768cf18b229dcd546394a0acf5ffc6b6b6785a98b15
MD5 6f3baf3029207bac3253b413dbe88ac1
SHA1 14166e4273ef6c8d9595c85f290d1f61397c4ee6
SHA512 85786bca588a7ffa48b13a37205c69cdaf45b20aafb24233d4ae5794f466632b9d2b29d433475e48f06c50c98d048ce8a5dde2220349113a93eafedeab56f069
SSDEEP 192:yONn61VWQmiUyDfgGX5Obd+jgjzorYyRNF/aV3PmU6:yONn6WCgGX5od+s8YBRmU6
TLSH
T17E02C836A9686CBB8EE3AE49B48737135FD4106BEA956F80D6EC1F1C00D765C2346837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 4215ada43f233bf32f66d2d9c9f48cd19de1d20e50e6c7de2a4e149bd6e8c746
MD5 8b4d9ccf20c53fb4c9656fe00c2e72d5
SHA1 b6ff8735d88b48cb747dfa691219ff7339433da4
SHA512 50a1a3f2c67c08f6f3022d4334a4ef31c609943862153fcb41bc35021fa57a8927fa87de6901e0852201384aa0f71f5ea96ec4b54877ecb1cd04f84ae6976b59
SSDEEP 384:zusNYyIHOT11wzX5od+s8YxiXP+rAStiI1sRkK4i41am3c:qPG4OlaPjS+eK4i41ams
TLSH
T16F8207B1D4A5ACE704D6E4C8AA46F6136DF8203789885E4CD6FC7B38309F5FC2716826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 5cd2b6b11b6428a5b65be9ce54359c8e705795272106cb57cdd9fe4f9d8c6edc
MD5 03c25192c46a6b9bcf4cba5ffd0e6d3b
SHA1 71e370eae25aa74742b901ea6b74920e21a166a8
SHA512 e5b614abd1b9ab371183b561d000d7376cf2c5d2d18772520f281ab25728328792c71e63e3185c67e1cce206e109c7321f35f1e6df13405899d0160bbe318ed2
SSDEEP 384:ze3sNLyIHOTcewzX5od+s8YxiXZG+3lF7IzI:63aQ4OlaZG+p
TLSH
T1EB522A366868ACA39EE3E959F55B76135FF8106BDA841E80D9EC1F0D008729D130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 3654ea79b71604b6ced7b2bcf32ab219d31db3dabd1b5ef56ddc9cd9901c421b
MD5 927389cf2cb91f23f140c26097de7b10
SHA1 72739d87d4ea93259ac373819265db8209ab8a86
SHA512 055689f11f0c1438cba3b9076531719a76bcce1236001d61f3e5c52c8070a13cc9502835d8e07905ad5e7b69965e0db8b868f5baa7d4d69788e914affb60a58d
SSDEEP 384:nvtNn/s3n9SQsNOEIHOT9ZdzX5od+s8YxiXjbW3lF7Iz5e:vj+9LrIVOlajbWOe
TLSH
T175826C3668296CA39ED3DA89F54B3A079FF8106B96C41E84D9EC1F0D00C779C1317E2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 8df75faf6b97d5646cc0edec141bf9ac8f8a2c96298018449d1c38ee0940c061
MD5 7e542cb02a4ecb11d4edb333e19e8340
SHA1 26a763532bb334e46ca84c4fe7353f6eccc73abc
SHA512 e8e075d3a79e94ad229b97ae131807fb4ac3e5a95528328296443e6cce8e9ebab3136ccefdbccc5c60e97b5fd847b70a38d51bacf47abbe1d5eb12080ef44098
SSDEEP 384:n6tNn/s3n9SQsNOEIHOT9ZdzX5od+s8YxiXjbW3lF7Iz5e:6j+9LrIVOlajbWOe
TLSH
T199826D3658296CA39ED3DA89F94B3A079FF8116B96C01E84D9EC1F0D01C779C1317E2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 46fe04d6f2dc7ed4584c6ab14fc50f5d0bdc9dff7e92eb834cd1ad42b3fc0a75
MD5 7f5418b1c799aec0829d48dbae31b09e
SHA1 f6388886aa7b30081b74bf0e1111c34f410ac73a
SHA512 fe03c329bf2e0d1ee480c72fdcd2b09b289734282574d090fe973a0efb8d2f45dcf01d0f8f7e2d10c6cc492c41eb4ca840ed59a0b84a9aca28c662ac5029ea5a
SSDEEP 384:zusNvyIHOT1twzX5od+s8YxiXF63lF7IzH:qMe4OlaF6e
TLSH
T171422A36A828AC675DE7E549F94B36135EF85067DE842F80D5EC2F0C01DB29C130BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 13KB
SHA256 f9f60ba675b6f845dd07d23852d46b96e27d4d83126b282adcfaa1ce5469a7f9
MD5 64876615e70c23d3db41c628800dee67
SHA1 d008eed6049d86d3e1d0f5f7bb40257a970a3b62
SHA512 a5d93942cf2cd508a98bcedcbf0ea088a04c542af17e69428c90c9ffa55dbdb28ab4a58aba6784c472d666dc3d191ccbc34e91498fd745509f1c54765b896aae
SSDEEP 384:ze3sNLSIHOTcewzX5od+s8YxiXZG+3lF7Iz5z:63QQ4OlaZG+Oz
TLSH
T1FE522B366868AC639AE3E949F55F76135FF8106BDA841F80D9EC1F1D008769D130BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

17060cde-7c32-4ee5-bf8d-70419bb572c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\17060cde-7c32-4ee5-bf8d-70419bb572c2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

