a3378c300738a785ca0295f1665839fbdc8274a5bf6290ee6f40717277e3fc62

Analysis

user interaction
yes
max time kernel
150s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/07/2026, 20:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
FortniteBurger.exe
Size 27.6MB
Sample260702-zh4arsew2y
SHA256 a3378c300738a785ca0295f1665839fbdc8274a5bf6290ee6f40717277e3fc62
MD5 8f2f51ac8842797663b74f57f153515c
SHA1 71ed6f78bf293f8c8941fdd4847b0361e1cbd0ed
SHA512 5fdaa1fe6ef29071eba64d3759e849e4e26931cdfae32ad2fffd506a3c1d717afdab2edf6dcf2062c715aa62259f82d68ab1e1fde58455bd8cc49feb32f84906
SSDEEP 393216:WqNLVJTfxpLx/AS1MVc1ZwCrHXA3mDDDy/WTAwo:rfPlASqgrHS
TLSH
T19A57516DE2E08CEBD43E76B526B81B12E69013BF93C19C673EFD915D4F362004426B69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
2740	m1wdjvrhhxx.exe

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BurgerWorker.exe	m1wdjvrhhxx.exe

Executes dropped EXE 2 IoCs

pid	Process
2740	m1wdjvrhhxx.exe
6604	BurgerWorker.exe

Loads dropped DLL 7 IoCs

pid	Process
6088	FortniteBurger.exe
6088	FortniteBurger.exe
2740	m1wdjvrhhxx.exe
2740	m1wdjvrhhxx.exe
6604	BurgerWorker.exe
6604	BurgerWorker.exe
6604	BurgerWorker.exe

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	raw.githubusercontent.com
2	raw.githubusercontent.com

Drops file in Windows directory 4 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1588418862\data.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1588418862\manifest.json	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6772	msedge.exe
3764	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134274986850081861"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-759331733-200834466-1207319849-1000\{F3CB2263-3361-4187-803D-1345B9A23894}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-759331733-200834466-1207319849-1000\{6DC98B9E-200D-4296-9F24-E47273208542}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2740	m1wdjvrhhxx.exe
6604	BurgerWorker.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
3896	msedge.exe
3896	msedge.exe
3896	msedge.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	6088	FortniteBurger.exe
Token: SeDebugPrivilege	2740	m1wdjvrhhxx.exe
Token: SeDebugPrivilege	6604	BurgerWorker.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
2740	m1wdjvrhhxx.exe
2740	m1wdjvrhhxx.exe
2740	m1wdjvrhhxx.exe
2740	m1wdjvrhhxx.exe
3896	msedge.exe
3896	msedge.exe

Suspicious use of SendNotifyMessage 4 IoCs

pid	Process
2740	m1wdjvrhhxx.exe
2740	m1wdjvrhhxx.exe
2740	m1wdjvrhhxx.exe
2740	m1wdjvrhhxx.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 6088 wrote to memory of 2740	6088	FortniteBurger.exe	89
PID 2740 wrote to memory of 6604	2740	m1wdjvrhhxx.exe	90
PID 2740 wrote to memory of 3896	2740	m1wdjvrhhxx.exe	91
PID 3896 wrote to memory of 6396	3896	msedge.exe	92
PID 3896 wrote to memory of 2280	3896	msedge.exe	94
PID 3896 wrote to memory of 6772	3896	msedge.exe	95
PID 3896 wrote to memory of 2280	3896	msedge.exe	94
PID 3896 wrote to memory of 2280	3896	msedge.exe	94
PID 3896 wrote to memory of 2488	3896	msedge.exe	96
PID 3896 wrote to memory of 2488	3896	msedge.exe	96
PID 3896 wrote to memory of 1292	3896	msedge.exe	97
PID 3896 wrote to memory of 1612	3896	msedge.exe	98
PID 3896 wrote to memory of 1292	3896	msedge.exe	97
PID 3896 wrote to memory of 1292	3896	msedge.exe	97
PID 3896 wrote to memory of 1612	3896	msedge.exe	98
PID 3896 wrote to memory of 1612	3896	msedge.exe	98
PID 3896 wrote to memory of 6732	3896	msedge.exe	99
PID 3896 wrote to memory of 6732	3896	msedge.exe	99
PID 3896 wrote to memory of 2628	3896	msedge.exe	100
PID 3896 wrote to memory of 2628	3896	msedge.exe	100
PID 3896 wrote to memory of 6928	3896	msedge.exe	102
PID 3896 wrote to memory of 2784	3896	msedge.exe	106
PID 3896 wrote to memory of 3172	3896	msedge.exe	107
PID 3896 wrote to memory of 6356	3896	msedge.exe	108
PID 3896 wrote to memory of 2036	3896	msedge.exe	109
PID 3896 wrote to memory of 2036	3896	msedge.exe	109
PID 3896 wrote to memory of 6448	3896	msedge.exe	112
PID 3896 wrote to memory of 6448	3896	msedge.exe	112
PID 3896 wrote to memory of 4416	3896	msedge.exe	113
PID 4416 wrote to memory of 6468	4416	msedge.exe	114
PID 4416 wrote to memory of 4572	4416	msedge.exe	115
PID 4416 wrote to memory of 3764	4416	msedge.exe	116
PID 4416 wrote to memory of 4572	4416	msedge.exe	115
PID 4416 wrote to memory of 4572	4416	msedge.exe	115
PID 4416 wrote to memory of 3024	4416	msedge.exe	118
PID 4416 wrote to memory of 3024	4416	msedge.exe	118
PID 4416 wrote to memory of 5728	4416	msedge.exe	120
PID 4416 wrote to memory of 6560	4416	msedge.exe	121
PID 4416 wrote to memory of 3364	4416	msedge.exe	122
PID 4416 wrote to memory of 200	4416	msedge.exe	123

C:\Users\Admin\AppData\Local\Temp\FortniteBurger.exe
"C:\Users\Admin\AppData\Local\Temp\FortniteBurger.exe"
1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:6088
- C:\Users\Admin\AppData\Local\Temp\m1wdjvrhhxx.exe
  "C:\Users\Admin\AppData\Local\Temp\m1wdjvrhhxx.exe" --delete-old "C:\Users\Admin\AppData\Local\Temp\FortniteBurger.exe"
  2⤵
  - Deletes itself
  - Drops startup file
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:2740
- - C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BurgerWorker.exe
    "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BurgerWorker.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:6604
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://github.com/Fortnite-Burger/DeadByDaylight-Unlocker-v2/releases/latest
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:3896
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f8,0x2fc,0x300,0x2f4,0x2d4,0x7ffad913c188,0x7ffad913c194,0x7ffad913c1a0
      4⤵
      PID:6396
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1984,i,124142941599521495,14952390005976429417,262144 --field-trial-handle=2544,i,8691318354181540765,17814671841350382737,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:2
      4⤵
      PID:2280
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2164,i,15867183286811188983,17389567546151319898,524288 --field-trial-handle=2544,i,8691318354181540765,17814671841350382737,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:11
      4⤵
      System Time Discovery
      PID:6772
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2672,i,3591596364193141092,18251899108043605327,524288 --field-trial-handle=2544,i,8691318354181540765,17814671841350382737,262144 --variations-seed-version --mojo-platform-channel-handle=3264 /prefetch:13
      4⤵
      PID:2488
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,1396342593167990992,7447825232871955082,2097152 --field-trial-handle=2544,i,8691318354181540765,17814671841350382737,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
      4⤵
      PID:1292
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,12597285524341436072,16422408829791347099,2097152 --field-trial-handle=2544,i,8691318354181540765,17814671841350382737,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
      4⤵
      PID:1612
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,699845922690738704,3303254435922754158,524288 --field-trial-handle=2544,i,8691318354181540765,17814671841350382737,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:14
      4⤵
      PID:6732
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,8780394568147176417,15334196202217632407,524288 --field-trial-handle=2544,i,8691318354181540765,17814671841350382737,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
      4⤵
      PID:2628
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,1165780146421721776,650517634249077059,524288 --field-trial-handle=2544,i,8691318354181540765,17814671841350382737,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:14
      4⤵
      PID:2936
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,1165780146421721776,650517634249077059,524288 --field-trial-handle=2544,i,8691318354181540765,17814671841350382737,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:14
      4⤵
      PID:6928
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1428,i,17847205054874892392,247880841030393278,524288 --field-trial-handle=2544,i,8691318354181540765,17814671841350382737,262144 --variations-seed-version --mojo-platform-channel-handle=1268 /prefetch:14
      4⤵
      PID:2784
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1436,i,535257957283602164,8679313088383479411,524288 --field-trial-handle=2544,i,8691318354181540765,17814671841350382737,262144 --variations-seed-version --mojo-platform-channel-handle=752 /prefetch:14
      4⤵
      PID:3172
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1444,i,8499670298214232933,3365855550429990735,524288 --field-trial-handle=2544,i,8691318354181540765,17814671841350382737,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:14
      4⤵
      PID:6356
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,3267210150125750222,17768307391540941134,524288 --field-trial-handle=2544,i,8691318354181540765,17814671841350382737,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:14
      4⤵
      PID:2036
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6240,i,9872359390180774458,7169463267029098958,524288 --field-trial-handle=2544,i,8691318354181540765,17814671841350382737,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:14
      4⤵
      PID:6448
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
      4⤵
      Drops file in Windows directory
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      Suspicious use of WriteProcessMemory
      PID:4416
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ffad913c188,0x7ffad913c194,0x7ffad913c1a0
        5⤵
        
