hxxps://github[.]com/Blur009/Blur-AutoClicker/releases/tag/v3[.]9[.]0

Analysis

user interaction
yes
max time kernel
107s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 21:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/Blur009/Blur-AutoClicker/releases/tag/v3.9.0
Sample260718-1d4leaf19y

Score

8^/10

defense_evasion discovery persistence ransomware trojan

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
92	4168	msedge.exe

Executes dropped EXE 4 IoCs

pid	Process
4208	BlurAutoClicker_3.9.0_x64-setup.exe
2460	BlurAutoClicker_3.9.0_x64-setup.exe
5412	BlurAutoClicker.exe
3548	BlurAutoClicker.exe

Loads dropped DLL 9 IoCs

pid	Process
4208	BlurAutoClicker_3.9.0_x64-setup.exe
4208	BlurAutoClicker_3.9.0_x64-setup.exe
2460	BlurAutoClicker_3.9.0_x64-setup.exe
2460	BlurAutoClicker_3.9.0_x64-setup.exe
2460	BlurAutoClicker_3.9.0_x64-setup.exe
2460	BlurAutoClicker_3.9.0_x64-setup.exe
2460	BlurAutoClicker_3.9.0_x64-setup.exe
2460	BlurAutoClicker_3.9.0_x64-setup.exe
2460	BlurAutoClicker_3.9.0_x64-setup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	BlurAutoClicker.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	BlurAutoClicker.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BlurAutoClicker_3.9.0_x64-setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BlurAutoClicker_3.9.0_x64-setup.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4168	msedge.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134288839939489981"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{085AB3E7-B7D2-4263-B473-512517D81682}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2460	BlurAutoClicker_3.9.0_x64-setup.exe
2460	BlurAutoClicker_3.9.0_x64-setup.exe
5412	BlurAutoClicker.exe
5412	BlurAutoClicker.exe
3548	BlurAutoClicker.exe
3548	BlurAutoClicker.exe

Suspicious behavior: LoadsDriver 6 IoCs

pid	Process
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
808	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
1424	msedgewebview2.exe
1424	msedgewebview2.exe
6756	msedgewebview2.exe
6756	msedgewebview2.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeImpersonatePrivilege	2460	BlurAutoClicker_3.9.0_x64-setup.exe
Token: SeImpersonatePrivilege	2460	BlurAutoClicker_3.9.0_x64-setup.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
5412	BlurAutoClicker.exe
3548	BlurAutoClicker.exe
3548	BlurAutoClicker.exe
3548	BlurAutoClicker.exe
3548	BlurAutoClicker.exe
3548	BlurAutoClicker.exe
3548	BlurAutoClicker.exe
5412	BlurAutoClicker.exe
5412	BlurAutoClicker.exe
5412	BlurAutoClicker.exe
5412	BlurAutoClicker.exe
5412	BlurAutoClicker.exe
3548	BlurAutoClicker.exe
5412	BlurAutoClicker.exe

Suspicious use of SendNotifyMessage 34 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
3548	BlurAutoClicker.exe
3548	BlurAutoClicker.exe
3548	BlurAutoClicker.exe
3548	BlurAutoClicker.exe
5412	BlurAutoClicker.exe
5412	BlurAutoClicker.exe
5412	BlurAutoClicker.exe
5412	BlurAutoClicker.exe
3548	BlurAutoClicker.exe
5412	BlurAutoClicker.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe
4876	msedge.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
5936	ShellHost.exe
3548	BlurAutoClicker.exe
3548	BlurAutoClicker.exe
5412	BlurAutoClicker.exe
5412	BlurAutoClicker.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4876 wrote to memory of 1360	4876	msedge.exe	87
PID 4876 wrote to memory of 5080	4876	msedge.exe	89
PID 4876 wrote to memory of 4168	4876	msedge.exe	90
PID 4876 wrote to memory of 4188	4876	msedge.exe	91
PID 4876 wrote to memory of 5080	4876	msedge.exe	89
PID 4876 wrote to memory of 5080	4876	msedge.exe	89
PID 4876 wrote to memory of 4188	4876	msedge.exe	91
PID 4876 wrote to memory of 5024	4876	msedge.exe	93
PID 4876 wrote to memory of 2780	4876	msedge.exe	94
PID 4876 wrote to memory of 5024	4876	msedge.exe	93
PID 4876 wrote to memory of 5024	4876	msedge.exe	93
PID 4876 wrote to memory of 2780	4876	msedge.exe	94
PID 4876 wrote to memory of 2780	4876	msedge.exe	94
PID 4876 wrote to memory of 3164	4876	msedge.exe	95
PID 4876 wrote to memory of 3164	4876	msedge.exe	95
PID 4876 wrote to memory of 3164	4876	msedge.exe	95
PID 4876 wrote to memory of 5476	4876	msedge.exe	96
PID 4876 wrote to memory of 5476	4876	msedge.exe	96
PID 4876 wrote to memory of 5476	4876	msedge.exe	96
PID 4876 wrote to memory of 2400	4876	msedge.exe	99
PID 4876 wrote to memory of 3204	4876	msedge.exe	98
PID 4876 wrote to memory of 2400	4876	msedge.exe	99
PID 4876 wrote to memory of 3204	4876	msedge.exe	98
PID 4876 wrote to memory of 4740	4876	msedge.exe	101
PID 4876 wrote to memory of 2968	4876	msedge.exe	117
PID 4876 wrote to memory of 1336	4876	msedge.exe	118
PID 4876 wrote to memory of 4116	4876	msedge.exe	119
PID 4876 wrote to memory of 2176	4876	msedge.exe	120
PID 4876 wrote to memory of 2176	4876	msedge.exe	120
PID 4876 wrote to memory of 2928	4876	msedge.exe	121
PID 4876 wrote to memory of 2928	4876	msedge.exe	121
PID 4876 wrote to memory of 2928	4876	msedge.exe	121
PID 4876 wrote to memory of 1432	4876	msedge.exe	122
PID 4876 wrote to memory of 4208	4876	msedge.exe	146
PID 4876 wrote to memory of 2460	4876	msedge.exe	124
PID 5412 wrote to memory of 1424	5412	BlurAutoClicker.exe	127
PID 1424 wrote to memory of 3724	1424	msedgewebview2.exe	128
PID 3548 wrote to memory of 4820	3548	BlurAutoClicker.exe	131
PID 4820 wrote to memory of 5068	4820	msedgewebview2.exe	132
PID 1424 wrote to memory of 1196	1424	msedgewebview2.exe	133
PID 1424 wrote to memory of 1196	1424	msedgewebview2.exe	133
PID 1424 wrote to memory of 1196	1424	msedgewebview2.exe	133
PID 1424 wrote to memory of 1196	1424	msedgewebview2.exe	133
PID 1424 wrote to memory of 2456	1424	msedgewebview2.exe	153
PID 1424 wrote to memory of 2980	1424	msedgewebview2.exe	135
PID 1424 wrote to memory of 2980	1424	msedgewebview2.exe	135
PID 1424 wrote to memory of 2980	1424	msedgewebview2.exe	135
PID 1424 wrote to memory of 4472	1424	msedgewebview2.exe	136
PID 1424 wrote to memory of 4472	1424	msedgewebview2.exe	136
PID 1424 wrote to memory of 4472	1424	msedgewebview2.exe	136
PID 1424 wrote to memory of 4472	1424	msedgewebview2.exe	136
PID 1424 wrote to memory of 4472	1424	msedgewebview2.exe	136
PID 1424 wrote to memory of 6160	1424	msedgewebview2.exe	137
PID 1424 wrote to memory of 6160	1424	msedgewebview2.exe	137
PID 1424 wrote to memory of 6160	1424	msedgewebview2.exe	137
PID 1424 wrote to memory of 6160	1424	msedgewebview2.exe	137
PID 1424 wrote to memory of 6160	1424	msedgewebview2.exe	137
PID 3548 wrote to memory of 6756	3548	BlurAutoClicker.exe	138
PID 6756 wrote to memory of 6776	6756	msedgewebview2.exe	139
PID 6756 wrote to memory of 4652	6756	msedgewebview2.exe	140
PID 6756 wrote to memory of 4652	6756	msedgewebview2.exe	140
PID 6756 wrote to memory of 4652	6756	msedgewebview2.exe	140
PID 6756 wrote to memory of 4652	6756	msedgewebview2.exe	140
PID 5412 wrote to memory of 4540	5412	BlurAutoClicker.exe	141