BurgerWorker.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BurgerWorker\KViFU+Z1eTRgb8PSk+++KuLKmRQ4+cU=\BurgerWorker.dll
Size 20KB
SHA256 2182f4b0a54ad92fd9f20af5e776424f94918e54d21b8f75184fb12099bd3a85
MD5 2ca23190c3eaed6a103badf7993b0143
SHA1 6e42329a7c521f11743bbf65f8b0623984c3518b
SHA512 7170d15642892b3df70a13da7a43b976f9db1da9b07828d05441ee03f61cd7154f5665ba879f641fe5b1b7030e47fee79edbdeee836db73da51cd948002b3817
SSDEEP 384:gtVB/wFYS4IqptYcFwVc03KFc78SB0r2OnA/WkSFbOxxxxxxxxxxxxxxxxxxxxxB:gtbyP4IetYcFwVc6KF5SX7
TLSH
T13B92F705D7844215FDB142785AB38D6B8F3BFE166961A7DF344CB1AB2F723C282A3851
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NetDiscordRpc.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BurgerWorker\KViFU+Z1eTRgb8PSk+++KuLKmRQ4+cU=\NetDiscordRpc.dll
Size 178KB
SHA256 0e569f2b81e4b795d323f456a3e76e7b733c12ca840ac353de85417d80b12667
MD5 1f5c8c7386892eea3a6aa70ad7aeace8
SHA1 601aa25bafbda622aedff9931437c75b984e03a8
SHA512 08576ef29f224875c04930be1a034a1606e2018432fbbd1a5ad89ced44743ed1e9d579054c164792635218010624fbc1f37e7549f7cf1480b07c3f0b74d297c3
SSDEEP 3072:HxJC4kXsNmaK0lIl26o0VtGs7i8Y2AIH104i2W9+mZddWs7fSB:MYm6OE2AIi4i2u+mTdTjm
TLSH
T15304271593E84506F6BF977C94B3C20187B7B84A6721C3CB4664A5892F57BC2BE32732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Newtonsoft.Json.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BurgerWorker\KViFU+Z1eTRgb8PSk+++KuLKmRQ4+cU=\Newtonsoft.Json.dll
Size 1.8MB
SHA256 c69ec2bb5e2275a3c7b5a276a310ac0ca59c1eef33aae345f8586e2921f72006
MD5 e56ff0ce43155049e4460bc41803e9e0
SHA1 b6f4fb5f94c69dc99b14e9c40ee329d6323b3a1e
SHA512 4c8d131c8118626b52a6641afe122b3af743f013d9b41b84df5f33a01ccd468e1cb405a704d305e88d073bb13cc3d6b0671c12bf87720899aa3c55af0c9698d7
SSDEEP 24576:N99C8jMjYpHiFSsqeyQucw/PuFBG4ZjPSduVNTpm7PppZCadycB7jW5JMta1Ck3Q:N99CjFSss6xAAcB7jAtBr
TLSH
T161858D06E3D8CB01E9AF56BD9D325406C6F1F15B2361D6CB1404E9842F57BC3AB363AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\AutoUpdater.NET.dll
Size 248KB
SHA256 91f8f0038d5f6597e32229353116dbcbbfa8b1991a22321af4ca56c86de69e09
MD5 272e9904ebf29859c9dcf549320661f5
SHA1 7ab1613570303aaa1bc60603a7f74aca68d496c3
SHA512 26e4d98467df60f5956968b8d11cc081921ba1292235b98167f83b6173e43520f57b05f3153c2f8a33e6ebc530dbc5300162b14fc8001af9d762da7e70936098
SSDEEP 6144:Hl+tHMXIsl0eG2kBiJysWUL06jTwzrm7:UHMXIsl0eG2kBizC6jTcr
TLSH
T18F443A02FFE5C325C1663AF5983581A107357E96A900CA6A34B8764E4F33267CF6276F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BCMakeCert.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\BCMakeCert.dll
Size 600KB
SHA256 93ba40952f4be52de0c6afb0d66e8c306489edc682ad4515fb12cac8bee2630e
MD5 404918448fcc85fc40193430d0fc2580
SHA1 f01ca0b39a3bfa2e9c47ed2ecc7a033630c1f002
SHA512 ccd9a3014d8b6b424ef70efe0350fb75a19e8d60e2db277436434144b5f37bf0fbfb2b31f7f49ccb4b7b8d1185140fcd2f480a094392aeaa1582eb2560027878
SSDEEP 12288:lx97VGJc0V51wlTLau+3pgEkH5HBiG7LRK5H8:lx9L9au+3pgEkH5HBiG7gx8
TLSH
T16ED47D08A7F41326E19ED7B5C0705865DAF0F029B26BEB5F1CC276FA5953B128C41B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BasicFormatsForCore.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\BasicFormatsForCore.dll
Size 145KB
SHA256 f60f48e8a320b6fa2760d2f8fc5dcd5dff2fb526f967545dd2d620d09b9c5675
MD5 b5e3cb1cac8689c46633460289791f61
SHA1 c4f904be98a59a3a9154c8a3c36b62d66ee530c0
SHA512 45501bd2a58cf4e9753c464fc9adc8c92d43a963caf957de3515392ad68649ce908224f513159864686576b71a32846b2b1155c2a48ae189a72f643cd86eb67f
SSDEEP 3072:zM4HNvwUesP/3d9r9PM9NjeilcwUP0s8nrV+YHOyjO6njKr8iS:wIwU19ziWd+/O6nji8iS
TLSH
T1E2E36C4833E85600E1FFAF7A95B085114B75B516A973E79E0DC490AE2DB3781CE64F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DotNetZip.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\DotNetZip.dll
Size 234KB
SHA256 309f84521fff1f48c3509f7110f1789347a272501992c79af3ef6e6d3b3de7d2
MD5 efadf1780d4ea45d067f7163c4c7a80e
SHA1 a460c0033a007ff979a66153e501023c5d9ab514
SHA512 b785689b51d4be82390fc3b582ba394044dee7f154d703ad4dd688d1c67acdde59d8c51326cdb47341e4576e24ae4fc19b19e43b285dde25b1716887f332249f
SSDEEP 6144:h5S2GuvzjoNuTdR/jZiWAzLIUjIcOF8sszR2:22PvPsAT/b+cF8Tzg
TLSH
T104345B0423ED4F6AF6EE67B9D0B59192C3B2B46134BEDB4E5D4460FE18173A0D9107A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FiddlerCore.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\FiddlerCore.dll