        PID:6468
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,1568404803026770102,13534325028892918302,262144 --field-trial-handle=2256,i,5394932623216621028,9624391955617590076,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
        5⤵
        
        PID:4572
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,13790851400678039074,2071500857230754121,524288 --field-trial-handle=2256,i,5394932623216621028,9624391955617590076,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:11
        5⤵
        System Time Discovery
        
        PID:3764
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,15498536238638644955,5114319522450497201,524288 --field-trial-handle=2256,i,5394932623216621028,9624391955617590076,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:13
        5⤵
        
        PID:3024
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,8219082839690356113,18423232347069190204,524288 --field-trial-handle=2256,i,5394932623216621028,9624391955617590076,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:14
        5⤵
        
        PID:4112
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,8219082839690356113,18423232347069190204,524288 --field-trial-handle=2256,i,5394932623216621028,9624391955617590076,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:14
        5⤵
        
        PID:5728
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,15984315988477280074,9513990575515048281,524288 --field-trial-handle=2256,i,5394932623216621028,9624391955617590076,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:14
        5⤵
        
        PID:6560
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,10562769908084282938,14326738948351660127,524288 --field-trial-handle=2256,i,5394932623216621028,9624391955617590076,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:14
        5⤵
        
        PID:3364
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,8678069935631266979,7358522483898184619,524288 --field-trial-handle=2256,i,5394932623216621028,9624391955617590076,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:14
        5⤵
        