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/Blur009/Blur-AutoClicker/releases/tag/v3.9.0
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ff917d3c188,0x7ff917d3c194,0x7ff917d3c1a0
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,7232924843851186159,15187599284159651606,262144 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:2
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,8053846884456273022,15526337326065455085,524288 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2092,i,4487303268766870409,4968939918600795918,524288 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:13
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,8181497122117284614,15817497752196860163,2097152 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,5218457695185164480,4061917419272382017,2097152 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,16495178912248044389,10685942625184930398,2097152 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:9
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,740560580642138167,8419917502397717065,2097152 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:1
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3800,i,9095801833287478421,7334149167592371424,524288 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3776,i,6504293943882159695,5270132828059681277,524288 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,15955498991875607523,2972418462129877387,524288 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,15955498991875607523,2972418462129877387,524288 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6536,i,17220224804138656708,13983578091708247506,524288 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,13466109560475587547,1716882396367856575,524288 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:14
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,14469658125196674860,14883965067624025903,524288 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,5739632876996600354,5697541620607348261,524288 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6168,i,11925437753244813268,17211785846261225296,2097152 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:1
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,1157534975303325406,355061628993279572,524288 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:14
  2⤵
  PID:1432
- C:\Users\Admin\Downloads\BlurAutoClicker_3.9.0_x64-setup.exe
  "C:\Users\Admin\Downloads\BlurAutoClicker_3.9.0_x64-setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:4208
- C:\Users\Admin\Downloads\BlurAutoClicker_3.9.0_x64-setup.exe
  "C:\Users\Admin\Downloads\BlurAutoClicker_3.9.0_x64-setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:2460
- - C:\Users\Admin\AppData\Local\BlurAutoClicker\BlurAutoClicker.exe
    "C:\Users\Admin\AppData\Local\BlurAutoClicker\BlurAutoClicker.exe"
    3⤵
    - Executes dropped EXE
    - Checks whether UAC is enabled
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:5412
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.0 --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=5412.5456.10701797643600644000 /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb
      4⤵
      Enumerates system info in registry
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:1424
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView /prefetch:4 /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ff913fa5fd8,0x7ff913fa5fe4,0x7ff913fa5ff0
        5⤵
        
        PID:3724
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1748 --field-trial-handle=1752,i,9956455977250052028,12943078214382387194,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb
        5⤵
        
        PID:1196
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2148 --field-trial-handle=1752,i,9956455977250052028,12943078214382387194,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb
        5⤵
        
        PID:2456
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2404 --field-trial-handle=1752,i,9956455977250052028,12943078214382387194,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb
        5⤵
        
        PID:2980
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3352 --field-trial-handle=1752,i,9956455977250052028,12943078214382387194,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb /prefetch:1
        5⤵
        
        PID:4472
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3860 --field-trial-handle=1752,i,9956455977250052028,12943078214382387194,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb /prefetch:1
        5⤵
        
        PID:6160
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.0 --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=5412.5456.6290238606930449735 /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab
      4⤵
      PID:4540
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView /prefetch:4 /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x198,0x19c,0x1a0,0x174,0x1c8,0x7ff913fa5fd8,0x7ff913fa5fe4,0x7ff913fa5ff0
        5⤵
        
        PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7028,i,7332611399486345864,14141977636983698818,524288 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=3392,i,1081316007351440369,10004924586289438334,2097152 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:1
  2⤵
  PID:6468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6792,i,6749674553263832652,275720559239897378,524288 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:14
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5632,i,1321748244884052542,16292135647571051813,524288 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:14
  2⤵
  PID:7000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5696,i,16822700276089424073,1980566901968112881,2097152 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=3852 /prefetch:1
  2⤵
  PID:7388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7312,i,18310639499460267188,16518943538713620096,2097152 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=7384 /prefetch:1
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5696,i,12850802568316682841,15523715992271207297,262144 --field-trial-handle=2632,i,18244032237112194791,912998880048157083,262144 --variations-seed-version --mojo-platform-channel-handle=3820 /prefetch:10
  2⤵
  PID:3420

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4976

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2320

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:6084

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004D8 0x00000000000004E8
1⤵
PID:4980

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc
1⤵
PID:1708

C:\Windows\System32\ShellHost.exe
"C:\Windows\System32\ShellHost.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5936

C:\Users\Admin\AppData\Local\BlurAutoClicker\BlurAutoClicker.exe
"C:\Users\Admin\AppData\Local\BlurAutoClicker\BlurAutoClicker.exe"
1⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3548
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.0 --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=3548.5996.17027009650298132915 /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4820
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView /prefetch:4 /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x1bc,0x7ff913fa5fd8,0x7ff913fa5fe4,0x7ff913fa5ff0
    3⤵
    PID:5068
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.0 --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=3548.5996.6583248523519712628 /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:6756
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView /prefetch:4 /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x110,0x19c,0x7ff913fa5fd8,0x7ff913fa5fe4,0x7ff913fa5ff0
    3⤵
    PID:6776
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1788 --field-trial-handle=1792,i,6809469542794617308,685069928912610829,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab
    3⤵
    PID:4652
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2064 --field-trial-handle=1792,i,6809469542794617308,685069928912610829,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab
    3⤵
    PID:1468
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2564 --field-trial-handle=1792,i,6809469542794617308,685069928912610829,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab
    3⤵
    PID:3040
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3368 --field-trial-handle=1792,i,6809469542794617308,685069928912610829,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab /prefetch:1
    3⤵
    PID:4984
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3548 --field-trial-handle=1792,i,6809469542794617308,685069928912610829,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab /prefetch:1
    3⤵
    PID:4208

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

09EC553619BC82A45E441B5D9BEB4136

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\09EC553619BC82A45E441B5D9BEB4136
Size 281B
SHA256 56044e7c672df35700f9ac390ffdf8ce41732759bd8531b46ae5e420f665f24e
MD5 5284083e619a8fb05e3f58dccd1acf40
SHA1 9b0d313c8e08fd55bf0de015bcf7a8e46cb45c69
SHA512 8cfcb53ec6a120e8308a107bd1482eb52e622c85b7a43314f09b1342e94bbfed8465b5e9ccedc77d432864f2a4b40a9a42dabaac0e64f2cadd1a692393b4ba0c
TLSH
T1F7D02B5A13F9DC992F63E9D0D8C5A0247402359603B5A824680D822F9C80DBAEE42618
MD5 SHA1 SHA512 TLSH

Submit Download

09EC553619BC82A45E441B5D9BEB4136

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\09EC553619BC82A45E441B5D9BEB4136
Size 488B
SHA256 0e4d3b18deba9f3503fb527487057dcf5d04f8bbd5c7ed3a778516a89944d401
MD5 95f9638f6dc1c9a0065e9b449733f7aa
SHA1 65f8bb551601873c7c315c25ffa37fd70a13dd9a
SHA512 fc8bb5f4db6fa89425b6bcba853e2880c0e0130d9fd35cb85405f63092c4abf6b14989a92f4c242624bcfb1dcbc73dd55b7eebab86370f68220ae905c8de3558
TLSH
T18DF0A31034BC4124E532D8B8CFE571FBAD1DF0167C12A6E7079317056F45D414D6243D
MD5 SHA1 SHA512 TLSH