Size 774KB
SHA256 e7e7572d2c3028ffaa0b58c765a526525b2bdb5cc9696045e34f36b01ba847fb
MD5 06b6694b72df565e06e919ca4570b20b
SHA1 e4d2f2b7b6292cb2e8047f8eada5ac7e12e44743
SHA512 ad8c7d0a1e34067c84c539c56aa134ed9cc1963ad15647f48ed2a1be7b779798388371cf330457d3b1668b4c93d57a99db135cef88131b97530376b80e44a683
SSDEEP 12288:qwgpE6bmSuMZVnSuBbYSdTHaEpFdlYRdEI9VO:q/Y0f0OHaClYRHq
TLSH
T10EF4061027F85A11F2FBAB789DB225008BB9B896ED25CB5F0940C09D0D72BA5DD52F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FontAwesome.WPF.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\FontAwesome.WPF.dll
Size 204KB
SHA256 63d50dbe094bbce5d7bf8af08c0d919cfa5e057ca05ae7b27704a8477c8b348f
MD5 2ace85429eee9e8320c82d878e5562b4
SHA1 77ed8b89210930d1de2495ba363519b696d0b6e2
SHA512 7ce3467d1469acdb544f4f42864d94c5ae0ada252c5f096329e16d4b571fc1800bd572e52cfe902ee5d4b91d59a1a4182b07f40b7a4dfe54e338ca46684af989
SSDEEP 6144:Z8P7/P97ilHDqO01ktQOzB4YjDnX08RYA3fP5S:Z8PpilHD+kQA4uk8RYA3f
TLSH
T1F924C077B640664AC6474631FC0BB74221FAE1629D1F4B16FFC4A98E3296B504E22F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Hardcodet.NotifyIcon.Wpf.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Hardcodet.NotifyIcon.Wpf.dll
Size 101KB
SHA256 2059222c4ae5d0291fce13bd296adcc448d79b6fae27746aedf347608ed3090c
MD5 2cfde828cdbfbb545be5aa61fe1e62a1
SHA1 d376bde7322118787f6f08131ab34a17eb711789
SHA512 2a1215dde4bfc4626cc4fe9696b6465a0893a8787ce4ff41ca0c08908bb8aa52a992a156c3320deb0fefb225acb4c3132286d8c04a0caed93282b86adc011cda
SSDEEP 3072:5oy+75OQW4pg9xXsGQTckaX4kGsdO5UInM34:5+75ON4pg9xX7kzsTInM
TLSH
T1B1A3CF8523FC405AC1FEA73478B532148771FD837A61CF2A498262B849B77D91AD07EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.Core.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Microsoft.Web.WebView2.Core.dll
Size 461KB
SHA256 c6feb73ec1cb9271f2004d2586fe1833621a0fcd3d04a6fc1dcf08557d634ac0
MD5 0901d7f2f8b621433f3eaee6a63cb8d1
SHA1 12bf14a2ad26f568f78e4a9304234a6a990757ba
SHA512 e428770009468c5e48e843031758d2ec2af3ceb3c0614248b17e90105415d7ddbf9783e5cfa77738731cf3aceaca788afa7405944dea0af3247ac5f0a4638b40
SSDEEP 12288:5MYWHzByTrx3YSi+iKmRFNge1+imQ9pRFZNIEJdIElxPrEIgcvLcglxMwCepM1SW:5HWTBFI
TLSH
T10DA44F2223FE425AF9F37F75557412204AF6FCD6B93AE75E0998A16D0C32B4089A1333
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.WinForms.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Microsoft.Web.WebView2.WinForms.dll
Size 37KB
SHA256 983a69e9ae41e7cc91962704a903a2c2dd49d464f243a7d101d0b715f723f1c6
MD5 f696f28047246a651f90900475186ea1
SHA1 f87c665f212a7b8b3393060ca84d2e576e6bced6
SHA512 45588b89a24f3db2b5a56bb841480b991efeef9f4778b10e4b8a9a58c651cc12be81c8bf1ceda5badc0b76a03046bdf4b457a00130e1ac0e93cf724e71e756d2
SSDEEP 768:qN9HFciVtBZDgcEST3p4Jjrjh2jJ+SG2auxvxJKia5/Zi/ZGQKqu6bX6uTHRt8cF:29fVtBZDgcEST3p4JjrjaJ+SG2auVxJD
TLSH
T1A2034B0083ACC617EAEB5EB8A5B485620B7ABE837D60D39D5C88F1E90DB37E05514377
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.Wpf.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Microsoft.Web.WebView2.Wpf.dll
Size 43KB
SHA256 29f6e7dac224fc0ba91e45145e209fdb18c985781280d778aeedbd1ea885f137
MD5 c83529d6c90dc9644779207d81bb6539
SHA1 771dcb61c27bdbee4b749ba6d831107756412f77
SHA512 e42703c1d36c21542ccdef6071d2699b50fabec327b8c4db87e3b830fcb40e7d3f8ae3e951cfeca53c2297089b417e199be07105f199335fd3880ea816424cad
SSDEEP 768:k+Q2cVseHJ4Wgs0WZ8lBDP/ryEH0yBy4JjrD1h2jBhsUaGzkI7hKKa5/Bi/IGCvS:NmseHzxZ8lBDP/ryEH0yBy4JjrD1aBhl
TLSH
T11213289543EC492ADBEF6B74A07496610A3AFE437D71E78C1AC4B0E50EB77D025403AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Newtonsoft.Json.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Newtonsoft.Json.dll
Size 695KB
SHA256 22c649f75fce5be7c7ccda8880473b634ef69ecf33f5d1ab8ad892caf47d5a07
MD5 adf3e3eecde20b7c9661e9c47106a14a
SHA1 f3130f7fd4b414b5aec04eb87ed800eb84dd2154
SHA512 6a644bfd4544950ed2d39190393b716c8314f551488380ec8bd35b5062aa143342dfd145e92e3b6b81e80285cac108d201b6bbd160cb768dc002c49f4c603c0b
SSDEEP 12288:mFIM0KteTMN4Or4D3OdmZg5WHEaEDIGBBjgrIQtD+tVqDMW:6zMTMNNd+g5Wk78GBBjgrIQtDF
TLSH
T165E45A2123E99B2BE0AF2775B032491647FAF542F6B7D78F5604D8AA1C43F558D82323
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Steamworks.NET.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Steamworks.NET.dll