        PID:200

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1608

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5376

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

SkinsPerks.json

Path C:\Users\Admin\AppData\Local\FortniteBurger\Configs\Profiles\SkinsPerks.json
Size 1.1MB
SHA256 2e0f764ac03ec2efc2fd754d2637807be93090fbf0a75648cfce8d9dfb3781dc
MD5 3bb71efec0597883fbdc929edbd805f1
SHA1 0861e66bd47401293d4d93705e908eb2658692e2
SHA512 d84af44479c80682ac552d8b12641aafd2a59f9a0736622bb3569d1fe00d633b0fada78ba4c4108a1396563c16ef6cace838b702ae6f0223360a7f09654c2ec3
SSDEEP 3072:RBaT82QtULqR1POFBa7B4/mzFOjf6k0giX8WaeCxxlI+zY1bXUi1vTS61uI1KQ8+:7+zY1bXUi1vTS61uI1Kz+
TLSH
T165354F3EA1F68C6A043E577906693F06F900176FA289780777FE965D8F31381291BB27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d27158eebf482333709292486790045376be986643b5bf9f8e823c47416e03c5
MD5 48cbaca9a0f53de2b3ca305171aaa474
SHA1 d512958b854013e14a6864979ecacbc18a58e543
SHA512 d8e9599cce41df3234ab8a1d0415f89d57aa6a938386a511ded24cbc36c3292b01cf672a4affdf11881d0046bbc056c4079baeeca74b5ccfa649aae23d8c9547
TLSH
T161D0C07437286C02C52231718C20C300B6F980342399C0023201C10C4C7F4829347006
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 78b24b2d65b9be0f6df01dc52b04a154c849f693b62d1b21bab7d0153c5dbf7a
MD5 f6c762ff1fc2835061a946c193b86a58
SHA1 8b6959e685f406f6b5c02e5dbb3e732a4cea1400
SHA512 bce2d2e20b5093d4d770da02bf6da132ba7b6fc1e0faa61640af9880059deb3b22d94646e733851679b4e98ab66ee842b8a2d54e67422bd9b0139ad68dec04f3
TLSH
T190D0807437696C02C56635B59814C700B6F99535239AC5027251D14D5C7F486E747146
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 17b030ef44f3da3ab6497030a3cabf5c353ede1b6b77f1df590249ec2cfd65db
MD5 30a0bca28a8b57d3fe769e4518623c7a
SHA1 037180dc1f17f3142e7649a9af76edc57f8113d3
SHA512 677171f39642ee7f9609490ace0dedb521e06e0ec4f98506fb14baa5b78caf8242a4269527b2f0871dc4d41a4ce9ac359a2e5e830a251a46413e4eb48822a360
TLSH
T116D023343F397CC2D13631BA8420C700BAFD5573239641067301C50D8C7E4C3E687686
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a10fc74361902746c634f76cd09fd5c81b7287c7d7384d2e4b47d63f42cb45c7
MD5 fe2c947a3b502d902271930f6e4fbf71
SHA1 f1942ed1b282fe14c53bba0623ebea4e4dceee62
SHA512 2218179724eb67181bde2a069c260da36a1eaa92171d854a15fe99e48ab48e2912d431cce7f36ebe518ac257bd2eeea0095f6c0544013a6892bc3865999fc062
TLSH
T1D1D0236837399801D53135759410C7007BFD5470319E540376F1D68C4C3F5C2DBDB046
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2809f8c732b7f48184c5d171d28408d628ba0e9e194334655c70591a3f9478f9
MD5 7aff0d1329f13a53213e958e0c94a29e
SHA1 273c3855b99f11e286d9ef7323f9714c77190ab4
SHA512 db687785780460ff70f4df3663a210280758e369ee79ae2292e7aab608293bd33f0c7823f2117dcedf6c6e60c4bc8a4a4ec14e0a7b0079f54ac01c6cb038e949
TLSH
T1BAE02BAACC21AD2B1DFD175868544746E74513172B808A4F3A3D810DCFF063A458687C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 726af7fd33b13ec0a67ced22eefbbb324d97bc7bebd3c491576cf0dd68bad926
MD5 7928154b49d85505d2bbc0a88f91e70b
SHA1 768e10639d2f1968384ade943702fc24f4c061a5
SHA512 c9dfca9c7c63c2050dfeb6fd709368be255dcfd0d6489620fbda72fed6fe3492ee2f3346564c070ba8f369cca3dad27a36d94c35edc3ea3dda91ab728fb674f7
SSDEEP 96:Km42oliBLtv5VGmsfLR05Gkp34hZgwZhakv10szmOB6u74qWVfn1c5VqatTM02uZ:Km42olyL7z6105Gkp34hZxzj10sznB6w
TLSH
T19CB107842A5548E9DB3A8075D9F2D0D7FF338893DD0BFE6920C699BC4A1631B6B4003C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe593733.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593733.TMP
Size 3KB
SHA256 7210bcc5a64cc9ed525c0722cc3619a4e5a74cb97924063c5cc8ba809eb21626
MD5 566da9cde9661d8fddef09aa463b7f73
SHA1 a80d57cc8b2aa106891bad7ff5805bf7e0a91e2c
SHA512 f7326c2e4a2a4cedbc5d10dca7c03564cb643e634c151c53abb6b4f5e0fbc82d3b08f577f15b3dffb826f85e35e5c318a35fd6120d25cbda54257806447adba0
TLSH
T19A6172553859099EEB67917552E2D0C8FF3288A79D4FDE6D70CB99FC5A0A32B234103C
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 d6d5ea7e627a2d52ad9c0afc8aa981d63a42b6c3fa18f41dc08c69ec190987fb
MD5 b486f0e9487896168caa422e9d89652d
SHA1 b50ec64646d1b26167d454314ae7d2752856682c
SHA512 d77cb5b7e5a895aed5ac80e2ea7f4e8e3bd071cf630cc307ebc3ed341639f63c0e6002651e122a47de70000f3216c3402386ed32c425fc33592b8657ef40e4d3
SSDEEP 3:MsEllllkEthXllkl2zE/ltYM:/M/xT02z9
TLSH
T15C440204AB810C86C900113044E5C3901370D81096129743355904225C876400C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 997206d5f4b92d22e9876f9a565f9ba1019e7f9ad6a91bdc5d105ea531ca0d50
MD5 6f6442ca0691d9ca050d6d5073678200
SHA1 699c28ab1f88147ab19b8209e5f6bd430dee5d64
SHA512 1c7f66e111264023dc314b269c361726a035f08cc57d2b8563e4c5a4c1e188e62fa311944d0c30f34f720e1341a807298e265a6e3e3dcbcf4372e6bef269370a
TLSH
T120719EF783F5856DDA1195F0BA18AE2FCE2C0514831C7C6A85E0AE5BD3E3871E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 fd509a8a85472176fea3956a67707c252c80dfb2fbe25d382d37c39d4c482762
MD5 3be7bde4a6f791f5f3e8efc36829efad
SHA1 da5621d3959c3a8233694a4f792005b6b7337317
SHA512 6186b6246ce6e5e223d127734d8a0e7f94eeef28ab105999cae13b169705ffe96c453b5b1a4bee3aa3d95a3e88cb0e62593621004b4f114ee37d9ca22b9f7d3b
TLSH
T13B41D0F7C3F4866DDA1195F0BA186E2BCE2D0914432C7D9AC9E0AE1B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 0afed5052e07bbc5eed32f75f81707e019018d5156f26117539bfc16008aa210
MD5 6218953bfac4ad90c234982ace48f651
SHA1 8416ad28bf13b0f7aaefa9c3b654a46d4a73a10c
SHA512 33a7767e48c74894d689ecccda5b7f530a1bb032e2be59d5c5a44301020b51391a92ef892b198da21b7f31ace8aae84e7ab3f2d78616ba929bf6f2cc47201212
TLSH
T1B3719EF783F5856DDA1195F0BA18AE2FCE2C0514831C7C6A85E0AE5BD3E3871E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 3d3c77fd39bab4404106d3c2532ec0b3fcfe356c7acaef94f9a176e749d09569
MD5 6999bb3a13d82c46d932705893a9c443
SHA1 98684adc437e5d28b25aa52aaccb039a46221eda
SHA512 862ce70fd10d4e5ae33ff1efc51620662c9a847d6da00dceceee596f449376b0dcc274fa37312c93fdb07fc6148c9e1849d90471a4e94a55e6a83a24eefb90ed
TLSH