Submit Download

BlurAutoClicker.exe

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\BlurAutoClicker.exe
Size 18.3MB
SHA256 2ea51eb81787e08e5cd325da9d8eb265672c952128f5c71306f73124d96cb30d
MD5 ecf9b79cd488f39c4d9446ee8376ab46
SHA1 6aaa2a0efdd7473d5fbb67c45594a905224446f3
SHA512 370b6f0df895b6b94b30ebb5e55ce445817247331fe60f174d5624dd6ade30f1fb757691da9f6bc738ca06a5e328fe6a6da4ac11c84b76302f1c1ff5d7bdbd70
SSDEEP 196608:xoj4XrNVBNNf7OxCgg06WBVMKH7Q8N0E1Xw+n49:g4XrNVBOs8N3Xvn4
TLSH
T18C170A916F5B95A8F196C8F083964D7FAF2038CB0A3575AB4484613C2F7F7E06A38359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session.log

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\Diagnostics\Logs\session.log
Size 1KB
SHA256 38c758963bf516fd21355b0fe37399fea4fe6f9f04d3145accd09a0f6750fc72
MD5 7a9fd02a5ba64dfd07559b5aea0a2f9b
SHA1 f40e40ce7b9ad926f75edc28b6e18abc7791bd48
SHA512 c5b8e9b948505d6b72aa6f90016491e5a96dda3a6b233e35b8059037f9cb0b0e77a94772b50506b7e805aa2e44e2daaa3768a36d97b2a85a4f9815fe5b8146ee
TLSH
T1ED21C00430EDC46BE9190E599A321F55CF30FF27FAC4AEF82FB91A762B84A531554823
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 c9ce60dc9f6df67da9ef4552f070cf304672f4ebe70efa3f246aedc79342ff30
MD5 d6e601eb3e9187860560c7cd822aff6e
SHA1 2dbaa3234d3cb181972233e222345b442f38c06f
SHA512 1fb60d1e0db544dfc7df2c004145fb539db1759354bad5489b969c8218541cc57f4b5ffa7578b02892566d9ce8e2a1392eb9c0c8c746c240f7c754482eab8c12
TLSH
T14CD02B23F211063DD010B0730143E13C1A01B30FA047401A943C9A2D99480DB4B818A1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 1efebcfed7e9362ad09ea6469ace908b453d5f069da494f72f1573d2a8495244
MD5 3456dd48635e6d3ccda5e43f53059dd6
SHA1 2f6d351087437499618d584d8009d0be7382c313
SHA512 501a397f9e8ddbbb789ea7bcb2633e07d34c0286867a04a2177c0b243926e940df58fb0ed209a1d1a43823590f5ce64798caf2e90e08657d663a6fbbc18f389c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 84e41614058417c7a0fd51a060264575832346e3194b2b079530e2540391ecb8
MD5 542bc89952e7c03b126421931bfb75f8
SHA1 b4da98b709e5650814324ec8815840d60b062696
SHA512 11934bc04210202fb0e34e612aa1311e0d5371c0d264cb672c2c13e74c74bf6bf933102ef5277c56c307c505f7e88bd8bda05f24b108b7f51bd449bed6eabcf0
TLSH
T1E4D0122272420534C01061330003A11C0440C20BC04A40055438A92E5A440540912441
MD5 SHA1 SHA512 TLSH

Submit Download

02c1f303-a2ae-419b-a89e-aa8d4c1e218e.tmp

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Default\02c1f303-a2ae-419b-a89e-aa8d4c1e218e.tmp
Size 6KB
SHA256 c34b39b098d97530d2ce65955e11bd97e35101313aebfc9d70ab3c3616cd360d
MD5 34ed9bfb2323d8d05edf6bc8726e881a
SHA1 7e4ea07f5139087d4c53d6fe46cdadadac5d9a3d
SHA512 e24f464076b8a47331db5425c937611d96e4f4a446b492c5cbe67898913ba4aa28a365f6b1fbed9f5eb1a1379411fbef5a1d191dc1e0ea770b4aeea0691dd7d6
SSDEEP 96:stW/dyaMCukb9H+k7o5h16Z0P0s7/x+6MhmuecJPqLVMkkjePK+gm0/28XM1C7K:stOL7+8onP0sV+FdPqLVwjZH/G6K
TLSH
T181D195026E246D7B4CC6F519BA25BA67E2F9603275D11E48EBF8461C08DA6CC6307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Default\Code Cache\js\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

ExtensionActivityComp

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Default\ExtensionActivityComp
Size 4KB
SHA256 9827429749037198cb3d19a851ccff2adafad344fbade7220aa022d3c9e2fa85
MD5 9088df5de5b8306c52e744141a100532
SHA1 0aea85a36ef3ddc53df198227fcaf212139ae1db
SHA512 96c0c8ee90bd8aec34ea905f48e76ed7dc370d24f64efaeadf36e9b59b9ff01856ed837b5169241ef2bd4a6b8fe2ee77de443b09b9ee604e39f9ba57929859e8
TLSH
T15C819285F7C02420DA346EF3A4824BBD5E72CA82A5124B93097002D0FCA74ECCC796AA
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Local State
Size 15KB
SHA256 2b9a4514478d4cc258dff26ac37c78eb612ea4bc3bea4c4f05f0c7d2be304172
MD5 26c1a116a87a535cc489f4e007e4df3b
SHA1 8c2d035ccdda839b1cee47a320df633f85ec4eee
SHA512 d6262983e486bd72d81c75589064450596b6f1eea8a2627269e9cbdaf1cec503b1d19b5e624645319a1c9837633421fdef59fb03308b8cdb1db540cd060ef2f7
SSDEEP 384:Gsrv+89zHqlDNP9oidBNBSyldR5gl038Ng:xrv+4UNbdVc038Ng
TLSH
T11072AE33E5389A379DF38848B48A7E577BB8609695C31FA0E9D91B8C42CA4C92307C43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Local State
Size 2KB
SHA256 25363a16de30d8f1c62bbfd431461a84bab5596f35c2e71ec63e6ebf6ce8062c
MD5 b913f3eebeec132d315c73bd804ae135
SHA1 32656f3a463e5d35b18e29867c16c0dcb363736d
SHA512 8afff9f92d0646300ad313bd5cab53b1908bd002ffd533cc819802ed0490038ff4ebd86166ae3fabb75465d23527a63023d10e574794c0e2f8e9ff0d47cf6913
TLSH
T17D517173AC109E7795E38A58B9867EA2DF7141669F922F91BADC0B0C00C795C2307C33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Local State
Size 3KB
SHA256 57b3929880c2664d507fa7ceb6fdc51e1de9d0f8679fd74ee8d0684189ed0f33
MD5 a85cef9f9a568521b35563eee3c96809
SHA1 c3140baac5293707e22581260cb7b117699d3ba5
SHA512 d22d456d44d9aa27f221bd66fefe378c380b39cdf13557d383dccc5e6c35fa8782ef6dbfa3cb5e95a5cec6ff41a7a6f33af46fa486edcc3bec27eb1da49a05a4
TLSH
T12A71867798609D7759F39A15B9863B56ABA14127DE863F95E6EC0F0C01C768C2343C23
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Local State
Size 3KB
SHA256 e5421a03ade31c98846b9a8bc8295c7913adbe96edee20367515cb8e4c5d18b0
MD5 58f785e1ee06ca6f799a00e91a9d3673
SHA1 e012498fba659d858ee12cb376596a6e2cd538bd
SHA512 5ce5d0aae75c359d3dcad4743b022a4d023abc502033c925c230a2c6e42a532ab2583ea7bb016f47b36c97a0a9a155540887222b87f0db166f6c52f9dd985003
TLSH
T1267196779860AD7799F39A14B9863B56ABA14137DE863F95E6EC0F0C01C768C2343C23
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe5acc0c.TMP