Size 365KB
SHA256 a61778cbce992f1d3ab48577d8c6c1c43778727b6127cdfa8b97eccc353ce6ab
MD5 9cad80b5a72727b344d5fb46734af788
SHA1 e83420c8b362944f9fe861c808172ecd7057030b
SHA512 0e34d5f47398b52005cd41dba28d58a2e8128ecf3add668757c246946cbeb5d4d8f72d67c5a36f6d13ef8b2e30248b035630a444c3a6bf040978d338d489e927
SSDEEP 6144:38Z9REsOmCo0SIepPqX2lbRbRU/TB9nflJxSpbnk25pRk/9:38Z9q8tqzvflJir3RI
TLSH
T13484F82D7320793BC029433664B75E0BE6A0E4C2231B6E6F764249395DB77C49E3B2D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.CodeDom.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\System.CodeDom.dll
Size 183KB
SHA256 7b2ba5ede11ae8ac2d1d67df100fbd23e45558f8b29cf7ca767bb41d4f88281c
MD5 34f6f6df02024f033c0d9cecc9e19f5e
SHA1 0f72071a867d7ca61edac4cc70752ef608fe9926
SHA512 5a7e9d6c023cbc4de9360686149a001e0b6192580939224af193e952d1e62e3e0ba3577cded85f012d90678bd681245bfd25ff258d596c235a5c3afdb65b21b8
SSDEEP 3072:MFxaB6x7l+gq0WENWTv23phTvrgnlLXb8EVY3H+1Rzbbh1pTiWk:U33hEoURwE23yRznV2J
TLSH
T108043A713398823BCEDE5235E0A9405042F5E56A7382DB9F5C8965FA5E23F60ED20E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.Composition.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\System.ComponentModel.Composition.dll
Size 262KB
SHA256 7e65f888588c79f69acb593d9b39990c33fd58377fc48300a0a93fc8dbaa159f
MD5 e0bab5ab0d5835d00acc36eda1a4e3a2
SHA1 3b4dc4b656922e71deea58d7e4f51aa68e6680be
SHA512 e3faeae0346a62ac0f38ee42119213b39c4d1fa2372ef9d02514e95050eac70a67a92edf0019392642e3a08964e2a838edb8629e4346f5b68d40839173416733
SSDEEP 3072:DJDT6qZG065+dP14WQuE3pu4Y62v903SoIrEjFSikDdLRKVgWjqrgKQqktCsa6AP:1Bd4WQoCGmSoIlRA4itCsa6A5oM7
TLSH
T15944291237FD1366EAEF1B7CB67488118AB5F962B50AE74C2C4994FD0963F908521B33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Management.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\System.Management.dll
Size 288KB
SHA256 75b833e2aea56dafa94f0d2728925db405f9dd758ff19d43924a7a268202c94d
MD5 bf74ada4da38cdb4a8decbdae77249b7
SHA1 bb419a9fb2b61bd2ab00f10266635cc47a9e0ffc
SHA512 f0f2ac9ccc3d217446fed2c2e78a5e503455cc7ae60f060a05a1e160109cdd542e75f6b044a7d5a356cf8fedd4ad15cf92e1df1361373fae7f55b6f923fbde3a
SSDEEP 6144:Xd4rRwgJrgMmbwipdLEoWkFPMcBIABGBcz7:XqrRwWiUA/
TLSH
T10D543B3037F8C196C5BE8EB9A03011948FB1B3AF244EDB9D5562BCED28B1781D65712B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Telerik.NetworkConnections.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Telerik.NetworkConnections.dll
Size 67KB
SHA256 14a8afece485815896fc9f098d66b0457d1be374b10366b48c706dfdbb275094
MD5 f442ae4be024c27c59ef737902303a86
SHA1 c8191737225509a110a6fc42f9e0291fd6576c8d
SHA512 8b3f768ba5232db3d5355e8d4a719597f16f06a438f39365e494df4b30125f433dacaab5aee2bfbfde910c4b86ee0ca6903c703863b28c5d4a39c62103522af6
SSDEEP 1536:qpjTrvVmDDDy/WTAAPfi82uA+J+GwclhzF8FgaUK:qpX7VmDDDy/WTAa68JBJ+GwclhzF8FZX
TLSH
T158636D4133AC532BE7FF4F35A0B6A21004B6FB55BA23FBAE145450AD5C627C126217EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\WebView2Loader.dll
Size 156KB
SHA256 8d6fe8b14529e1d6a02a7f2d5991ee72ace0d7e2f1901c71cfd7df310600f4c1
MD5 e8894bce4a8fbd1a059023b3b3c7849e
SHA1 5ce5ea789dcfd04effc7ec2aa40d704bb42cb31b
SHA512 405b90498c9b71c0514129d72ff1bac345bca7188cd268ee3e6aa4ec6529f94ab91ea271a6e8e6d7e9343359e6e7e9fd8b275fb761abd14d100a36201e0538ab
SSDEEP 3072:rKLKQDEW3JHtcGNd/SzCzkYLSq9hX4qSd/8SALTcYrEtnWldxVKW6:mTBt9Nd/9d18qSyEtmG
TLSH
T1D0F36C57B3E5007BE1678274C9934A56E77378510B60AFDF03A482691F237E4AE3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\ar\AutoUpdater.NET.resources.dll
Size 10KB
SHA256 cf2b1c3cf607e7884fe8dbeb87b74ce6c42f4536fb92131704df5abfad96ecd5
MD5 15f7af014cf402523f0f00a2897158b6
SHA1 e02d2ccc3c1e278f822ca303389f7c41aff137c6
SHA512 334e0644c29be7f6f0c829a31ce730fc93a0d2a1efeb8c35dac539e0a539196910d664ef082a167d22b7e590527fc8ea2429e99f3fecfbd0e1d02198e46c16ba
SSDEEP 192:fXhMivXhRlfM2j+jurjyjYtVfXwiRx7ofVsXiFRqe7eKMw:iivXhRlfM2j+jurjyjY3fXwiRKfVsXSr
TLSH
T1E72245122BFD5275E5B39A7694B66194C63BBE72DD21EA1E0496010DCCB2317CBB0F32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\cs\AutoUpdater.NET.resources.dll
Size 9KB
SHA256 18b1eb31160b5d3ef6e8424204dcfdd2df69a48ff191f08810fd01a95bf3f9a0
MD5 2a6292b0c3bcb81a18ae8b44a275ee96
SHA1 a9fbfc94728909d9909e48b60dcdd432460dea4e