T1B7719EF783F5856DDA1195F0BA18AE2FCE2C0514831C7C6A85E0AE5BD3E3871E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 3e60ccded9473a1785ef631abb14fae862b43eebefe516962c3b4469d4e3bf30
MD5 4ee56455e85799aa7efffae5b9be2f09
SHA1 4815d33a77b6006db7e21e4c9581299cf8ded075
SHA512 71dd8e84b79125f0ec65df560a1084131b25f59beda917148eb42216e394e9333459124195664136e264f00cf9b9ee36009de333b8fd1cb659b04f78393640f8
TLSH
T140117B97C4FA783F1469497F2D8CFD472DB8F839111194F1DB9A972CA18A0FB4A62029
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 4af44e2cb2f365b41c16f9865b57552559f52ad62cb4d290c0779dae9e65bee5
MD5 70c5c85d56cd05104fd49d031e71df75
SHA1 da36da4fd68c3b5b2262ada746f59f2db96d6bd1
SHA512 2c4b5ebabe592675544c05752d9bd076a0c73c7c20694b4d96ef791a8cf0092107be48d0153fe8dd4c0ce54a6e6e85e78e8019513853448fed9d49b7b73baea4
SSDEEP 384:sxRLJkq/fjVsHWv0UBaSRiMCo0/5JJIJc/IsXtDb:sPeq/fj0Y0UEDzl/5H0eIsXt
TLSH
T1A182D9166934597B8CD7D21DFA857B63D7F91523A1905E44AEFC8B0C02E76EC620382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 2426cd2671506bc06a26d2a2258f65e030ad405bf5187ef0a85080fada8ef1db
MD5 5c0968d214e10f014853c69f7ed154b4
SHA1 ec0566cff513ce2f27563bbc11940d39bde75a8b
SHA512 7f30cf7308d5e670265076538bcaadabcc389a67198a2eaf5daefae65fcfff4b7b6c761348d3c9996c208e71ae8cb017bceeea48153b768626eb453655e94851
SSDEEP 384:sxRLJCq/fjVsXEhBaSRiMxo0/5B/hPsX3jA:sPIq/fjXhED2l/51hPsXE
TLSH
T1D772E9166938597B8CCBD21DFA957B63D7F90523A1905E44AEFC8B0C01E76EC621382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 6928f174ecc0be6584c37ef276dd66c4d3bf9807f7a9bf45b613bf61f54a9764
MD5 22bd5c11753108d59364b95b8d48392e
SHA1 dff782cfb7657567c0f91ae3f9fba61f7c3a1ab2
SHA512 3a9855e2d5f0bb8711879422a6830dba7705259f5cdd5d8e17471d14fdf61d2a3817dac10f1d7fb254d8e42c418a14fe63d1318e1723bc5ac10c4ba84797da28
SSDEEP 768:PRbg3u7pLuL75sWgtVfwp8F1+UoAYDCx9Tuqh0VfUC9xbog/OV0okUfYHrovzBS:PRbg3uE75sWgtVfwpu1jarokoYUvk
TLSH
T114E2ED7B680CCB7F4F804EDCEC2ABE9A6DD802CB56D8C95447EA840C03C66EB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 9139c4864759ee3ff2cebfeeec1ba98ba72ea79a6c67a59672af7f2a7f0132dd
MD5 edd3700fd51e5e1cbe014317a5f337bd
SHA1 b4a7a1c3b3aea8045c075f06732122312f41cbb4
SHA512 b13f6f3ebdf4c2facc517801851578997ede95f244fe8bfa978ea482f2f788085052706e46a88f8bf5db3958d796b9f8518e8d647020733f4787aac64f563524
SSDEEP 384:9Xu7n9ZdQBcLfDd3Vof/sVnuRMFxn//mv6hRRL3bKlk4aIs/e/n/i/5/5/p/T3/i:63bU/YVVlTv7Id1gr17Ajd7OLmb2BrBU
TLSH
T144B28C5171BA2B40383E280E93B9841F5A46306230DEA96B7B6931E56F67F004FFD6DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ef44a594363d12168d9665b3500c087a920dbe18041718a3a9ad2ca542e21a75
MD5 70bf3590968a80fc94c4e68a82c59500
SHA1 05bd52f09c638b9be7bcabeb7fdeca48b341fab9
SHA512 bfc91b65137dc7d28a045925c5e9a47ef3c1c6facb4c0cf950bdf93ada6e75a4a48e16a22b557ec4b35f4ec4101709a610aaedbc948daa005ac588b0751f5e5b
SSDEEP 384:n3iFmtNn/s3n9S/D8NW8TUNTUlIRq0z8qTPOfnsGwPh7hU8xXhFv+R8oKl8BhBTN:yFmj+9OXwg1lGYI4xFc8oKl8BvTPa5E
TLSH
T13DD24B32EC55CEA7ACEB8FC9B74A7647EEE401A394885DD4DAD85E4D00832DD130BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 bae4359b068071b6cd224c948160815b48dfd8c2423ace38f413858a6f6cacef
MD5 4de314ea7de28015a55554d42b3180b7
SHA1 c5ae23eca0f5d71bd293d17688cfb7e678c18a90
SHA512 247f71c3f316db629092586427e500e84ca6fa46b5325163c96afd1c6610b24726937055649c0ac541947ae02e955f9bda0e2210cd76d483de0aaaf0dc7a2fe6
SSDEEP 384:nkiF1tNn/s3n9Sv8N78TUNTUlIRn0zvroPOfnsGwPh7hU8xXh4Mmn15wbAjEJX8B:/F1j+9SSwgKqGYI4x4Mmn12bfJA
TLSH
T1DBC23936D854DEB7ECE78FC9B70A7656EEE00267859859D8DAD81D4C00D32DD130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 469a61d8cce3d63664aadc15551f032c4475cea09bbd85370104b70bd01d6842
MD5 3ff5aae0e9a9e048f83e86c67d5469fe
SHA1 8461f590454cb103040b0f1b6ab1871d0ba8c390
SHA512 b08fb50f22711e972dd4ccced0dffe202e370c8e93903db5ba6940aea7c5a6aa16154b77f2d5171826fc04452665e1c59491d36dbf5526d06d85126718cce117
SSDEEP 384:niiFmtNn/s3n9S/D8NW8TUNTUlIRq0z8qTPOfnsGwPh7hU8xXhFv+R8oKl8BhBTN:pFmj+9OXwg1lGYI4xFc8oKl8BvTPa5E
TLSH
T12BD24B32DC55CEA7ACEB8FC9B74A7647EEE401A394885DD4DAD85E4D00832DD130BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 a86dca0bc1d5d9e6f69566f597f9e2e9dadb103c34ec4219a8c717e9f1de6145
MD5 774b3990177d64f3475c64629f44c737
SHA1 f698628ec32fb42a328dd2375192cd23a6f6b759
SHA512 4ea54739ccaa9e0569c3a84d08be8085342bf4009414d54dd4588e42cf5008e0835e1d6d5150425d6fded6b41df44eaeb2eb5cbae47aaf082d6bdca5a13c7d18
SSDEEP 384:niiF1tNn/s3n9S/D8NW8TUNTUlIRe0z8qTPOfnsGwPh7hU8xXhFv+R8oKl8BhBTN:pF1j+9OXwg1lGYI4xFc8oKl8BvTPa5E
TLSH
T1E0D25B32E855CEA7ACEB8FC9B74A7647EEE001A394885DD4DAD85E4C00C32DD130BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 ae44429eac748dcfdc423a7bbbb98e3c05a700be8def629721fecd97afb349ce
MD5 3ca7ed16225a837cd8a7933831ab64a9
SHA1 e520d4949f04281f46976349af26162f83577256
SHA512 a53adad512df992b570f63adec3861324b2dee15d6d7b2168604717de4f3ce030d83dbf6400af728d46541c785b788e11c88348996a1d97955d2a8062849b302
SSDEEP 768:qFmj+9LXwgwSGYI4xFcCWU9bJKl8BvTPa5E:49LLs8JKl0W5E
TLSH
T1CC03A2F998D3897BD89E6B8B533D2D1659BCC227B4685898F7880F0CCC6217FE306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 eab7214a23afe154729fd5a792c4c093dbcdbfb0300d1942c63ebd09e7eb07ff
MD5 c922caa92e357f994206ffdc522d5fd1
SHA1 1337884a55723c9a7f9cec6baca1aa0d91dd5cd6
SHA512 9cd6bed51e2ea2b11b34c404c6fdb562a1e6bd440f268374cdb1f5332deb28b9189e704ce8c7aca177ac04aa8113db5f64793e3478923fcb3aa6456d6436cfd7
SSDEEP 384:nfiFmtNn/s3n9Sg/D8NW8TUNTUlIRq0z8aTPOfnsGwPh7hU8xXhFv+RSoKl8BhBh:qFmj+9RXwgplGYI4xFcSoKl8BvTPa5E
TLSH
T1C6E2B3F198D78977D89E4B8BA73E6D4699FCC163B4885984B7D81D0CCC821BFD30A819
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 23b4714ee48afff8f75cf463c4923f00195edc2b010d7962da70b3e064eb3403
MD5 cec4dba36fb476b49ed00fa02f34c042
SHA1 41f0c508dd1f0fc6fc897d348e49fcd111fd24b4
SHA512 ff5b68f48d08ac54bca49cdf815b813dcd17405afa9b762a8345277465f016ac4fb35f2e51f760f69e45b564f020017503e3e6ee9f1ff3813a9bc47ee969285c
TLSH
T1DC3120E15D3D1AD1C4BE0EBFE48B39FC84E8D712F59474392888ED98922E91E154047F
MD5 SHA1 SHA512 TLSH

