21205dc35aaba89ccd93e8e38166285ac1365fa4337e14482a082b9a0e471d93

Resubmissions

23/10/2026, 02:49

261023-dbcctabw8j4

23/10/2026, 02:47

261023-c91bvscb474

Analysis

max time kernel
149s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 02:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ApexiaLauncher.exe
Size 367KB
Sample261023-c91bvscb47
SHA256 21205dc35aaba89ccd93e8e38166285ac1365fa4337e14482a082b9a0e471d93
MD5 b37206f549cc459fdd56a6d6542a4c04
SHA1 56921e9ef17a0abbaa11fcf370651bddbb19a42a
SHA512 b87c52cab82f64bc29bbd42469f14f6df27ac4ac94e1f5113695b8d381aead96c8a9adf2eee744fe2ffde1770e0253978036a69a0d4584495c15de23d613cad0
SSDEEP 6144:ERDauhDDCzyghlFtbK8A+yXjDd69jc2RJrHR0xYQxCqeNpZGfffffH1qlL34FtlP:ERDautaxFtbKRfXjD49hpKe3tEOS
TLSH
T1A0849F217A41E032D6A205715F79DFA58A6DA8710FA569CBB3C01FBE89301C2EB35F17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\mk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\pl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\ar\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\sl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\ko\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\uk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\ur\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\sw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\my\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\zu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\hy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\kk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\nl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\sk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\hr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\service_worker_bin_prod.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\as\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\km\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\ka\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\is\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\fil\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\ja\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\es_419\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\af\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\hi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\en_GB\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\msedge_url_fetcher_5768_799608027\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_111_1_0.crx	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\te\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\bn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\mr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\sq\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\fr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\ta\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\id\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\page_embed_script.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\it\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\eu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\en_US\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\gl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\sv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\sr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_281214126\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\mn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\cs\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\de\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\offscreendocument_main.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\or\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\hu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\ne\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\cy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_389288550\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\lt\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\no\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\ml\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\fi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\el\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\az\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\ms\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_477439277\_locales\es\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_268913489\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	ApexiaLauncher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	ApexiaLauncher.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ApexiaLauncher.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3512	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-53044966-3830981193-2402648431-1000_Classes\apexia	ApexiaLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-53044966-3830981193-2402648431-1000_Classes\apexia\DefaultIcon	ApexiaLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-53044966-3830981193-2402648431-1000_Classes\apexia\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\Apexia\\Launcher\\ApexiaLauncher.exe\",0"	ApexiaLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-53044966-3830981193-2402648431-1000_Classes\apexia\shell	ApexiaLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-53044966-3830981193-2402648431-1000_Classes\apexia\shell\open	ApexiaLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-53044966-3830981193-2402648431-1000_Classes\apexia\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Apexia\\Launcher\\ApexiaLauncher.exe\" --uri \"%1\""	ApexiaLauncher.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-53044966-3830981193-2402648431-1000\{0AE87E63-7BC3-42DE-8A22-37A815C89124}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-53044966-3830981193-2402648431-1000_Classes\apexia\ = "URL:Apexia Game Launcher"	ApexiaLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-53044966-3830981193-2402648431-1000_Classes\apexia\URL Protocol	ApexiaLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-53044966-3830981193-2402648431-1000_Classes\apexia\shell\open\command	ApexiaLauncher.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5768	msedge.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 4252 wrote to memory of 124	4252	ApexiaLauncher.exe	89
PID 4252 wrote to memory of 944	4252	ApexiaLauncher.exe	92
PID 944 wrote to memory of 5768	944	msedge.exe	93
PID 5768 wrote to memory of 4372	5768	msedge.exe	94
PID 5768 wrote to memory of 2912	5768	msedge.exe	97
PID 5768 wrote to memory of 3512	5768	msedge.exe	98
PID 5768 wrote to memory of 2912	5768	msedge.exe	97
PID 5768 wrote to memory of 2912	5768	msedge.exe	97
PID 5768 wrote to memory of 4740	5768	msedge.exe	99
PID 5768 wrote to memory of 4740	5768	msedge.exe	99
PID 5768 wrote to memory of 200	5768	msedge.exe	100
PID 5768 wrote to memory of 4876	5768	msedge.exe	101
PID 5768 wrote to memory of 200	5768	msedge.exe	100
PID 5768 wrote to memory of 200	5768	msedge.exe	100
PID 5768 wrote to memory of 4876	5768	msedge.exe	101
PID 5768 wrote to memory of 4876	5768	msedge.exe	101
PID 5768 wrote to memory of 4548	5768	msedge.exe	102
PID 5768 wrote to memory of 6028	5768	msedge.exe	103
PID 5768 wrote to memory of 4548	5768	msedge.exe	102
PID 5768 wrote to memory of 4548	5768	msedge.exe	102
PID 5768 wrote to memory of 6028	5768	msedge.exe	103
PID 5768 wrote to memory of 6028	5768	msedge.exe	103
PID 5768 wrote to memory of 4408	5768	msedge.exe	104
PID 5768 wrote to memory of 4408	5768	msedge.exe	104
PID 5768 wrote to memory of 4164	5768	msedge.exe	105
PID 5768 wrote to memory of 4164	5768	msedge.exe	105
PID 5768 wrote to memory of 3608	5768	msedge.exe	106
PID 5768 wrote to memory of 3608	5768	msedge.exe	106
PID 5768 wrote to memory of 3704	5768	msedge.exe	108
PID 5768 wrote to memory of 1728	5768	msedge.exe	109
PID 5768 wrote to memory of 1728	5768	msedge.exe	109
PID 5768 wrote to memory of 5588	5768	msedge.exe	110
PID 5768 wrote to memory of 5588	5768	msedge.exe	110
PID 5768 wrote to memory of 760	5768	msedge.exe	111
PID 5768 wrote to memory of 760	5768	msedge.exe	111
PID 5768 wrote to memory of 5896	5768	msedge.exe	112
PID 5768 wrote to memory of 5896	5768	msedge.exe	112
PID 5768 wrote to memory of 2372	5768	msedge.exe	115
PID 5768 wrote to memory of 4528	5768	msedge.exe	116
PID 5768 wrote to memory of 2148	5768	msedge.exe	117
PID 5768 wrote to memory of 4588	5768	msedge.exe	118
PID 5768 wrote to memory of 4588	5768	msedge.exe	118
PID 5768 wrote to memory of 4924	5768	msedge.exe	122
PID 5768 wrote to memory of 4924	5768	msedge.exe	122
PID 5768 wrote to memory of 1644	5768	msedge.exe	123
PID 5768 wrote to memory of 1644	5768	msedge.exe	123
PID 5768 wrote to memory of 5716	5768	msedge.exe	124
PID 5768 wrote to memory of 5716	5768	msedge.exe	124