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Local State~RFe5acc0c.TMP
Size 1KB
SHA256 cc46dba0f111def56037e178b42d0436a6fb86038580a2809e188554d359327a
MD5 8ac66d42639de6b1e8cee11f6b7a0bd3
SHA1 fc937767854749bab74e58ab12f52ef6dab85e4f
SHA512 4578a24350c9dcb690928b23a63d4a43e862445ef908eaa0d01d3ef784de45f83fac972e3df6dd8b602a0b91e7779d0e6b5ea32cbfb811cad4fe1a36bc3374a6
TLSH
T1963152B3C8509E77B9D2665A7182BAE7AF70012ACB424F84B2CE470C11D754C662BC32
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 9c9d51c556c46c815fd1a22bf03b4e035e389f741880478ae4f141fedf708956
MD5 0fb1d2a11c62401f6b5b2b67b2f0e53f
SHA1 d538018afd58fd9e222eebd9ad60b0ee6f3b2de9
SHA512 829f7299fd6ceb3478d51294d7a9434989e2d92e8a0ce3fb86556562bef0cc861a1bd3b976522b99769dbe73e260cfefbebf71f8baec75e25ecc6ae56485fcb6
TLSH
T1ADD02B13F210423DC02434730141E1381A01B20F50024055AC2C862C5B090DB0BC1CA9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 46938505ade56a5e99d511e3b7eafd1e5b90e41436859b30904b15bbd47fa6b4
MD5 3605247869d0afac8eb6125f390e71d6
SHA1 ca70d750c2b1e07928baaff96dda20e330da3077
SHA512 ade9008c4f0edf3a30980f58dc888ea2444a805582c87ec7d4f1d708e6eca4094f9e0d75631e02c8000d4113e43831acce73d293ab1bc35eb601761e7e806943
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 9d53e4f66e638cd1e538637e4e9db94051ffc5898aea89fd3acdcc3c255a8466
MD5 9f67c9117165a07b68b695347899554b
SHA1 b6ef823b7ceb6840d630fe98865f2d6f8e72ed12
SHA512 d8ce73ff7ad7fce486bb27294a46838e1438a18f94e8ba641ae8d865d9b8b232af0e080e8ec3f2358cd9321ef7e3a6141d57dc7581de30274ef1082ec8e86948
TLSH
T13CD0241377014134C03434330003711C0400D11FC00541C07C3CD53D1F040550F13C4D
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 aa8b453cc20139c6c460985437d173826930ed515fbcae0b9026216bdf36ae1f
MD5 1c88fc4962313e205f25a55b3e20380c
SHA1 68461f56f2bca0d486e645dd9e41a8ea814a1418
SHA512 da79728f2d6637ea271a5fe621e39bef47d992ea2eb5603327523c808ca3740780999e8ac88a351f56c9061111bb764949916af701e24694fb311b419c298a2b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 408B
SHA256 242c4570f317e814de41435a7fed7499d81cdd9aa434b3e2d025582627932590
MD5 97e56d1f8068836c596f4318cf338669
SHA1 9cc771be294004a29b95ebca3c40f12f64a0f97c
SHA512 0258f49987488534bfdaee4889e5fb769de27227b5e336fe1c3220b9fda8a3dea01274de35539a38db784828bcf02ca51df81efd513fa3264479c4b2911fc240
TLSH
T1CCE0C21107C34119C71006F551D9B6D83131ACB39343AE736C6AAFED8854B7695D44D4
MD5 SHA1 SHA512 TLSH

Submit Download

72398b63-75f0-4d60-b81e-30fd90a00947.tmp

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Default\Network\72398b63-75f0-4d60-b81e-30fd90a00947.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Default\Preferences
Size 6KB
SHA256 c41163610a0e1b45feb867539e4f1015768f26e99853d9171af98ad4626a23c5
MD5 84673b3af65e2513f1f43594afcc7427
SHA1 eb942ae32a41547f190ddeec11b446addf9f63b2
SHA512 674deee1d97cb67579c01b834bbeac9595839469f78de3cc2875809ecd568c4bd356172a9f3975afa9e493d4bd92cbc6ebf3cedaf43cb4cb9acfb939e00bb363
SSDEEP 96:sty/dpCFMb9HBk+Vo5h16Z02s7/x+6MhmuecJ19jMjepK+gNq28XM1C7K:stKvPBJon2sV+Fd19IjXuG6K
TLSH
T141D1A5035E24AD7B4CC6E50DBA29BB57E2F9502276D52E58EBF8461C04EB6CD6307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Default\Preferences
Size 6KB
SHA256 2b85df89964a34bf10e5b97655557e850e356c5fea9e2351f9e98fac561c205c
MD5 0b9631200c028fdb20dee207d50cac99
SHA1 45fe2a51f918eb5c04196801b18902ad6f79fda8
SHA512 a9fb3209c433476b9582e56c5e2e4cf3c2151003a303482c9bc4d17ed9f988b20fad907bea308cb21256a7d2b70466eb7e727f26ab3807bec9df0a3030c29492
SSDEEP 96:sty/d9CFMb9HBk+8o5h16Z02s7/x+6MhmuecJT0kzBjepK+gNxtI8XM1C7K:stKbPBYon2sV+FdT0yjXfg6K
TLSH
T143D1A6039E24AD7B4CC6E50DBA39BB53E2F9506276D12E54EBF8461C05EA6CC630380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5b11ee.TMP

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Default\Preferences~RFe5b11ee.TMP
Size 6KB
SHA256 16a0f0a9f61219a8a9c7bb59cef58e49e53e96d23a12a2d444e36870c5e6619f
MD5 97a2cff254929b6d841b8e0163ff09bc
SHA1 35dbfe3c480ecc69d824edc9726cb2f7a7ceba9f
SHA512 8b23914e0311b584dccd670796da223f3b5f9ff8f270e139c894ae245c9f24d40ccdf17c5456a452eb3d39d3ba88883d387aa0a001d1a235a6fa1555769cbeb0
SSDEEP 96:sty/dMXCFMb9HBkco5h16Z02s7/x+6MhmuecJRJMkkjepK+gN528XM1C7K:stKOXPBDon2sV+FdRJwjX1G6K
TLSH
T191D1A4035E246D7B4CC6E609BA29BB56E2F9606275D51E58EBFC461C04EA6CC6303D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Local State
Size 2KB
SHA256 35aa01bea71a8f2a4c641eb031fcc3c521376d9e74dfbd93e797baa12a95dd60
MD5 99d03252b07d1e286811b9a83bb249d2
SHA1 1c86aa521470ac38c26350505e1aacac7442a743
SHA512 b02955e7f6c6bc461de726941f077e0d07b20183f099f0e727f9813108a675a9d9f19784bec9ea112933c614c77e143870abb3923f083f62c692e06609bf6404
TLSH
T124518333AC116E7785E346087956BEA3DE7A40A5AF531FA0AAEC0B0C01DB55C2717C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Local State
Size 15KB
SHA256 795fb975ab6a372ce1b05e3ffa9809f80a58346f2988bb722066f325f0d160a3
MD5 6e243ab321934d57925a7fc8d89c080c
SHA1 c32139ecc6c8f9b55b906fdeeba81220632b19a9
SHA512 ab44d72c7e0d3735ab20af6a0d851fbfcc3ff4adc8b492a6d0170aa34e87ec4d0ec3136222f7a91bbf001c9dbcf2f9b3f13f5b24f420d217c65760646d2e35d8
SSDEEP 384:psrv+89zHqlDNP9oidv3NBSNBoiKJOEHNJ:2rv+4UNbdvzPVHNJ
TLSH
T1B4729E33A578B93759F38508B486AE577FBC509696C31FE0E5D84B8D02DA4C92317D13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Local State
Size 15KB
SHA256 9d3a11ca5d08377629c85e4da134ce251d47379ff9bc060ab31244ebedbf3d91
MD5 2dc62dc67dc1c1a51cb981ce9cad064c
SHA1 c57ca7d20d05284f3d0a934f1293951f9bdc8b32
SHA512 5d8a46eef9024c52ebd7cabbfb07bdcd791525bcb396973584a4ae18bd7a0cb09e6ceee04b4d3bcfd5fc4775fba81a67cf1b5b56ae5c453aa77ee97f4703998c
SSDEEP 384:lsrv+89zHqlDNP9oidMNBSNxwiKiOEHNJ:yrv+4UNbdYPiHNJ
TLSH
T16E729D33A538BA3759F38508B486AE577FB850969AC31EE0E5D90B8D42DA4C92317D13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Local State
Size 3KB
SHA256 6d3a54857f62a886bdc0baf65eff01fe29c658fcc9577c7bbbe9fecb2ae5feef
MD5 8b0a08bf237142106fe98b15d9f7641d
SHA1 e67c4b77719afb7c2c692a6b9587b598a3560c38
SHA512 36ea2420d4daddc67498a477dac20d368a572d0d62a1819131493848e6f8a1d2684ee94bbb4112502f0ddbf6e3ce21c92c615eb7524e40957906cd101bfcd1f6
TLSH
T10271843BA860AD7749E3990879857F57EBA54077EA823FA5EAEC0F0C01D72981313C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Local State
Size 3KB
SHA256 9cacaa3800b21c420fc1d734469e3f523d345157e14bbe7b0821c485dc548f4d
MD5 f440bd1f5041f4d2c69b741b0a5b78d8
SHA1 f61d16abd0dd7b4021f56350dd75fe579fb84053
SHA512 abafb004962544946cd492d2f9fc935cb94c3ce76fda5dee9347aa98ec74ffac235976a2239b98f5739226e6c43d2aff25b61bd5dbe49055f8d27a8d71cdb51b
TLSH
T15C71943BA860AD7749E3990879857F56EBA54077EA822FA4DAEC0F0C01D72981313C13
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe5abf4a.TMP