Submit Download

BurgerWorker.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BurgerWorker\KViFU+Z1eTRgb8PSk+++KuLKmRQ4+cU=\BurgerWorker.dll
Size 20KB
SHA256 2182f4b0a54ad92fd9f20af5e776424f94918e54d21b8f75184fb12099bd3a85
MD5 2ca23190c3eaed6a103badf7993b0143
SHA1 6e42329a7c521f11743bbf65f8b0623984c3518b
SHA512 7170d15642892b3df70a13da7a43b976f9db1da9b07828d05441ee03f61cd7154f5665ba879f641fe5b1b7030e47fee79edbdeee836db73da51cd948002b3817
SSDEEP 384:gtVB/wFYS4IqptYcFwVc03KFc78SB0r2OnA/WkSFbOxxxxxxxxxxxxxxxxxxxxxB:gtbyP4IetYcFwVc6KF5SX7
TLSH
T13B92F705D7844215FDB142785AB38D6B8F3BFE166961A7DF344CB1AB2F723C282A3851
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NetDiscordRpc.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BurgerWorker\KViFU+Z1eTRgb8PSk+++KuLKmRQ4+cU=\NetDiscordRpc.dll
Size 178KB
SHA256 0e569f2b81e4b795d323f456a3e76e7b733c12ca840ac353de85417d80b12667
MD5 1f5c8c7386892eea3a6aa70ad7aeace8
SHA1 601aa25bafbda622aedff9931437c75b984e03a8
SHA512 08576ef29f224875c04930be1a034a1606e2018432fbbd1a5ad89ced44743ed1e9d579054c164792635218010624fbc1f37e7549f7cf1480b07c3f0b74d297c3
SSDEEP 3072:HxJC4kXsNmaK0lIl26o0VtGs7i8Y2AIH104i2W9+mZddWs7fSB:MYm6OE2AIi4i2u+mTdTjm
TLSH
T15304271593E84506F6BF977C94B3C20187B7B84A6721C3CB4664A5892F57BC2BE32732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Newtonsoft.Json.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\BurgerWorker\KViFU+Z1eTRgb8PSk+++KuLKmRQ4+cU=\Newtonsoft.Json.dll
Size 1.8MB
SHA256 c69ec2bb5e2275a3c7b5a276a310ac0ca59c1eef33aae345f8586e2921f72006
MD5 e56ff0ce43155049e4460bc41803e9e0
SHA1 b6f4fb5f94c69dc99b14e9c40ee329d6323b3a1e
SHA512 4c8d131c8118626b52a6641afe122b3af743f013d9b41b84df5f33a01ccd468e1cb405a704d305e88d073bb13cc3d6b0671c12bf87720899aa3c55af0c9698d7
SSDEEP 24576:N99C8jMjYpHiFSsqeyQucw/PuFBG4ZjPSduVNTpm7PppZCadycB7jW5JMta1Ck3Q:N99CjFSss6xAAcB7jAtBr
TLSH
T161858D06E3D8CB01E9AF56BD9D325406C6F1F15B2361D6CB1404E9842F57BC3AB363AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\AutoUpdater.NET.dll
Size 248KB
SHA256 91f8f0038d5f6597e32229353116dbcbbfa8b1991a22321af4ca56c86de69e09
MD5 272e9904ebf29859c9dcf549320661f5
SHA1 7ab1613570303aaa1bc60603a7f74aca68d496c3
SHA512 26e4d98467df60f5956968b8d11cc081921ba1292235b98167f83b6173e43520f57b05f3153c2f8a33e6ebc530dbc5300162b14fc8001af9d762da7e70936098
SSDEEP 6144:Hl+tHMXIsl0eG2kBiJysWUL06jTwzrm7:UHMXIsl0eG2kBizC6jTcr
TLSH
T18F443A02FFE5C325C1663AF5983581A107357E96A900CA6A34B8764E4F33267CF6276F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BCMakeCert.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\BCMakeCert.dll
Size 600KB
SHA256 93ba40952f4be52de0c6afb0d66e8c306489edc682ad4515fb12cac8bee2630e
MD5 404918448fcc85fc40193430d0fc2580
SHA1 f01ca0b39a3bfa2e9c47ed2ecc7a033630c1f002
SHA512 ccd9a3014d8b6b424ef70efe0350fb75a19e8d60e2db277436434144b5f37bf0fbfb2b31f7f49ccb4b7b8d1185140fcd2f480a094392aeaa1582eb2560027878
SSDEEP 12288:lx97VGJc0V51wlTLau+3pgEkH5HBiG7LRK5H8:lx9L9au+3pgEkH5HBiG7gx8
TLSH
T16ED47D08A7F41326E19ED7B5C0705865DAF0F029B26BEB5F1CC276FA5953B128C41B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BasicFormatsForCore.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\BasicFormatsForCore.dll
Size 145KB
SHA256 f60f48e8a320b6fa2760d2f8fc5dcd5dff2fb526f967545dd2d620d09b9c5675
MD5 b5e3cb1cac8689c46633460289791f61
SHA1 c4f904be98a59a3a9154c8a3c36b62d66ee530c0
SHA512 45501bd2a58cf4e9753c464fc9adc8c92d43a963caf957de3515392ad68649ce908224f513159864686576b71a32846b2b1155c2a48ae189a72f643cd86eb67f
SSDEEP 3072:zM4HNvwUesP/3d9r9PM9NjeilcwUP0s8nrV+YHOyjO6njKr8iS:wIwU19ziWd+/O6nji8iS
TLSH
T1E2E36C4833E85600E1FFAF7A95B085114B75B516A973E79E0DC490AE2DB3781CE64F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DotNetZip.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\DotNetZip.dll
Size 234KB
SHA256 309f84521fff1f48c3509f7110f1789347a272501992c79af3ef6e6d3b3de7d2
MD5 efadf1780d4ea45d067f7163c4c7a80e
SHA1 a460c0033a007ff979a66153e501023c5d9ab514
SHA512 b785689b51d4be82390fc3b582ba394044dee7f154d703ad4dd688d1c67acdde59d8c51326cdb47341e4576e24ae4fc19b19e43b285dde25b1716887f332249f
SSDEEP 6144:h5S2GuvzjoNuTdR/jZiWAzLIUjIcOF8sszR2:22PvPsAT/b+cF8Tzg
TLSH
T104345B0423ED4F6AF6EE67B9D0B59192C3B2B46134BEDB4E5D4460FE18173A0D9107A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FiddlerCore.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\FiddlerCore.dll
Size 774KB
SHA256 e7e7572d2c3028ffaa0b58c765a526525b2bdb5cc9696045e34f36b01ba847fb
MD5 06b6694b72df565e06e919ca4570b20b
SHA1 e4d2f2b7b6292cb2e8047f8eada5ac7e12e44743
SHA512 ad8c7d0a1e34067c84c539c56aa134ed9cc1963ad15647f48ed2a1be7b779798388371cf330457d3b1668b4c93d57a99db135cef88131b97530376b80e44a683
SSDEEP 12288:qwgpE6bmSuMZVnSuBbYSdTHaEpFdlYRdEI9VO:q/Y0f0OHaClYRHq
TLSH
T10EF4061027F85A11F2FBAB789DB225008BB9B896ED25CB5F0940C09D0D72BA5DD52F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FontAwesome.WPF.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\FontAwesome.WPF.dll
Size 204KB
SHA256 63d50dbe094bbce5d7bf8af08c0d919cfa5e057ca05ae7b27704a8477c8b348f
MD5 2ace85429eee9e8320c82d878e5562b4
SHA1 77ed8b89210930d1de2495ba363519b696d0b6e2
SHA512 7ce3467d1469acdb544f4f42864d94c5ae0ada252c5f096329e16d4b571fc1800bd572e52cfe902ee5d4b91d59a1a4182b07f40b7a4dfe54e338ca46684af989
SSDEEP 6144:Z8P7/P97ilHDqO01ktQOzB4YjDnX08RYA3fP5S:Z8PpilHD+kQA4uk8RYA3f
TLSH
T1F924C077B640664AC6474631FC0BB74221FAE1629D1F4B16FFC4A98E3296B504E22F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Hardcodet.NotifyIcon.Wpf.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Hardcodet.NotifyIcon.Wpf.dll
Size 101KB
SHA256 2059222c4ae5d0291fce13bd296adcc448d79b6fae27746aedf347608ed3090c
MD5 2cfde828cdbfbb545be5aa61fe1e62a1
SHA1 d376bde7322118787f6f08131ab34a17eb711789
SHA512 2a1215dde4bfc4626cc4fe9696b6465a0893a8787ce4ff41ca0c08908bb8aa52a992a156c3320deb0fefb225acb4c3132286d8c04a0caed93282b86adc011cda
SSDEEP 3072:5oy+75OQW4pg9xXsGQTckaX4kGsdO5UInM34:5+75ON4pg9xX7kzsTInM
TLSH
T1B1A3CF8523FC405AC1FEA73478B532148771FD837A61CF2A498262B849B77D91AD07EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.Core.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Microsoft.Web.WebView2.Core.dll
Size 461KB
SHA256 c6feb73ec1cb9271f2004d2586fe1833621a0fcd3d04a6fc1dcf08557d634ac0
MD5 0901d7f2f8b621433f3eaee6a63cb8d1
SHA1 12bf14a2ad26f568f78e4a9304234a6a990757ba
SHA512 e428770009468c5e48e843031758d2ec2af3ceb3c0614248b17e90105415d7ddbf9783e5cfa77738731cf3aceaca788afa7405944dea0af3247ac5f0a4638b40
SSDEEP 12288:5MYWHzByTrx3YSi+iKmRFNge1+imQ9pRFZNIEJdIElxPrEIgcvLcglxMwCepM1SW:5HWTBFI
TLSH
T10DA44F2223FE425AF9F37F75557412204AF6FCD6B93AE75E0998A16D0C32B4089A1333
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.WinForms.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Microsoft.Web.WebView2.WinForms.dll
Size 37KB
SHA256 983a69e9ae41e7cc91962704a903a2c2dd49d464f243a7d101d0b715f723f1c6
MD5 f696f28047246a651f90900475186ea1
SHA1 f87c665f212a7b8b3393060ca84d2e576e6bced6
SHA512 45588b89a24f3db2b5a56bb841480b991efeef9f4778b10e4b8a9a58c651cc12be81c8bf1ceda5badc0b76a03046bdf4b457a00130e1ac0e93cf724e71e756d2
SSDEEP 768:qN9HFciVtBZDgcEST3p4Jjrjh2jJ+SG2auxvxJKia5/Zi/ZGQKqu6bX6uTHRt8cF:29fVtBZDgcEST3p4JjrjaJ+SG2auVxJD