SHA512 39d213392cc638e9fa786352e12d0353fc96112ad2d19bf031382206cc028d5f7d4cae29b4ed402b2ccc651717c9f1b3c808ea556c095814fc6bd331048147b1
SSDEEP 192:D8hP7iLXYgXY8M2jbju/jTjjt2M9l87+EXRgXCeWKMw:AjiLXhX/M2jbju/jTjj4MQqEXaXCeWY
TLSH
T1171251122BFD0239F8B35A766A764190873ABB71EE35C66F0495010D4CB2356CEB1F32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\da\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 3d1dac05f707e995b1fa1a1a1c89dff452036fbf20273e6334afbb4b00033aa6
MD5 cfdbc013e1ac53ef5da16582054a4c58
SHA1 6831e26ff9ae73c210ded5379be3946918d33f01
SHA512 626243ad4a05c584771773d5d8f494a65d4d7cbf5571beba293a09b909d9d5ca82167605d7ac03486cd48bc2ad93776734d095f7ed064d7b1f1c07fc3ea4bda7
SSDEEP 192:KbXqigKM2jbjKhjOjD9M7OWLvoRGKMwi:figKM2jbjKhjOj5MqW/Yi
TLSH
T196F143136BF8433AE4F36BBA693A5255863AFA76D930C62F4484011D5DB37118BB1F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\de\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 408bbd72954cdd8e830ebd0787f9214405b5acc15d06c3336d7015cdaebb71ef
MD5 cb9f885e34df02e77aeb8d304019a372
SHA1 f9a787fa782799e4a84679ed18fc51041b451954
SHA512 f2f3ad6687a61f43d8c974934b5cb6e8eb74b0325c1bcee1eab5329e9a945955e3490ae71961525509c11089e0077061ce74fe274e35551bd2a9f41161769a3e
SSDEEP 192:f7hjFiYEM2j6j+ijAjD3fUMASZWLv6aIBKMw:PiYEM2j6j+ijAjzUM7WbcY
TLSH
T1320275122FF9423AF5F36B7E197641559A3AFA75AA31C61E0580111E5DB33228F60F33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\es\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 d689092b0e4d74e1a55d0c6fe43abf65580a3fbf52b3b8368285d8639b1d2cb7
MD5 7d94426173a5be2b84fb5ecbbea4ac86
SHA1 75d186b84c28ef5ebb088a9a7cfaecde7bdcfeaf
SHA512 708a94708f126034829e5ea2f2a1508420cce0660a071f10ed3c59800ae2736ac9e871061a593dbd98aa46843d309666097e6275d5be45bf05a3bbaead04e3da
SSDEEP 192:5GhlB/igwM2jGj+Ej9jLXdMLfMmihMn5sWLvaGNL1CBeKMw:Yv/igwM2jGj+Ej9jLIfMrUGWGKweY
TLSH
T1F00277126BEC0239F4F36B766E7645529636FA75BD34C62E4080020E5C72746CE72F63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\fr\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 2fb47dfb09f9f24585b8bfa71c773d855b93744dbbd8c376ed8c3edfd3f36064
MD5 399becfbbd24131839c31eb023556e47
SHA1 6e2c7c11e256f534e87c1868624774a2bebcb05c
SHA512 e1425ead6674ad37e59908675e4fff42bb3b184fffa00f3cea19e4faf63e26c7901958e55d449ba3713689870ea1a4ee0370f6b99fb6a3483f5ac1fa74397e1f
SSDEEP 192:mW0UiHxoM2jcjiZj8j7qUCzL4MpCWLvxOLVVKMw:ZiHiM2jcjiZj8j7qp4M8WWbY
TLSH
T17F0263072BFC126AF5F36B766A7692518637FA79ED31D72E0481020D58723118AB2F36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\it\AutoUpdater.NET.resources.dll
Size 9KB
SHA256 eea2adbc5356ce05b2d9fc418e99ef0711e9c7fcdeff3d0c6d85c3758a49a75f
MD5 0c987d6182959a0a9bffa4ab31f08c0e
SHA1 e39e497924d8a0eadd514d47ce47cd1685f49b75
SHA512 814b171319f85c39dab237c146f1d811f303fd982ca919cb7e418dfa49dcda145a0f75d436409b4b0cc82381c019558a400932227faa54adf97652c5e09bc5e1
SSDEEP 192:KVh35iwkM2jUjf8j6jlV7MDAP6X/aBXjLxu7KMw:GpiwkM2jUjf8j6jlV7MTX/aBXvE7Y
TLSH
T17C1264222BFD0239F0F32B7A59765181977BB975FD20DA2E0485010D59B27429AB1F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\ja-JP\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 3370fbd2efb274b714a02ce32b3b642c65fa19a896f3ed7ac0a9502fe7d6beeb
MD5 39605f921bb6d87527972f23f17f4e7b
SHA1 eaeb878e8a12d36cdffb0b605ea3dc8181d4dc82
SHA512 5afaf1f311c54465b0db0e2c8bebbd7ae01239d9bc9f30fdf2ebbd68d2026c51d1e970ea6d0d6966f8410f909375b3879f8fac1bd8cc45f6e9ca1a36717ad390
SSDEEP 192:05qdi/h2uM2jijfjjOjdLMaXoWLvIKMw:oyiJhM2jijfjjOjdLMXWkY
TLSH
T1D802632D67E8026AE8F32A72287A52818536FE75ED31D72F045C811D6D7231ECA71F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\ko\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 c5b8a8e7da93b9b50d3a1ef3330035b41c514ef6f361188be97ac273716919ac
MD5 9e6898093a38b2c4da2d9cdf2dfd13ed
SHA1 936c0e03e4d8d4f5b5023694d47e10c2ed393096
SHA512 84f9be33177151418cd7f125f46508538f2d8b36bcc2c739ad6e5b528a24c25f0907d4821c3060e316ff048bf8a7d0965744c56e951170c091f72f1f018224ce
SSDEEP 192:T2C1gid3M2jDjDijDjdM5IirBWLvl1dKMw:rgid3M2jDjDijDjdMlrBWZ1dY
TLSH
T1E80284921FEE0279E4F36E7A2E75A241867AF974FE32C61E4844050D9D723128E71F63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\lv\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 b00f6217cb875a0daedfea0e00d3311d2608d03c0bee74d524d177de06f4da74