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Local State~RFe5abf4a.TMP
Size 1KB
SHA256 5a989a96ee527728aa24473c56ee3e3aab761f9badb5c7f5b35ec7a5c16e3392
MD5 d3a0fd7a94d5738b808bf9e0d8cd5cc0
SHA1 255bf9b3b91e42adc30d4eafbbb09eaf0956123d
SHA512 54405aa5a8748c691c960cf34a724d62c2bdc50bebf7df1838556ccc87c9504d20b4ea0081c3919543c7af2fc7e9ee8cb45f7d3a3f0d3baa905c2bf1bee4bc0c
TLSH
T1D6315273D8912E72A897521A3511FED7DE6100BA9B424F8476DC474D02EA48CAA3B833
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 67KB
SHA256 960e7baf8bbba1197cd9aef093148b65cb2a6402dab34683c78e27b9650afe34
MD5 3c35fab00df625d1ee5da7d87cf9d042
SHA1 ff2c71ae25a5a6c74d49b7048bfa89e2b4cffaf0
SHA512 cd68c44d2df728d2c63e81bb1a6faf4dd181f62b7147faa3b2fff3a499d2a5e0c779c885f959606f0dc8e7eca99e20028d10bd316232c289d77d21d5bcfefa84
SSDEEP 768:HZcM10gssesnsAqsrQpz2tbfQDbCdTkhcwXk3mvIydcKTOl6uIBwxhY1i8vZANVl:5p0gnDn1JspOtocwXZIydcpeYhgZoD
TLSH
T1F4631241E20472F3E65C995D3B7B40314291ADB9F8D8DDE878F00AF906EA9DD19C4289
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 402KB
SHA256 69b79e465023575e6e6f093be9ba6f85c363ce90a280acd3c7b2c7d6f204f965
MD5 98c6491208eeb296df8b58318f15eab7
SHA1 93994960c8dbcf9e8d450594e6906ea4e6291f87
SHA512 8e1b8698d6bda7974475a6e04de6df8b99f982cf7818b24f6992d4269031b86b06289130f55e9850652dcb439aecfb7f7a3dcc3a3524994f83d52a3feeac232a
SSDEEP 6144:8wZ9mCDGBf/QBXfmnr936pXTH1A4nnOIithRTP1UEHdxsNTV0GU7iE:BHmCDUf/QBPahKZp/nXi7fvd+OGUT
TLSH
T12D942349776709F0486975AB0BDC93EBFCA1934246F43D9C32E647C949603CE206FB6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ab

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ab
Size 62KB
SHA256 df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3
MD5 c813a1b87f1651d642cdcad5fca7a7d8
SHA1 0e6628997674a7dfbeb321b59a6e829d0c2f4478
SHA512 af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b
SSDEEP 1536:Q9pfnSa+E9Az52gNbkYtUtqvUhZRHuLdrx07LXz:uhnSpE9A1EY6tBPix07Lj
TLSH
T1695301D4670EE2A579F2CF23BF59C5C00803162D8E11AA68FFA063878D8430BA793D1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ac

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ac
Size 68KB
SHA256 6dbc461a49b2a4d4312bd272383ef4a0a4472999baf1423240a576ab6953ac99
MD5 5f16a2f0c29d5575bd2335f64edffdb8
SHA1 cb5b12fc3f8de7d854219534d661942884b6ab58
SHA512 13509796fa872e1087322da39d83086c82291bf49a64c704e6e5e05d1d9df1ed1216b3b2c29cfd38ced066d07def40b0e30bf3a01bfde3f49f998b22d3a803f3
SSDEEP 1536:6nS7ChLVxkopkMxOIdzaA79aelJcW1DNxD:vWhLVxkopkKBwvelJhD
TLSH
T19A630262A99C291E0B345E5B2FAFB275A06CDF0E1D21403D1FC483D925934B50E6EEE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ad

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ae

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
Size 65KB
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb
SSDEEP 1536:654NcGosP0w+UcGoanS2RR/QwNdIvEsgXn:6iRsw+UkC5QdEfXn
TLSH
T1055302E4123CA75C49FC43EA5434D635BA4B31ADABD4102FB69BC4258F6EA824447CFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000af