TLSH
T1A2034B0083ACC617EAEB5EB8A5B485620B7ABE837D60D39D5C88F1E90DB37E05514377
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.Wpf.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Microsoft.Web.WebView2.Wpf.dll
Size 43KB
SHA256 29f6e7dac224fc0ba91e45145e209fdb18c985781280d778aeedbd1ea885f137
MD5 c83529d6c90dc9644779207d81bb6539
SHA1 771dcb61c27bdbee4b749ba6d831107756412f77
SHA512 e42703c1d36c21542ccdef6071d2699b50fabec327b8c4db87e3b830fcb40e7d3f8ae3e951cfeca53c2297089b417e199be07105f199335fd3880ea816424cad
SSDEEP 768:k+Q2cVseHJ4Wgs0WZ8lBDP/ryEH0yBy4JjrD1h2jBhsUaGzkI7hKKa5/Bi/IGCvS:NmseHzxZ8lBDP/ryEH0yBy4JjrD1aBhl
TLSH
T11213289543EC492ADBEF6B74A07496610A3AFE437D71E78C1AC4B0E50EB77D025403AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Newtonsoft.Json.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Newtonsoft.Json.dll
Size 695KB
SHA256 22c649f75fce5be7c7ccda8880473b634ef69ecf33f5d1ab8ad892caf47d5a07
MD5 adf3e3eecde20b7c9661e9c47106a14a
SHA1 f3130f7fd4b414b5aec04eb87ed800eb84dd2154
SHA512 6a644bfd4544950ed2d39190393b716c8314f551488380ec8bd35b5062aa143342dfd145e92e3b6b81e80285cac108d201b6bbd160cb768dc002c49f4c603c0b
SSDEEP 12288:mFIM0KteTMN4Or4D3OdmZg5WHEaEDIGBBjgrIQtD+tVqDMW:6zMTMNNd+g5Wk78GBBjgrIQtDF
TLSH
T165E45A2123E99B2BE0AF2775B032491647FAF542F6B7D78F5604D8AA1C43F558D82323
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Steamworks.NET.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Steamworks.NET.dll
Size 365KB
SHA256 a61778cbce992f1d3ab48577d8c6c1c43778727b6127cdfa8b97eccc353ce6ab
MD5 9cad80b5a72727b344d5fb46734af788
SHA1 e83420c8b362944f9fe861c808172ecd7057030b
SHA512 0e34d5f47398b52005cd41dba28d58a2e8128ecf3add668757c246946cbeb5d4d8f72d67c5a36f6d13ef8b2e30248b035630a444c3a6bf040978d338d489e927
SSDEEP 6144:38Z9REsOmCo0SIepPqX2lbRbRU/TB9nflJxSpbnk25pRk/9:38Z9q8tqzvflJir3RI
TLSH
T13484F82D7320793BC029433664B75E0BE6A0E4C2231B6E6F764249395DB77C49E3B2D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.CodeDom.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\System.CodeDom.dll
Size 183KB
SHA256 7b2ba5ede11ae8ac2d1d67df100fbd23e45558f8b29cf7ca767bb41d4f88281c
MD5 34f6f6df02024f033c0d9cecc9e19f5e
SHA1 0f72071a867d7ca61edac4cc70752ef608fe9926
SHA512 5a7e9d6c023cbc4de9360686149a001e0b6192580939224af193e952d1e62e3e0ba3577cded85f012d90678bd681245bfd25ff258d596c235a5c3afdb65b21b8
SSDEEP 3072:MFxaB6x7l+gq0WENWTv23phTvrgnlLXb8EVY3H+1Rzbbh1pTiWk:U33hEoURwE23yRznV2J
TLSH
T108043A713398823BCEDE5235E0A9405042F5E56A7382DB9F5C8965FA5E23F60ED20E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.Composition.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\System.ComponentModel.Composition.dll
Size 262KB
SHA256 7e65f888588c79f69acb593d9b39990c33fd58377fc48300a0a93fc8dbaa159f
MD5 e0bab5ab0d5835d00acc36eda1a4e3a2
SHA1 3b4dc4b656922e71deea58d7e4f51aa68e6680be
SHA512 e3faeae0346a62ac0f38ee42119213b39c4d1fa2372ef9d02514e95050eac70a67a92edf0019392642e3a08964e2a838edb8629e4346f5b68d40839173416733
SSDEEP 3072:DJDT6qZG065+dP14WQuE3pu4Y62v903SoIrEjFSikDdLRKVgWjqrgKQqktCsa6AP:1Bd4WQoCGmSoIlRA4itCsa6A5oM7
TLSH
T15944291237FD1366EAEF1B7CB67488118AB5F962B50AE74C2C4994FD0963F908521B33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Management.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\System.Management.dll
Size 288KB
SHA256 75b833e2aea56dafa94f0d2728925db405f9dd758ff19d43924a7a268202c94d
MD5 bf74ada4da38cdb4a8decbdae77249b7
SHA1 bb419a9fb2b61bd2ab00f10266635cc47a9e0ffc
SHA512 f0f2ac9ccc3d217446fed2c2e78a5e503455cc7ae60f060a05a1e160109cdd542e75f6b044a7d5a356cf8fedd4ad15cf92e1df1361373fae7f55b6f923fbde3a
SSDEEP 6144:Xd4rRwgJrgMmbwipdLEoWkFPMcBIABGBcz7:XqrRwWiUA/
TLSH
T10D543B3037F8C196C5BE8EB9A03011948FB1B3AF244EDB9D5562BCED28B1781D65712B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Telerik.NetworkConnections.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\Telerik.NetworkConnections.dll
Size 67KB
SHA256 14a8afece485815896fc9f098d66b0457d1be374b10366b48c706dfdbb275094
MD5 f442ae4be024c27c59ef737902303a86
SHA1 c8191737225509a110a6fc42f9e0291fd6576c8d
SHA512 8b3f768ba5232db3d5355e8d4a719597f16f06a438f39365e494df4b30125f433dacaab5aee2bfbfde910c4b86ee0ca6903c703863b28c5d4a39c62103522af6
SSDEEP 1536:qpjTrvVmDDDy/WTAAPfi82uA+J+GwclhzF8FgaUK:qpX7VmDDDy/WTAa68JBJ+GwclhzF8FZX
TLSH
T158636D4133AC532BE7FF4F35A0B6A21004B6FB55BA23FBAE145450AD5C627C126217EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\WebView2Loader.dll
Size 156KB
SHA256 8d6fe8b14529e1d6a02a7f2d5991ee72ace0d7e2f1901c71cfd7df310600f4c1
MD5 e8894bce4a8fbd1a059023b3b3c7849e
SHA1 5ce5ea789dcfd04effc7ec2aa40d704bb42cb31b
SHA512 405b90498c9b71c0514129d72ff1bac345bca7188cd268ee3e6aa4ec6529f94ab91ea271a6e8e6d7e9343359e6e7e9fd8b275fb761abd14d100a36201e0538ab
SSDEEP 3072:rKLKQDEW3JHtcGNd/SzCzkYLSq9hX4qSd/8SALTcYrEtnWldxVKW6:mTBt9Nd/9d18qSyEtmG
TLSH
T1D0F36C57B3E5007BE1678274C9934A56E77378510B60AFDF03A482691F237E4AE3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\ar\AutoUpdater.NET.resources.dll
Size 10KB
SHA256 cf2b1c3cf607e7884fe8dbeb87b74ce6c42f4536fb92131704df5abfad96ecd5
MD5 15f7af014cf402523f0f00a2897158b6
SHA1 e02d2ccc3c1e278f822ca303389f7c41aff137c6
SHA512 334e0644c29be7f6f0c829a31ce730fc93a0d2a1efeb8c35dac539e0a539196910d664ef082a167d22b7e590527fc8ea2429e99f3fecfbd0e1d02198e46c16ba
SSDEEP 192:fXhMivXhRlfM2j+jurjyjYtVfXwiRx7ofVsXiFRqe7eKMw:iivXhRlfM2j+jurjyjY3fXwiRKfVsXSr
TLSH
T1E72245122BFD5275E5B39A7694B66194C63BBE72DD21EA1E0496010DCCB2317CBB0F32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\cs\AutoUpdater.NET.resources.dll
Size 9KB
SHA256 18b1eb31160b5d3ef6e8424204dcfdd2df69a48ff191f08810fd01a95bf3f9a0
MD5 2a6292b0c3bcb81a18ae8b44a275ee96
SHA1 a9fbfc94728909d9909e48b60dcdd432460dea4e
SHA512 39d213392cc638e9fa786352e12d0353fc96112ad2d19bf031382206cc028d5f7d4cae29b4ed402b2ccc651717c9f1b3c808ea556c095814fc6bd331048147b1
SSDEEP 192:D8hP7iLXYgXY8M2jbju/jTjjt2M9l87+EXRgXCeWKMw:AjiLXhX/M2jbju/jTjj4MQqEXaXCeWY
TLSH
T1171251122BFD0239F8B35A766A764190873ABB71EE35C66F0495010D4CB2356CEB1F32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\da\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 3d1dac05f707e995b1fa1a1a1c89dff452036fbf20273e6334afbb4b00033aa6
MD5 cfdbc013e1ac53ef5da16582054a4c58
SHA1 6831e26ff9ae73c210ded5379be3946918d33f01
SHA512 626243ad4a05c584771773d5d8f494a65d4d7cbf5571beba293a09b909d9d5ca82167605d7ac03486cd48bc2ad93776734d095f7ed064d7b1f1c07fc3ea4bda7
SSDEEP 192:KbXqigKM2jbjKhjOjD9M7OWLvoRGKMwi:figKM2jbjKhjOj5MqW/Yi
TLSH
T196F143136BF8433AE4F36BBA693A5255863AFA76D930C62F4484011D5DB37118BB1F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\de\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 408bbd72954cdd8e830ebd0787f9214405b5acc15d06c3336d7015cdaebb71ef
MD5 cb9f885e34df02e77aeb8d304019a372
SHA1 f9a787fa782799e4a84679ed18fc51041b451954
SHA512 f2f3ad6687a61f43d8c974934b5cb6e8eb74b0325c1bcee1eab5329e9a945955e3490ae71961525509c11089e0077061ce74fe274e35551bd2a9f41161769a3e
SSDEEP 192:f7hjFiYEM2j6j+ijAjD3fUMASZWLv6aIBKMw:PiYEM2j6j+ijAjzUM7WbcY
TLSH