MD5 224ffe50479ba20cd6a210d5ee920d7d
SHA1 322147636cf8b1c1c2d38f3fc94e8632a6c9a7e9
SHA512 b93a7335970f293f071680e56e8710f904c12f129d07144a3c83c7baba3186573514c751ca11150b65342f20b274beee7ba37ab63654fcde0a502d13d1c92547
SSDEEP 192:Kh0UmiwRrM2jtjYUjCjqdWMpHsejeWLvtrEKMw:O07iwRrM2jtjYUjCjbM5sejeWBrEY
TLSH
T1A10252222BFD06B9F5F36AB61A76915145BAFB74BD21C62F0485020E8D723158EB1F22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\nl\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 6e9df964edd743039174e6dffc068219e59f40cafd33902581e74a08dc72edf2
MD5 77b89a64c5aeb6f43ee89f87c46f97a9
SHA1 6b479246676ee768010a76baf36cc3197afa6aa3
SHA512 70dbf04206eccaa9c8998a7b260439e77554fd93b401540f17f2d3fd8bfcb3704c632d4c50162c2c944a5a025d47254012333d11197027bc15ba836fd213c448
SSDEEP 192:55OqiyaM2jGjEnjSj1iu+bOFMgNscL7WWLvPMRKMw:viyaM2jGjEnjSjEu+bOFM9cL7WWDMRY
TLSH
T185F185172BF9423EF5F35A7A58768292863BFA75DE31C62E4444021D5CB23128EB1F63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\pl\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 a041069ac5e288d2704ab670efa6753dd268bf86b3223003e4e094754a337936
MD5 7f9bc29eef52c3b890c5b1e245626952
SHA1 c1592857e7e023a22eed970f66c4a84d80c58ec9
SHA512 c9a75131406961f20fd9807fe9168fd36c2859f9879f31841d3a10f02bdd9614fa41060135fb01b1f799f2263c7a647b60a0e83ab2d215458e36d67f9da3ed3b
SSDEEP 192:EJU/WiYeM2jDjUwjej9ul8LMfK6D5WLvN2JKMw:siYeM2jDjUwjej9ul8LMy6D5WRoY
TLSH
T1320285116BF8023AF8F36A7A6A765255893AFA75EC30C65F4441110E9C723528EB2F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\pt-BR\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 ae81bc07e5daf06825a77b68d5ec12cc5998348c2a73bdbf6d5e6fcef9d64f70
MD5 0eabb0e7abd788c23b3c142fa7fe51fd
SHA1 6d6495bdf98765cb0e1a9d61f636d34a3feea9f0
SHA512 a8eeae1b31f7e14db61146e535e4ab1d16bdb66eb2ab9f9d5ec9df4bf16c8a65b1ee31b2351022f4c464149f0b4af633d099b0f39639dc38d19e7fd591c4c820
SSDEEP 192:p+3IilOM2jnjmzjtjmMweWLvF2i82OKMw:k4ilOM2jnjmzjtjmMTWxYNY
TLSH
T1A10263222FF90239F8B32B76593A9612963AFA35ED24D65F4581060E5D723428E71F33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\pt\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 1212b1aa059492afa336dcc83a96a409f9d00198f7fc20e340f60619cf3f63b0
MD5 67817d2edd9b0675d4f7485700abb972
SHA1 ffe63a1bd069b684bf38541410ea5e551cc19c20
SHA512 7e2b80cf825f1e989a0fee378a9f7bff048a950df4c7b12a154ace1c0b363e699f944f14cc646843b1dfface148986ebedf07193d88b0f759f5be0bbffdac0fb
SSDEEP 192:1NhIxipGXM2jUjlvjJj/JMsWfWLvFmi8lLdKMw:JEipGXM2jUjlvjJj/JMzWZoNdY
TLSH
T15F0275222FF80239F4B36B76293657558A7AFA75FD34CA5E8580060E5C723418E71F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\ru\AutoUpdater.NET.resources.dll
Size 9KB
SHA256 97314053709366284705558e17873ee11b29eac1344306c851c29e4e559fea55
MD5 f96858ad3330d500c34efceebee620db
SHA1 7f07b4ff7035a33ba5b9c1c65a7aa9363e6714dc
SHA512 dcfab9ee51b6c71848c1c4784030b435e66416ab6f3f36c5f5c4a0a452b374d64e9cd736a02cd6e30afaf61ff45b9e6a8ce18d522163899f0808aec44394772e
SSDEEP 192:pdhnm+M53i4bM2j81jsJjkjMeLMQV/WLvJNKMw:d6i4bM2jOjsJjkj3MO/WlNY
TLSH
T1661231122BEA11ADE1B3653AD9355A056537BABDBF32C71E0490192E6CF23018A71F26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\sk\AutoUpdater.NET.resources.dll
Size 9KB
SHA256 1408db02419f71222248b0019446b2d501c7e68584fc155445ed7af56074c9d9
MD5 48d1a998361ddcddf8528cd7d8ecd52d
SHA1 5b0c585235dba229088b3cea9ccde5f3a78c2601
SHA512 d7182ddbe61ac0028d8ae3a95e6dc0ac1cbf922f4b931a06d2b8fb42d1ac6576573e6da7dbf97f2075027f4c46dbb75e9259cc9f274a5fae6d435e4d1339eaf0
SSDEEP 192:ZErh+OipXYgXXM2jbjOSjXjbbUMxGcwXRgXF146KMw:cipXhXXM2jbjOSjXjboMscwXaXjpY
TLSH
T1DD1272222BED4239F5F35A765A765291863EFA74AD34C62F4881020E4CB2355CAB1F33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\sv\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 c428be2722773a6234ade47ac9c7977dfea0bb671fdd893efe74b22665097fb6
MD5 31d1028b4630c2e3318a12becd4c0062
SHA1 31ce3ad6fe249806078ab39821993f6675b86a7f
SHA512 f4496320f958070170c05dcbd1729dcda68afc4b993809ffbeb6b593b37d7ca2398e6aca3c12f5397b385b97a650abd8743c63b0b5e30088b17aeb3c67cee938
SSDEEP 192:GhQxiyhM2jIj28jljXkEM+eKXTgXDKMw:6EiyhM2jIj28jljXkEMFKXUXDY
TLSH
T1970294122FF9423AF4F36A7669764295893BFA76AE31DA1E40C5011D5DB33018BB1F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