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
Size 29KB
SHA256 2f2d5cfcfa90562924e3f961032f165955c49e5ac5ead08755b0f060f54bc213
MD5 fc6c71ed3f33077375aabc5e114fa9e2
SHA1 ef648a72739836c8efeb2b4011e235a051b7ed18
SHA512 63d85c4e715c58c0b5f4f640728a76356134ea264e1a1bb0f23faa3a7088148aab8e47aaf1cb3192373f2218c71a619eb1d0fa45d8cca4aaf58d8a50f9c8967d
SSDEEP 768:vEBNwMyBpc/rz9qvNmaCJcWxBCYD9nQw9q:aPyQdqwK+nT9q
TLSH
T198D2F204CA3B023F602332AE191D7CD5234F0DD932774EEBDC597955253B5A968CB2A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 1f14b43a4230066e45a63052f015e12eec4be8f610ee8ac5234ef7c7f03cb4af
MD5 bff1795fe68393c2220fff34b67e8780
SHA1 de942bae80a67bc8cdb40265b33c4279dd05ccd3
SHA512 5ef9dc29e4eafde4d006d3a5421ae037908ac4b4cd61f26a0a79dfb69082d5f1996fd5189bac1f1bc7b54d074d7a9187e23128dd7ea472b2d2c7f76dd0845e5d
SSDEEP 96:v0l/Ny3emkxv8siSiB9Ut7304HBOddvlvFYbQ5c60X0016lu2u40/2WebuU:v2FGzkxv8siSiB9UtTpHBOdJZFYYc60A
TLSH
T145914D6447B789C2DB2657B046F2759A36BE85B64A0F0FCB4F0864F4B0FDBB946C2042
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 474807e8985a46893bc7cbeced5d888bfe6d32d2a809457bf4b82d72a302bb5f
MD5 54360d56e1789ead000424693bf82c29
SHA1 19bb980f3415aa3203ba3e21340c2c8b623a23b1
SHA512 ba3a77b0fafdc03a5b4de86dd2d83bca089d5eb4dcf63d309a878cd4f7a2ba318209c5ce31f8fbbd8c1ddc26bb33433feae452fd20f16d0257bf8f089c5f02a4
TLSH
T16C5182A4477B89C2DB2B97B10BF3818A32F6C5D64A075FDE4C4860F4F04EF5CA142151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a32ba.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a32ba.TMP
Size 2KB
SHA256 3f7ef91f142357421a1a74abcf41d9d03df86d025c351b90641b5794c85c480c
MD5 3b7f3106c37acb0f63183973f7b39836
SHA1 bb2fa2838868f386303340f4056ebca7bb9beb71
SHA512 ae2566b1764452669473df29f5c93c2e26f19c1a7d8c9b900c2e7b8e9117ac286cf3df90ba0c7633054ab37b50350e0b74a1f176aeb57df4e704f098d439b877
TLSH
T1365182A44B7B89C2DB2B97B20BF3818A32F6C5D64A075FEE4C4820F4F04EF5DA042151
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 2cd999874b5070c8d83e2e4a5eae20c7b70587de2a8d5b5e9d4ac39f828a46f0
MD5 1a28ec9d68aa0f57492060ba34ffc1c2
SHA1 2572ebfe764af2b0d797ef8114da74f6a0e75b40
SHA512 6c5a851c21327ac84b25225c7f494a8d9af83dcc3e64d564460643caaaf6886179a0051feb79414a788a0cabdbc5336afc0244458bbf2afdf880b093f289785c
TLSH
T1BE61BCF787F5956D9A0256F0AA08AE1BCE2C0515831C3C6A89E0BE1BD3F3871E141B5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 c552ab6df51423b29148375b51e7fe13bfa67d3d643cfff0f869bf9ed79d1b25
MD5 094e8ac7c9110fd3d2dd94623cfa38c8
SHA1 57e0a2977c6e1c3e013d53a1b8161883a739cb1f
SHA512 62a471d5cef09f25ee478990d058a5b066c23c41891590dcfef5ca9135c70899c3efc49a37f5149fc310d4c6a0adc0c5e8da7e1db6cfafd01fbc80f371de4975
TLSH
T1A9D022632201B0B8A56DBE9A90EBBC8FC33700708803EED518D0B89E0B3686D061B844
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 27dafb55d31f5baad4e3ca405274ee34c882edf9ebe2bb54bc9dd5d1b7547828
MD5 ce4e3737d2f25a272392a2f0179e5b8b
SHA1 5345d1b5ec38ea9ba708645d011159b56a60cd76
SHA512 82cc6be55f39b92acae3dbd1e8fcfdc8cfed6e6494e2ea50605904eed9415cf77cad615f50d20211988e504333b8f980a1f406c6c45e7e907c565ec47f0f22ff
SSDEEP 192:sxRfRHdJ/frsWqNH9ywGGzoA8pyiC/g6+WNSKJZYo6CYmGEIgDDJ:sxRffJ/frsWqNH9yp7m/5xZ5DZ
TLSH
T13942B65669286D7B9CC7E21DBB65BB93E2F91032A1D05F48E7FC960C00E76DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 bb95108b509937580e387b7cb3b9f92d099f9d7cd9c22b0f5ee14224e2cf4f6c
MD5 66d801ef4b3c4e993a35f282f05b16bb
SHA1 59bebd88e6d23e81c14fe133341d52cf82edb2cc
SHA512 4d78f73c46396fcc57c4af2f66594a834ff870ac2f7d99f8380f87945de5d5b6ccc2095b1111c4f5933437203b38b73a533e1bdfa776c5c24c3481c981f89c6a
SSDEEP 192:sxRfRHQJ/frsWqNH9ywGGzoA8pyiC/g6+WNSKJZYoOCYmGEIgDDJ:sxRfiJ/frsWqNH9yp7m/5xZFDZ
TLSH
T13842A65669286D7B9CC7E21DBB66BB93E2F91032A1D05F48E7FC960C00E76DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 5fd2d651df538e557dd5013278380a783af21f2338f48c9c74277c743aa58cc8
MD5 e28b208ec1658dc01889782d2d71d01f
SHA1 bdddce1906f9e1260dd35eeecebab0337cc0e44f
SHA512 9d4e266a99a56beca35bdedf6ca653cedd971e390d11d426bbef342c6884e49eb7c172fa6eb1cf3f487fd5ed1f8e437596b11d3fad2ac3827c2f6fec59510803
SSDEEP 192:sxRjRH8J/frsWqNHtwGIzoA8p0C/g6+WNStiXYoiCYmGEIgDgJ:sxRjyJ/frsWqNHtpR3/5BXRDY
TLSH
T12C32A65669289D3B9CC7D21DFB65BB93D2F91032A1D42E48E7FC860C04EB6DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 5315209f10520de69120da76acfbc699a75a78d66d1de24d845b4f0fbf8c3495
MD5 437bbf1f85db99077659014d78113133
SHA1 a7be48ba150d8d54ffb90cd0c26adcce0bf57587
SHA512 c80e1c18f7b099d940195ce3ee6631309d1cc537eabf3769fdecdc76b806ba605e2d652a5865218d2841dd9b85023f06ef7832f8afb976b87240ce477d24d0a8
SSDEEP 384:sxRFnyjm4J/frsWqNH9ypvslLY/5luA7f4/onD1fMUx:spyjm4J/fRq59ypUC/5lbW41MM
TLSH
T16C82C65758248C7B9CD7D118FE32BFA2E6F9102299955E4CE7FCC60C04EA6ED6207817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9249907ed74f7d2d1b9b214fe8f67b324d98a9bc677d56fe3c1dd1b8841c73e2
MD5 e3e09cbffa61e289e5cdc8690f9e5a37
SHA1 a71c3c659c680fc7ed22df77287aff333833520b
SHA512 39a0d81587543528831336dfce189f04108a4bee27dd8f9edc3b2b52f4f581ea73e38300db245b09b3ff546ea3031776eb22da2c8e7a9d95a34aed03ba4033a2
SSDEEP 192:sxRfRHFJ/frsWqNH9ywGGzoA8pyiC/g6+WNSKJZYoOCYmGEIgDDJ:sxRfjJ/frsWqNH9yp7m/5xZFDZ
TLSH
T16242A65669286D7B9CC7E21DBB56BB93E2F91032A1D05F48E7FC960C00E76DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 07aa5af51dbd8206ef688ff6031f24e703417e7169bb8b64a52fa9b9346f5436
MD5 8252216ef77756d1ee5628d386a1dada
SHA1 775f43cd2fc42755182d82a215e19a5cefd75fd3
SHA512 a6743599e229b54b4a4c28263925f5f5c846e5154f5fd432c61cad60ee6c5c42bcf7adb6ee07f4c4b252a0d37c2b8ebe6947fda303020375a51ee54902a789ea
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRXaro98L:j26H0RWgs2f028F1+UoAYDCx9Tuqh0Vt
TLSH
T194B2EC2B600DCBBE5F800A9DDC19AFDB6D9802C797548D4047FE994C03C7BEA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e0a1eae2-cf16-490c-8857-199f41dae341\index-dir\the-real-index
Size 72B
SHA256 347b1aadbd5f360a673040a3203ca8cf75cf16389a6ce6c3654afee6c90d8f00
MD5 b5cbdad6d51ca1bfebb78540de0d65fd
SHA1 13a44a4e306a50a63e09880022dd0e748d8db0f0
SHA512 d9af72bc43d94649d7ca27c4c1a8e0b96dc201b37dc183ebeac42d4a905471b6021d8f20b96747c583ee3d963f2365c0edb4bd15cb1fd9be773745a7202435ff
TLSH
T162A0021432C04129D40316F83D9B41417290CA20030D17875DF10D88C998A59595652E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e0a1eae2-cf16-490c-8857-199f41dae341\index-dir\the-real-index
Size 72B
SHA256 2b48ed3ee01a9f110c20747d58c56f43274ffea8ae97cc35cbcd01ca18badb14
MD5 eb3b39d328e562b5953b3acf3a99af04
SHA1 d291fb812f5a3f28167f577f7e1ecefe102d7d8f
SHA512 c171f1ab179ec45da8ca5d51567af98a517ec68d3f5c3afa55492ac44e8c656b8666a92e6a64e10f700fd13a3b3a41d8151b17db6d5c88b4f6e611a7ff62fbd9
TLSH
T1A8A0023943863504C21211F759DE0572121159D4011113658494585DC8D4B55974240E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b5466.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e0a1eae2-cf16-490c-8857-199f41dae341\index-dir\the-real-index~RFe5b5466.TMP
Size 72B
SHA256 a3126b48b65cce4b995e5ce377fbfab7f1a049c133c216dd23da55ea352b3647
MD5 809a6e99a149761f4d859efa35b86ce1
SHA1 f40b89bf438e5199b60e13a5c56a2dc25b4f42b0
SHA512 9c33ded467ea9cc67e15193f9026aa8bcba81d59ed5bcd4729bdf97d05442c63acb524ec0e18f04957df71575b28270af5b2b187566263c6a87fd5d2647e061c
TLSH
T18DA0022063C54507C42315F959D7466312538C10F101120A85954648CD94860564380C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 375B
SHA256 2c4a9b74c1b579dbcec42773788d5fa153eaeada7d2ed31f587b363124519243
MD5 c16ccf408e8c0217ecec05161ab2760d
SHA1 cb461b4e3a01a8e317d1dceeb20e2fd77d488ead
SHA512 b62977fb91dcdb2f275b1d55bca44ce7b2a90a23f0ec4a6c616f38f600007473b5b3ff66110032880dade4024c048c81c4c4c83e4b1c43cb4b89c65519f5dd7c
TLSH
T14EE0D8B639E72C60FDBF97F6347564D401457C54C54DAC8F611EB2C220F1252686AC21
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 b7b7fc6e40062022fcac41f33a042b1242b64b3e7358c8cb30c364bbbea12225
MD5 b451ce811fd31d38c92abf91dffcb59f
SHA1 35d4221e335a6705301416bac13f4229537271bf
SHA512 59675061e6e4366a2f73e4b28eadee01352223dcf6b83a5493ffdc2c08b41107e71dd7d8ad7f26fbff312d78a82c739191c448813c34d7bc1f05f4946861495d
TLSH
T14CA002998A55A099D5004770B1B511AD729088EC171D22B5D4ED11588C587C592F620A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5baa56.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5baa56.TMP
Size 48B
SHA256 ddc04e95f0eef25db46b49a29e9478c1d97274df883afda03352e0b87920d2ee
MD5 7a86173d7d00c8d237d8b21867615544
SHA1 e4882da0bc85550fdaaf155ed116608cbf6f57e1
SHA512 77b0a19fd1cf44d49197b7931c2dec2c483b9da59db322ff0283a725cc5d0005f7bed336a741c4f4d9a06c3a3d26c98da3c57250e3bad19ea77111b674227804
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