T1320275122FF9423AF5F36B7E197641559A3AFA75AA31C61E0580111E5DB33228F60F33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\es\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 d689092b0e4d74e1a55d0c6fe43abf65580a3fbf52b3b8368285d8639b1d2cb7
MD5 7d94426173a5be2b84fb5ecbbea4ac86
SHA1 75d186b84c28ef5ebb088a9a7cfaecde7bdcfeaf
SHA512 708a94708f126034829e5ea2f2a1508420cce0660a071f10ed3c59800ae2736ac9e871061a593dbd98aa46843d309666097e6275d5be45bf05a3bbaead04e3da
SSDEEP 192:5GhlB/igwM2jGj+Ej9jLXdMLfMmihMn5sWLvaGNL1CBeKMw:Yv/igwM2jGj+Ej9jLIfMrUGWGKweY
TLSH
T1F00277126BEC0239F4F36B766E7645529636FA75BD34C62E4080020E5C72746CE72F63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\fr\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 2fb47dfb09f9f24585b8bfa71c773d855b93744dbbd8c376ed8c3edfd3f36064
MD5 399becfbbd24131839c31eb023556e47
SHA1 6e2c7c11e256f534e87c1868624774a2bebcb05c
SHA512 e1425ead6674ad37e59908675e4fff42bb3b184fffa00f3cea19e4faf63e26c7901958e55d449ba3713689870ea1a4ee0370f6b99fb6a3483f5ac1fa74397e1f
SSDEEP 192:mW0UiHxoM2jcjiZj8j7qUCzL4MpCWLvxOLVVKMw:ZiHiM2jcjiZj8j7qp4M8WWbY
TLSH
T17F0263072BFC126AF5F36B766A7692518637FA79ED31D72E0481020D58723118AB2F36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\it\AutoUpdater.NET.resources.dll
Size 9KB
SHA256 eea2adbc5356ce05b2d9fc418e99ef0711e9c7fcdeff3d0c6d85c3758a49a75f
MD5 0c987d6182959a0a9bffa4ab31f08c0e
SHA1 e39e497924d8a0eadd514d47ce47cd1685f49b75
SHA512 814b171319f85c39dab237c146f1d811f303fd982ca919cb7e418dfa49dcda145a0f75d436409b4b0cc82381c019558a400932227faa54adf97652c5e09bc5e1
SSDEEP 192:KVh35iwkM2jUjf8j6jlV7MDAP6X/aBXjLxu7KMw:GpiwkM2jUjf8j6jlV7MTX/aBXvE7Y
TLSH
T17C1264222BFD0239F0F32B7A59765181977BB975FD20DA2E0485010D59B27429AB1F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\ja-JP\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 3370fbd2efb274b714a02ce32b3b642c65fa19a896f3ed7ac0a9502fe7d6beeb
MD5 39605f921bb6d87527972f23f17f4e7b
SHA1 eaeb878e8a12d36cdffb0b605ea3dc8181d4dc82
SHA512 5afaf1f311c54465b0db0e2c8bebbd7ae01239d9bc9f30fdf2ebbd68d2026c51d1e970ea6d0d6966f8410f909375b3879f8fac1bd8cc45f6e9ca1a36717ad390
SSDEEP 192:05qdi/h2uM2jijfjjOjdLMaXoWLvIKMw:oyiJhM2jijfjjOjdLMXWkY
TLSH
T1D802632D67E8026AE8F32A72287A52818536FE75ED31D72F045C811D6D7231ECA71F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\ko\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 c5b8a8e7da93b9b50d3a1ef3330035b41c514ef6f361188be97ac273716919ac
MD5 9e6898093a38b2c4da2d9cdf2dfd13ed
SHA1 936c0e03e4d8d4f5b5023694d47e10c2ed393096
SHA512 84f9be33177151418cd7f125f46508538f2d8b36bcc2c739ad6e5b528a24c25f0907d4821c3060e316ff048bf8a7d0965744c56e951170c091f72f1f018224ce
SSDEEP 192:T2C1gid3M2jDjDijDjdM5IirBWLvl1dKMw:rgid3M2jDjDijDjdMlrBWZ1dY
TLSH
T1E80284921FEE0279E4F36E7A2E75A241867AF974FE32C61E4844050D9D723128E71F63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\lv\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 b00f6217cb875a0daedfea0e00d3311d2608d03c0bee74d524d177de06f4da74
MD5 224ffe50479ba20cd6a210d5ee920d7d
SHA1 322147636cf8b1c1c2d38f3fc94e8632a6c9a7e9
SHA512 b93a7335970f293f071680e56e8710f904c12f129d07144a3c83c7baba3186573514c751ca11150b65342f20b274beee7ba37ab63654fcde0a502d13d1c92547
SSDEEP 192:Kh0UmiwRrM2jtjYUjCjqdWMpHsejeWLvtrEKMw:O07iwRrM2jtjYUjCjbM5sejeWBrEY
TLSH
T1A10252222BFD06B9F5F36AB61A76915145BAFB74BD21C62F0485020E8D723158EB1F22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\nl\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 6e9df964edd743039174e6dffc068219e59f40cafd33902581e74a08dc72edf2
MD5 77b89a64c5aeb6f43ee89f87c46f97a9
SHA1 6b479246676ee768010a76baf36cc3197afa6aa3
SHA512 70dbf04206eccaa9c8998a7b260439e77554fd93b401540f17f2d3fd8bfcb3704c632d4c50162c2c944a5a025d47254012333d11197027bc15ba836fd213c448
SSDEEP 192:55OqiyaM2jGjEnjSj1iu+bOFMgNscL7WWLvPMRKMw:viyaM2jGjEnjSjEu+bOFM9cL7WWDMRY
TLSH
T185F185172BF9423EF5F35A7A58768292863BFA75DE31C62E4444021D5CB23128EB1F63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\pl\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 a041069ac5e288d2704ab670efa6753dd268bf86b3223003e4e094754a337936
MD5 7f9bc29eef52c3b890c5b1e245626952
SHA1 c1592857e7e023a22eed970f66c4a84d80c58ec9
SHA512 c9a75131406961f20fd9807fe9168fd36c2859f9879f31841d3a10f02bdd9614fa41060135fb01b1f799f2263c7a647b60a0e83ab2d215458e36d67f9da3ed3b
SSDEEP 192:EJU/WiYeM2jDjUwjej9ul8LMfK6D5WLvN2JKMw:siYeM2jDjUwjej9ul8LMy6D5WRoY
TLSH
T1320285116BF8023AF8F36A7A6A765255893AFA75EC30C65F4441110E9C723528EB2F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\pt-BR\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 ae81bc07e5daf06825a77b68d5ec12cc5998348c2a73bdbf6d5e6fcef9d64f70
MD5 0eabb0e7abd788c23b3c142fa7fe51fd
SHA1 6d6495bdf98765cb0e1a9d61f636d34a3feea9f0
SHA512 a8eeae1b31f7e14db61146e535e4ab1d16bdb66eb2ab9f9d5ec9df4bf16c8a65b1ee31b2351022f4c464149f0b4af633d099b0f39639dc38d19e7fd591c4c820
SSDEEP 192:p+3IilOM2jnjmzjtjmMweWLvF2i82OKMw:k4ilOM2jnjmzjtjmMTWxYNY
TLSH
T1A10263222FF90239F8B32B76593A9612963AFA35ED24D65F4581060E5D723428E71F33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\pt\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 1212b1aa059492afa336dcc83a96a409f9d00198f7fc20e340f60619cf3f63b0
MD5 67817d2edd9b0675d4f7485700abb972
SHA1 ffe63a1bd069b684bf38541410ea5e551cc19c20
SHA512 7e2b80cf825f1e989a0fee378a9f7bff048a950df4c7b12a154ace1c0b363e699f944f14cc646843b1dfface148986ebedf07193d88b0f759f5be0bbffdac0fb
SSDEEP 192:1NhIxipGXM2jUjlvjJj/JMsWfWLvFmi8lLdKMw:JEipGXM2jUjlvjJj/JMzWZoNdY
TLSH
T15F0275222FF80239F4B36B76293657558A7AFA75FD34CA5E8580060E5C723418E71F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\ru\AutoUpdater.NET.resources.dll
Size 9KB
SHA256 97314053709366284705558e17873ee11b29eac1344306c851c29e4e559fea55
MD5 f96858ad3330d500c34efceebee620db
SHA1 7f07b4ff7035a33ba5b9c1c65a7aa9363e6714dc
SHA512 dcfab9ee51b6c71848c1c4784030b435e66416ab6f3f36c5f5c4a0a452b374d64e9cd736a02cd6e30afaf61ff45b9e6a8ce18d522163899f0808aec44394772e
SSDEEP 192:pdhnm+M53i4bM2j81jsJjkjMeLMQV/WLvJNKMw:d6i4bM2jOjsJjkj3MO/WlNY
TLSH
T1661231122BEA11ADE1B3653AD9355A056537BABDBF32C71E0490192E6CF23018A71F26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\sk\AutoUpdater.NET.resources.dll
Size 9KB
SHA256 1408db02419f71222248b0019446b2d501c7e68584fc155445ed7af56074c9d9
MD5 48d1a998361ddcddf8528cd7d8ecd52d
SHA1 5b0c585235dba229088b3cea9ccde5f3a78c2601
SHA512 d7182ddbe61ac0028d8ae3a95e6dc0ac1cbf922f4b931a06d2b8fb42d1ac6576573e6da7dbf97f2075027f4c46dbb75e9259cc9f274a5fae6d435e4d1339eaf0
SSDEEP 192:ZErh+OipXYgXXM2jbjOSjXjbbUMxGcwXRgXF146KMw:cipXhXXM2jbjOSjXjboMscwXaXjpY
TLSH
T1DD1272222BED4239F5F35A765A765291863EFA74AD34C62F4881020E4CB2355CAB1F33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\sv\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 c428be2722773a6234ade47ac9c7977dfea0bb671fdd893efe74b22665097fb6
MD5 31d1028b4630c2e3318a12becd4c0062
SHA1 31ce3ad6fe249806078ab39821993f6675b86a7f
SHA512 f4496320f958070170c05dcbd1729dcda68afc4b993809ffbeb6b593b37d7ca2398e6aca3c12f5397b385b97a650abd8743c63b0b5e30088b17aeb3c67cee938
SSDEEP 192:GhQxiyhM2jIj28jljXkEM+eKXTgXDKMw:6EiyhM2jIj28jljXkEMFKXUXDY
TLSH
T1970294122FF9423AF4F36A7669764295893BFA76AE31DA1E40C5011D5DB33018BB1F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