svchost.deps.json

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\svchost.deps.json
Size 20KB
SHA256 3cba949ef5a94d911b9d3ea6d973691df36d0628e02b0df74d8e39f2179ca5e9
MD5 5dee9e3be8d7d561228f25fa68ef1468
SHA1 9132a32584398adaa3eb7c4c7256ebf2ba6dd7ab
SHA512 426cdd6e68df388f2c1b8ce0eea2ba9df9660b466837a7104209823c34038a375632f152f60f39ab09d343673ed322397fded586937fa33872d03c4ffb7b6995
SSDEEP 192:+4AJleI07MpqWyB2eiUc8gRpKTSoXL4G3Ow:+4UleH7MpqWyWfRYmoXL4M
TLSH
T17492AB25DA849D7742726FA228384282F625536F50016D8F78FC259CDF73F8BA1A2F74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

svchost.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\svchost.dll
Size 22.4MB
SHA256 d307f383e1d24cec5271859be77b3dad20906898ee3a9ea7f5675c7cc4a4dc74
MD5 65cd40cfb6074da4f9bb0c1f50143230
SHA1 ea3cbdb422b82cdbba637cb009a333083706fc02
SHA512 87406b1421465abdc6a660b3084c9b77e142dfa5df14059b9a70a757a4b08c86081f690fd0d8eace5bb1e3000b69efb7e25c8822b2cda0e306edb8800c8040ef
SSDEEP 196608:wzII3rX0Ln/0z/1To0xpLxnRlAS1UVnRPzSCmLlrITKONNCrHZQy+:+NLVJTfxpLx/AS1MVc1ZwCrH
TLSH
T119371E6EE2E08CEBD43E76B526B81B16E29013BF93C19C673EFD915D4F3A1005026B59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

svchost.runtimeconfig.json

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\svchost.runtimeconfig.json
Size 372B
SHA256 1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a
MD5 d94cf983fba9ab1bb8a6cb3ad4a48f50
SHA1 04855d8b7a76b7ec74633043ef9986d4500ca63c
SHA512 09a9667d4f4622817116c8bc27d3d481d5d160380a2e19b8944bdd1271a83f718415ce5e6d66e82e36819e575ec1b55f19c45213e0013b877b8d61e6feb9d998
TLSH
T1CEE02C7BCA10ACB315F52BBAC02AC282FE20232B00004D2A35FC180C2F3AAB30012F49
MD5 SHA1 SHA512 TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\th\AutoUpdater.NET.resources.dll
Size 9KB
SHA256 048a52e5ea8c4a6d8d8cf7ec46c1f41ae67aced49c10d11d5d13ecacef886077
MD5 96b2559351f5d42f05b0e7194cdf86f1
SHA1 90a14dd3e4e82be11ec988eb34c726fde75938aa
SHA512 a9d569a6e82487d048d07852b1ecf11ce7d06bd9796adb457fa436ae83244547180bf10f39f29d18f3d3afdf55c8b7aaa21524a59c1e5588e6776d3a0f215611
SSDEEP 192:0CSstiNOW5pM2jIjMCj1jr5dOO6V8v0lSMjsBv5nT5TA5p5WLvqgbMfKMw:0siNL5pM2jIjMCj1jr5dO1S8lSM0v5n/
TLSH
T1281210632BE941B5F4F22A365A3A7285463ABE747E31F6DD0085115E69F13018922FF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\tr\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 749ebe2660ef8ce869ee88627cb1a7c4ef6f7049b65eb04ef25b610f7f50f9d5
MD5 1066670400388b5812741d8ea461d04d
SHA1 35e01c85f0625123f1a0489790ce87757bb9a7db
SHA512 54652196e76c72a552cbe5dfa2f9af2b351a625970a91b1716e51594b3a3e74fbc898aecbbbb920265695dc01024ed736287b4acb0feab8a8f5613f329be91fa
SSDEEP 192:Bt71KeqiG4M2jDjHBHj/jMaMk6wWLvVKMw:miG4M2jDjHBHj/jbMpwW5Y
TLSH
T10A0263122FFD023EF4F72AB669768166863AFA75F931D96F4441010E5D72312CA72F22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\zh-TW\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 93d21963b12a0553d4d5b1df679f3b8ff61e5fc699acab45266f0cd3e9764533
MD5 b485aff46f1cc1f6418de58d8c281bd7
SHA1 067b3acc70a323a5d4f0c06bb72f09a91350b7fb
SHA512 12a3fedd7109cf4b1d11799d0fd70c4c72d87ca40d50ff3dc23056b20496fe3a8dfed28fb82894b3faceca916c8bb8d289593467990157da562558df08a58569
SSDEEP 192:mkkiJ6cXaj9jWjnjUZMlDdb/eWLv9I8/mpFKGKMw:4iJ6cXaj9jWjnjUZMf/eWilLNY
TLSH
T13EF154266BFC027AF5F36A7A29B54252853BB979EC31DA2F4480010D5D727128E71F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\zh\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 4ea925fb369c847a76f2adc2e8b48b17189dc29eb13337865ed63e5fa88f3a31
MD5 851f713fe6a4013fde196b8d9591cff8
SHA1 7a01240bdd955f12cec5800c8184eeb0a439b2f9
SHA512 98b2091ed735d30ab6b8487fa76de66dc24db42bf4f1de92b8ab588e0f9711a30ac87d8751519c900a49ad9166d4beb2d304741dde9b6ab5a319141ef29b96f5
SSDEEP 192:ZW2likKM2j9j7UjjjtMIdknn6WLv+dFNKMw:tikKM2j9j7UjjjtMZn6WyRY
TLSH
T1C1F175621BF80239F5F36A762A7A9251C63AFA75ED31DA1F4480010D5D727128EB1F27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11d851b2-2319-4f81-874f-ac05432e2209.tmp