fab0d900-990c-4173-912d-1b25287b9d7d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fab0d900-990c-4173-912d-1b25287b9d7d.tmp
Size 11KB
SHA256 17f610f5999c10ab5bfdf797651cd6dff27c9899dfa1a6068a8e18bb2bb32ad8
MD5 c7e70aa05cd061113ce17ba6902a1357
SHA1 a18003b8c8dc882643e0e57096ed915dd181a498
SHA512 b2ee07328fb9768ff605fc66e4de187a9d55dd49caac3e184747b7ca63148e31c4c94724248eea311d19daaa0668c5190f425b1ef0921125bc515ab10c2b4774
SSDEEP 192:sxRcRHbJ/frs3qNHtwGIzoA8p0C/g6+WNS4+/Yo5CYmGEIgIJ:sxRcRJ/frs3qNHtpR3/5A/MDs
TLSH
T19032A5166928AD7B9CC7E21DFB65BF93D2F91032A1D46E48A7FC960C00E76DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

124a90cf-a88f-46ad-9e64-ca813d84b26d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\124a90cf-a88f-46ad-9e64-ca813d84b26d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 4d567ecea5616e0737f6f2e5a9ad502c3d60f89f6b69446e679a532447fd198b
MD5 0c566264455c2bd823bf20cbcf21d0a2
SHA1 ffcef4893289c0b049dccc7c45c3e9a8bad2e602
SHA512 b6ebd149ef66a8e5ed58daeb14c95f2d63acb75cbdfcc159edcf178c34f4b44b0ab68a83897d94e23ff9fb8e8eb434d6c0045a48736d77c00963a4888c5b4669
SSDEEP 768:xrv+4UNbdV3Ldj/TBOWSjONXyer1IRCzni9LeVH1SK3:xbsbj3LlqSIqncEH1R
TLSH
T11A13BF32E4999E334CE2A396B007B6437FF85017C6840B90E9EA6F4D06DB5AE130F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e8282423b5ff05a578fd2021951252ec636dd7bed21d9ba05fb67ad5d00881cb
MD5 a27230d031cba365f7dafc30bc6513b6
SHA1 5876fa24f4719cc0162872bbb4b58b2eae93dd5d
SHA512 da56ad55ec465b9eb8d509c1ce54571ceadd22cd575c63b5e3dc9173f4bc7ddca7b02034bc73cac89925bd63882938156d032614f49af0b3219c9d8b68857bbd
SSDEEP 768:Bj+9P3idj/TBOWSjONXyer1IRCzni9Lb9MKF:c9P3ilqSIqncb+KF
TLSH
T1E5F2BF32E8469E334CE293E6B1073697BFF45167C6C41A40AAEE6F4D06C7A6D430B51B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 c29775b849e62efefa0da27e18443f8b2f5fe2e02d16c0e3c6debaebeb74f504
MD5 7a31ec4028b495b66133069dfc00d749
SHA1 7dd03a1e80ac9d16b2bb7bb22e4aa50beeeb6271
SHA512 b491ac6a0812d876e72c48e99f2097412a08df3d66c6aea4b9c47c633262b9ed493f627013686ca558cf3d034801b0868e002d06ec4f1afdc458006e63a87824
SSDEEP 768:Urv+4UNbdi3rjj/TBOWS7ONXyer1IRCzni9LeVH1SK3:Ubsbs3r3MSIqncEH1R
TLSH
T13A13BF32E4999E374DE2A3D5B007B6437FB86017C6840B90EDEA6F4D069B5AE130F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 83285d679392eb157ad91e405689e7acf497d3d9af028a12de2001fbd0afedd9
MD5 bfad75c0176bb22b7742539c4b007cf5
SHA1 4ad0870c617ff80c732661e6f4b9406d1873c7ca
SHA512 46bd290c182c9a75817152917e040c697a20d995fe2695a3a7d654ee5321f63f7d78f0d9223f4f478c2372adb574934e7aea3bc20db4d1d4e0f06b85f91264d0
SSDEEP 768:5FKj+9o39wg1fkA/TBOWSUONXyer1IRCzni9Lb9MKF:x9o3pLpSIqncb+KF
TLSH
T1321349F298C38A36CC9D8797A33E2E42AEBCC167B5845A50B7D95A0DCD8757FC306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 942efc7d2ebb8f565ab19921a2bb59683552aa04d24328936be4ac413cf83c0a
MD5 a8d98cf3c16ef525ac553fb657f1aace
SHA1 d113fdd84ccb8abd350df993d5a372c109ed80aa
SHA512 8629cca8cb3da1324d0e68a6b5976603d4e381cbe064024bc90c684965d911c2a717838b99d5135f14a4c638dad5c6124386030a40b3341706658d1f86716bcd
SSDEEP 768:Bj+933i4j/TBOWSYONXyer1IRCzni9Lb9MKF:c933i85SIqncb+KF
TLSH
T1FAF2BF32E8469E334CE293E6B1073687BFF45167C6C41B40AAEE6F4D06C7A6D430B51A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 dcd6304acebd470b4ae02d16b8f024f1a7e85f1bf3c119e1874b53f8937e3bb9
MD5 80b9ffad08fbebc7a4c61778bef078e5
SHA1 8e3f07cd9391325c08700d42cf06fc5f394fe94b
SHA512 5e14e2816054ffd967cf3b2fbe2e759da5a7c0cdba855915e1e087d1ce530b59a7f106806e271b506ba1b94b6e5b1c63c9dde66bff68ef596265f0904ce33930
SSDEEP 768:jj+933i4j/TBOWSkONXyer1IRCzni9Lb9MKF:m933i85SIqncb+KF
TLSH
T19CF2BF32E8469E334CE293E6B1073786BFF45167C6C41A40AAEE6F0D06D7A6D530B51B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 8f1b7e9406f044c87934b191df823b65074e6fc4b62cbd85f2a7669fb88b69d8
MD5 8e7380b9240d56ac785294c1a1937fab
SHA1 e821b370ddb3ab9676817b48060def9a35d862ce
SHA512 61f5725fdcc8915dc7d5a2cebc6f34a3bed3f0f56430d90651d3751d06548ea5b4f727649f80b2202d3efbf560aa67381ca3ebca0934dc3305750ae30805f8c4
SSDEEP 768:hrv+4UNbdz3+F/TBOWTONXyer1IRCzniBxeVH1SK7:hbsbV34dSIqnGEH1l
TLSH
T13003BF32E4999E338CE2A395B047B6437EB86057CA840790EDDE2F4E069B59E130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 116eed1b46799d14c16552637fdea7e590b0901b4d1b8fb1614c9b283bbd5a57
MD5 2df0e0f13cad69221dd7e069269f2f8f
SHA1 9a3248ebcccfb6ab324b99b6b79d96346367d761
SHA512 df4fc1a694fd0cd2731a5769524b8cb3cd776572910464fb1246091b83fce64b0f9c5668f40c0756388f5cb2069d2ac0d88c36dea5c97a1d461e1316f03a8724
SSDEEP 768:5FVj+9o3awgRcj/TBOWS3ONXyer1IRCzni9Lb9MKF:I9o3UoCSIqncb+KF
TLSH
T1A31349F294C38A36CC9D8797A33E2E42AEBCD167B5805A50B7D95A0DCD8757FC306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f73f81ef5df7db20c8854efab3c20930e7b6d7af1424dac581ea39e6fc21411b
MD5 a7777e6baa401cddc93f96198d32079d
SHA1 f6a1bfa3fe809ee77a22ec8f20cbdcbc250cdc18
SHA512 68b8aedfacd97299c5bb3c4054351b5f5da85f2f27d1adc4d4d7dc3fa36dd71744d94d1a7437d03574af39c05059b2282af5e2c4abb4cedb0d147badca5ed4c9
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 30b1c8f50cfc90017e065ee6bebd7397bb71ec2a76d52cc30abed9b9dffb559d
MD5 15c9db082434bf4d72a14a49668ad253
SHA1 90270b431e790a1f8ceaf374beaad1a427ec131f
SHA512 2ef2a23627180c05fecbaeac62169fe21758b50e754eab3d3e53286edb2186d7ecfde9fa579520e37755412c245db8b7cdb1a06b279ac50474d9b79948ca54fe
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe5b7d4b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5b7d4b.TMP
Size 392B
SHA256 38b1082e10f5738fc04bdb1667b96e0fdfec7d06df8db34257d50831e552e67e
MD5 0bf14fef4d8e6230fc3da79df17b071f
SHA1 12707e9701ebc46af47833064aad65880317f198
SHA512 0fc20b6f3d2d8e1bb7254c752834643c94c32365c30d4c408244439fed87b99f41a0eb72c4ab8dd78a613c55437b265f7d0fdc3e16d8c3a7da0345a4f58c55d6
MD5 SHA1 SHA512