svchost.deps.json

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\svchost.deps.json
Size 20KB
SHA256 3cba949ef5a94d911b9d3ea6d973691df36d0628e02b0df74d8e39f2179ca5e9
MD5 5dee9e3be8d7d561228f25fa68ef1468
SHA1 9132a32584398adaa3eb7c4c7256ebf2ba6dd7ab
SHA512 426cdd6e68df388f2c1b8ce0eea2ba9df9660b466837a7104209823c34038a375632f152f60f39ab09d343673ed322397fded586937fa33872d03c4ffb7b6995
SSDEEP 192:+4AJleI07MpqWyB2eiUc8gRpKTSoXL4G3Ow:+4UleH7MpqWyWfRYmoXL4M
TLSH
T17492AB25DA849D7742726FA228384282F625536F50016D8F78FC259CDF73F8BA1A2F74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

svchost.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\svchost.dll
Size 22.4MB
SHA256 d307f383e1d24cec5271859be77b3dad20906898ee3a9ea7f5675c7cc4a4dc74
MD5 65cd40cfb6074da4f9bb0c1f50143230
SHA1 ea3cbdb422b82cdbba637cb009a333083706fc02
SHA512 87406b1421465abdc6a660b3084c9b77e142dfa5df14059b9a70a757a4b08c86081f690fd0d8eace5bb1e3000b69efb7e25c8822b2cda0e306edb8800c8040ef
SSDEEP 196608:wzII3rX0Ln/0z/1To0xpLxnRlAS1UVnRPzSCmLlrITKONNCrHZQy+:+NLVJTfxpLx/AS1MVc1ZwCrH
TLSH
T119371E6EE2E08CEBD43E76B526B81B16E29013BF93C19C673EFD915D4F3A1005026B59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

svchost.runtimeconfig.json

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\svchost.runtimeconfig.json
Size 372B
SHA256 1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a
MD5 d94cf983fba9ab1bb8a6cb3ad4a48f50
SHA1 04855d8b7a76b7ec74633043ef9986d4500ca63c
SHA512 09a9667d4f4622817116c8bc27d3d481d5d160380a2e19b8944bdd1271a83f718415ce5e6d66e82e36819e575ec1b55f19c45213e0013b877b8d61e6feb9d998
TLSH
T1CEE02C7BCA10ACB315F52BBAC02AC282FE20232B00004D2A35FC180C2F3AAB30012F49
MD5 SHA1 SHA512 TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\th\AutoUpdater.NET.resources.dll
Size 9KB
SHA256 048a52e5ea8c4a6d8d8cf7ec46c1f41ae67aced49c10d11d5d13ecacef886077
MD5 96b2559351f5d42f05b0e7194cdf86f1
SHA1 90a14dd3e4e82be11ec988eb34c726fde75938aa
SHA512 a9d569a6e82487d048d07852b1ecf11ce7d06bd9796adb457fa436ae83244547180bf10f39f29d18f3d3afdf55c8b7aaa21524a59c1e5588e6776d3a0f215611
SSDEEP 192:0CSstiNOW5pM2jIjMCj1jr5dOO6V8v0lSMjsBv5nT5TA5p5WLvqgbMfKMw:0siNL5pM2jIjMCj1jr5dO1S8lSM0v5n/
TLSH
T1281210632BE941B5F4F22A365A3A7285463ABE747E31F6DD0085115E69F13018922FF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\tr\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 749ebe2660ef8ce869ee88627cb1a7c4ef6f7049b65eb04ef25b610f7f50f9d5
MD5 1066670400388b5812741d8ea461d04d
SHA1 35e01c85f0625123f1a0489790ce87757bb9a7db
SHA512 54652196e76c72a552cbe5dfa2f9af2b351a625970a91b1716e51594b3a3e74fbc898aecbbbb920265695dc01024ed736287b4acb0feab8a8f5613f329be91fa
SSDEEP 192:Bt71KeqiG4M2jDjHBHj/jMaMk6wWLvVKMw:miG4M2jDjHBHj/jbMpwW5Y
TLSH
T10A0263122FFD023EF4F72AB669768166863AFA75F931D96F4441010E5D72312CA72F22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\zh-TW\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 93d21963b12a0553d4d5b1df679f3b8ff61e5fc699acab45266f0cd3e9764533
MD5 b485aff46f1cc1f6418de58d8c281bd7
SHA1 067b3acc70a323a5d4f0c06bb72f09a91350b7fb
SHA512 12a3fedd7109cf4b1d11799d0fd70c4c72d87ca40d50ff3dc23056b20496fe3a8dfed28fb82894b3faceca916c8bb8d289593467990157da562558df08a58569
SSDEEP 192:mkkiJ6cXaj9jWjnjUZMlDdb/eWLv9I8/mpFKGKMw:4iJ6cXaj9jWjnjUZMf/eWilLNY
TLSH
T13EF154266BFC027AF5F36A7A29B54252853BB979EC31DA2F4480010D5D727128E71F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.NET.resources.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\FortniteBurger\JhjmG9HbJqfv7ul11DfeNb5BsuCb88c=\zh\AutoUpdater.NET.resources.dll
Size 8KB
SHA256 4ea925fb369c847a76f2adc2e8b48b17189dc29eb13337865ed63e5fa88f3a31
MD5 851f713fe6a4013fde196b8d9591cff8
SHA1 7a01240bdd955f12cec5800c8184eeb0a439b2f9
SHA512 98b2091ed735d30ab6b8487fa76de66dc24db42bf4f1de92b8ab588e0f9711a30ac87d8751519c900a49ad9166d4beb2d304741dde9b6ab5a319141ef29b96f5
SSDEEP 192:ZW2likKM2j9j7UjjjtMIdknn6WLv+dFNKMw:tikKM2j9j7UjjjtMZn6WyRY
TLSH
T1C1F175621BF80239F5F36A762A7A9251C63AFA75ED31DA1F4480010D5D727128EB1F27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m1wdjvrhhxx.exe

Path C:\Users\Admin\AppData\Local\Temp\m1wdjvrhhxx.exe
Size 27.6MB
SHA256 ad067bfb87f13ba70a00872c01150e48c3672cf2e1cc916d340efc702bb4a64b
MD5 f7d94a9cf512afe51ef658772127e8db
SHA1 0da499dd87ed2d318e91ef2e388291eaf91b545d
SHA512 8f23e77f438fb3f34a61837b0d7a5ef4be9a0b144bc22fcab2a3c65373d2c5d485bf43a669b32eb6c390f9f5c5c8ff523e0f798a4c8dc390a3b4e8788ef195cf
SSDEEP 393216:WqNLVJTfxpLx/AS1MVc1ZwCrHXA3mDDDy/WTAwQ:rfPlASqgrHC
TLSH
T1AC57516DE2E08CEBD43E76B526B81B12E69013BF93C19C673EFD915D4F362004426B69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BurgerWorker.exe

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BurgerWorker.exe
Size 2.1MB
SHA256 b5edd3a53f8cb50d1ab5ddd6979f633b1a6ca2ac53992d6642907e6a7b6c8d44
MD5 2cf687bac91aea27154769ae642f2e39
SHA1 d65c1f3cbd581f091cf36c46b1c89ef32d1ff19b
SHA512 0f4302e023cc36c4d457aea4fd3de32827645f201d430dbf4ac89847eeb9539cbec1e50fd566abf5409c6ea117324d04cb31225c4440496043c7f4bc0095cda7
SSDEEP 24576:6nTS92u+mtKB99C8jMjYpHiFSsqeyQucw/PuFBG4ZjPSduVNTpm7PppZCadycB79:6mUu+mtc99CjFSss6xAAcB7jAtBrG
TLSH
T190A58D06A3D8C711E9AF967D98324406C7F1F55B2361D6CF2404E9842F67BC3AB363A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download