Path C:\Users\Admin\AppData\Local\Temp\11d851b2-2319-4f81-874f-ac05432e2209.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Tmp151F.tmp

Path C:\Users\Admin\AppData\Local\Temp\Tmp151F.tmp
Size 2KB
SHA256 9ecb0e845bcb8b48b9d5806e31306b2f4a85fdedaafb6512fbc740601c97dbb2
MD5 4254dc2cac695ef169946f2ec7f834d1
SHA1 4c51c00e05b70444cd3696e5aaf2e7d6091424af
SHA512 21b641b496cc3026e955cb6e2d7e9ea90d3880498dec088dc41ca597fbee3ce0eceaedb033e5ea616911d7fe3868694f2c8fdd646f3c31a6ddd0af5161104a98
TLSH
T10A512C7FB10D05CCFD59DBF53A1E059B26D6E9A61ADEF06F305A30C10E47F062146521
MD5 SHA1 SHA512 TLSH

Submit Download

Tmp1520.tmp

Path C:\Users\Admin\AppData\Local\Temp\Tmp1520.tmp
Size 2KB
SHA256 3e11c7a636a96089b6530f2cba73a20ff26965cd64f49432098ec7c0e5591422
MD5 ed678c2841a5295d98d6a389172cbbbb
SHA1 262e6127718428b65f46281aba367aa623e2ff79
SHA512 31a31b733faf99b4c08307adc28f3362647e44afb033831860d6d314d1491d62991fe7d1dd055eb41fac0346716041874df5e8da6cd05ee69b26365bbc45442f
TLSH
T117514C67180AC119BF4ED647E30D5A76A466A3C0C970310A82776FE34C3A3EDB80FC66
MD5 SHA1 SHA512 TLSH

Submit Download

ab8386bb-7a0e-42ba-9400-f89fa5b09a7a.tmp

Path C:\Users\Admin\AppData\Local\Temp\ab8386bb-7a0e-42ba-9400-f89fa5b09a7a.tmp
Size 152KB
SHA256 f83832c37a0969ce89f77b16eaa07457b03f43029abaec00eaedce2674adbaf5
MD5 d2e80cd29c43ea745d16284dc1f58ea6
SHA1 53fe0165f9f303b333be9284865c8a74f3553c0b
SHA512 375fd3e65b12f80b92a63c1cf6f0ace9fe878c1a0cb5179d869c99aad0cfde14715fd1499eab22a04f353e5f292c19d6a5aeccb43ec2ff5cd6878a5226b005ca
SSDEEP 3072:bHVqfst2F+fBXzSKmg3n0OIH1iCylcLMLgaK9enj59Ah8MuBX8Yk17CF:b1qkfBXG801idlcLMLgaOeV9A2XdBkda
TLSH
T1DBE3E13C3EDACD26C21B20F97F287587C54D8F17A10BA50BE14A84015A76B5E17E2DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

s2c1p2hetgu.exe

Path C:\Users\Admin\AppData\Local\Temp\s2c1p2hetgu.exe
Size 27.6MB
SHA256 905949d0f68798fb683946f28d0b599efa66a7a3567cdeb9cb934333dd41eafc
MD5 8eae3e7fc83f639a1f850f9b9c4bbe05
SHA1 981c73249dea866880ddb18f3082d37bfd44fc13
SHA512 1492e80be789e9a11174b2baeb5bb9cad8d78830a766d3b63fcc363abedcee9a074639c68de38e337b1a122645926d71149a9fd7eaecea29effb3a8f321e9a18
SSDEEP 393216:WqNLVJTfxpLx/AS1MVc1ZwCrHXA3mDDDy/WTAwQ:rfPlASqgrHO
TLSH
T17257516DE2E08CEBD43E76B526B81B12E69013BF93C19C673EFD915D4F362004426B69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5688_1069139613\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5688_528780891\CRX_INSTALL\manifest.json
Size 1KB
SHA256 507f5fce0acbb9dddf006205127035b2f474fba4c9cc513a524bb19b86bf0599
MD5 53fefc4e02295749ada8487202118bf3
SHA1 bf67ddfc5dd251059286dbaafde0638ccefebd0b
SHA512 3e02a34e4b1741fc0007f123e0a5d684735a49e92678ea79cb2e71d21400f6c2e8fccd6359d642b3bf4459d66f4d9a69fc87557e92592a3171bc0a58fad9f45c
TLSH
T1F54169F7BC00AD634BA49898AA1E710EFB29B24D55CFD4DB8298107302CCDAE1D601E5
MD5 SHA1 SHA512 TLSH

Submit Download

BurgerWorker.exe

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BurgerWorker.exe
Size 2.1MB
SHA256 b5edd3a53f8cb50d1ab5ddd6979f633b1a6ca2ac53992d6642907e6a7b6c8d44
MD5 2cf687bac91aea27154769ae642f2e39
SHA1 d65c1f3cbd581f091cf36c46b1c89ef32d1ff19b
SHA512 0f4302e023cc36c4d457aea4fd3de32827645f201d430dbf4ac89847eeb9539cbec1e50fd566abf5409c6ea117324d04cb31225c4440496043c7f4bc0095cda7
SSDEEP 24576:6nTS92u+mtKB99C8jMjYpHiFSsqeyQucw/PuFBG4ZjPSduVNTpm7PppZCadycB79:6mUu+mtc99CjFSss6xAAcB7jAtBrG
TLSH
T190A58D06A3D8C711E9AF967D98324406C7F1F55B2361D6CF2404E9842F67BC3AB363A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download