Submit Download

d1265c2b-da99-4b7c-ac78-80c7c13d8835.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d1265c2b-da99-4b7c-ac78-80c7c13d8835.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsh791B.tmp\modern-wizard.bmp
Size 25KB
SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsh791B.tmp\nsis_tauri_utils.dll
Size 33KB
SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
SHA1 75197fee3c6a814fe035788d1c34ead39349b860
SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
TLSH
T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsw76BA.tmp\System.dll
Size 12KB
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsw76BA.tmp\nsDialogs.dll
Size 9KB
SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
MD5 8f0e7415f33843431df308bb8e06af81
SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
TLSH
T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Roaming\BlurAutoClicker\settings.json
Size 7KB
SHA256 8d23b8a83958984faa6938709520fa01a9c982415c42e10bbf82784f550fd890
MD5 730ed7884daf776cd0c565a45ed8a51d
SHA1 551a57881e33fc7811f4dcc95eb6c415fff3797a
SHA512 84d9a12827e5230f7f491d463dea47f0f748e112f8025ae6f8dea3f25a673bc2b040062ea496455947c431065b34903296265ebee91adb5b089409e357dc8adf
SSDEEP 96:8fohf+gsWIB/tYoSNE8Fz9NuK1NV8CiDax:cohf+gsWIB/vSPFz9p1L8Cmax
TLSH
T132E17B69D2141CFA2095D675D879521B1A41E4638FD23C3CB24C888C1F1D97EA2F2EEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BlurAutoClicker.lnk

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BlurAutoClicker.lnk
Size 1KB
SHA256 68dbea604cfee33e24af90dd27c3f9779c8fed7cf31d43a809163168806ce189
MD5 489557f9714ac442c8adead202defdee
SHA1 a43aa570dc37007bfd407cb24cf6039f4f3a8b1f
SHA512 fe63184e90dea5359935afe5e7c0004c3e02a148161578f465222540f11a5f3301ef333a3f1bc738003f9d940dbcbbb8cb4362038cecce21eb2e512e303c2742
TLSH
T134219B069BD62B01E398C1B12FF7A5268A37FC23E6999F590444C75D2D347825E49E0F
MD5 SHA1 SHA512 TLSH

Submit Download

BlurAutoClicker.lnk

Path C:\Users\Admin\Desktop\BlurAutoClicker.lnk
Size 1KB
SHA256 561b05d44d9e0c250d13478804020e27eb4526babf600e45de12248fd84d8e67
MD5 296b2a90f8830633554ff888f66a569e
SHA1 40075a637244638651eccbb9dd4ec58c9f5f7954
SHA512 36fe2c56a038799f8ee625e448578dd4a11db01f793169f1c788391536e0f13fae916cb3d656026582137d03bfc52e6029fa19a9c770f4055979667bf2c9f2af
TLSH
T19821CB019BD61B11E3A9C1B12FF365268A36F823A3449F584044C72C2D307825F89A1F
MD5 SHA1 SHA512 TLSH

Submit Download

BlurAutoClicker_3.9.0_x64-setup.exe.crdownload

Path C:\Users\Admin\Downloads\BlurAutoClicker_3.9.0_x64-setup.exe.crdownload
Size 6.7MB
SHA256 d3268130d274232b97b12e8fc0c1922769ae439811a211a95b998c68429a1378
MD5 d37256489fc5a822cbba31e0e41a478e
SHA1 0391d82df38c4aa26918bc7a3a6aae49866e335d
SHA512 903464d55712d9beb4737fb1f11750c1631669a1b74809c7a08e01fa9dbab71b5f9d2b4c81622e37d95f51f04a879dd9bc5341c7154b45851a52a14afb842d0c
SSDEEP 196608:tPK9tVdM66q4PVdn6WXY3bOqtrBUjbHVfa1nFYa:tC06wdn6WXQUNfiF5
TLSH
T18066339AEA8AECE1DBE5873138888B37454B55DF42846F6BA3CC1D4D11CA0F1CD9099F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1196-590-0x00007FF939300000-0x00007FF939301000-memory.dmp

Download

memory/4472-591-0x00007FF939300000-0x00007FF939301000-memory.dmp

Download