C:\Users\Admin\AppData\Local\Temp\ApexiaLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\ApexiaLauncher.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:4252
- C:\Windows\SysWOW64\tar.exe
  "C:\Windows\system32\tar.exe" -x -f "C:\Users\Admin\AppData\Local\Apexia\Client.zip" -C "C:\Users\Admin\AppData\Local\Apexia\Client.new"
  2⤵
  PID:124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://apexia.cc/
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://apexia.cc/
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:5768
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x1bc,0x260,0x264,0x1b4,0x26c,0x7ffafd0cc188,0x7ffafd0cc194,0x7ffafd0cc1a0
      4⤵
      PID:4372
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,17417937183432389283,12962019265858249287,262144 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:2
      4⤵
      PID:2912
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,12856753333841316474,14216831757514098934,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:11
      4⤵
      System Time Discovery
      PID:3512
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,1229783452023473825,552434522750560134,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:13
      4⤵
      PID:4740
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3316,i,8638842966674623308,13365272047108527752,2097152 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
      4⤵
      PID:200
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3340,i,10977083108408284282,11981224835747930609,2097152 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:1
      4⤵
      PID:4876
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,396592702941170529,17173848240813864406,2097152 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:1
      4⤵
      PID:4548
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,14066652159739960059,8246099682057036396,2097152 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:9
      4⤵
      PID:6028
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3932,i,8381654376564273850,4662407115607486037,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=3884 /prefetch:14
      4⤵
      PID:4408
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4612,i,14800832306058326148,442381118188388010,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=3932 /prefetch:14
      4⤵
      PID:4164
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,4785391264040254223,3579515345599606403,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=3888 /prefetch:14
      4⤵
      PID:3608
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,9370688576553676498,7804077111053548304,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
      4⤵
      PID:3980
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,9370688576553676498,7804077111053548304,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
      4⤵
      PID:3704
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6276,i,2269752048493448145,678097451367783511,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:14
      4⤵
      PID:1728
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6324,i,1533130884654808806,7539883310522657438,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:14
      4⤵
      PID:5588
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,14295380783430697579,12239822560758916472,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:14
      4⤵
      PID:760
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6348,i,2700164122064697970,1428564306841290124,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:14
      4⤵
      PID:5896
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4640,i,6196551730628416236,6781822103987945706,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:14
      4⤵
      PID:2372
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,7288241473539364083,12335151690517151252,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:14
      4⤵
      PID:4528
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4732,i,11092762453174337890,17092085942631333155,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:14
      4⤵
      PID:2148
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4740,i,5039978562524706913,12736106231892406764,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:14
      4⤵
      PID:4588
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6484,i,13060819405948600204,16315324373836914714,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:14
      4⤵
      PID:4924
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6516,i,6473110681733494488,8622046946397259178,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=812 /prefetch:14
      4⤵
      PID:1644
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5648,i,136145358341313748,3109606379265030807,524288 --field-trial-handle=2636,i,6152345484380472034,11639802145841716997,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:14
      4⤵
      PID:5716

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4828

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

diffuse.dds

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\PlatformContent\pc\textures\aluminum\diffuse.dds
Size 152B
SHA256 8552dc6e0cb6d92005d531258fdb0648f943c720eafff55b51659ec80b7c3e3c
MD5 b79e6464c2a4e060275c1a947d2c46fc
SHA1 cbc5d75c02e4613e9002e39e9ef1d00d63183fd8
SHA512 79f8c6437f1e73b2b130fbdad2e4890bd0510cc47cfa77fa96f44e1ff4dcaf7718a7677df929e423f5623d59a94e1876d72be73c0be411128b29702237c9d0fe
TLSH
T14FC01102EC80000ECA2A0A308A222C8CC02F00A2CE8288030A0028080323020AAA20A0
MD5 SHA1 SHA512 TLSH

Submit Download

normal.dds

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\PlatformContent\pc\textures\pebble\normal.dds
Size 176B
SHA256 2a51ad9239a2102af2c08ee23e18407c3500770a931332a722c643ffca90a60e
MD5 620e055b9e500e85a131d8be2a65c11e
SHA1 d7fa8af56bfcfd48f38931e3ef8606585664a248
SHA512 551a93a5cffbc008f6d6b122f4c45d686faf1ef5a90975b8b2ef906123d7981e40efc644494957544832f5f605dac434714239a17baea97fcb38175d589d8794
TLSH
T113C01102E08E03A2CA0E0E38822A3308C2AA00220A23880A0BC02C83330B030CAA2C80
MD5 SHA1 SHA512 TLSH

Submit Download

am_FEMININE.pak

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\cef\locales\am_FEMININE.pak
Size 18B
SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Submit Download

.robloxrc

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\AppTempCommon\LuaApp\Models\.robloxrc
Size 43B
SHA256 2187fc8fed9d244f25492aae6df320c0ed6c004bcc8006f46f29d214998b5549
MD5 076c228c0e64a4c738e18656b3571b6a
SHA1 52e33bfdc3940cb3420dfef6d9eb7972c7d6d5b9
SHA512 d451bf819c70573ec6fbc6c2dbd01e93a22cc191bfff81604e5f8868d4f7d69f00565335afd5316f75f2fc732a90e3ea22058c25d573724b15b6c1748d8fce57
MD5 SHA1 SHA512

Submit Download

.robloxrc

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\CodeCoverage\.robloxrc
Size 196B
SHA256 81c9eea5327aa86b7c1b8695539ca86f2cba63144c0ba0baf9981f92929087eb
MD5 eda1ff02a3d52372cabc506469c14906
SHA1 4e8a81495ce277d31cef4e69afb687c601f4892c
SHA512 a8e9aad10a8196b8a869174ba3d690e77472b6d55a69b56cd2f5f40e06a5c7e10088fbd02f332424b0909dab647da20f30d860eb52282e72d37dc2cb052a343f
TLSH
T151D0C9B3E15FA883F8C488CB546C408160242CB866483A9B4BC1E6E1D5CEC7C3211447
MD5 SHA1 SHA512 TLSH

Submit Download

Otter.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\InGameMenuDependencies\Otter.lua
Size 251B
SHA256 86cf6587bdd8e270634765e2c05184a9846ddfe23c0c527f1597c27714c0474e
MD5 ef7871187248e94834d312122497759a
SHA1 9ea71c51ba74e76a5a16c877b33e7b27a6afaa2a
SHA512 7d3c59665386278abf0b3ba31bb3b67375432d3f927a32b83304ab0427021c8a1be42f8f2a79c1d305a0dd78e3718275133e2cb0efb207d1e3152a50dca91d4f
TLSH
T11AD0976AFBC2EB55A4012FD6F42C8A30FF7DF820B74C01E1F89920C0606266D44670DA
MD5 SHA1 SHA512 TLSH

Submit Download

Rodux.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\InGameMenuDependencies\Rodux.lua
Size 236B
SHA256 7da067dc7cc7f40797861d5ed7a9d463766f7697dc9334a8371d0f97ddc318b7
MD5 ae5067980f068f5125498e2bbe0eb5ae
SHA1 997bd4f40028f9d85a8d7f092a359222d28031ad
SHA512 95b887d455be9672bcdda3274b95f06cd8350c9aa0f18caeb31fcf43e789baf27889d1eca66ede33601b84a0437bc0fe886cce2ab916eb3e8575a1967dc072d5
TLSH
T1B1D0974AFFC2D31AA4011F8AB0288620FF7DF820B78D00E0F8592084704035C00630DE
MD5 SHA1 SHA512 TLSH

Submit Download

InfiniteScroll.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\LuaChatDeps\InfiniteScroll.lua
Size 260B
SHA256 07cc4c2083e1ccdb65f3aa5886c39dff74639c2f28979753f22c2adffcaba9c8
MD5 351ecf75c6d77dc3faa94bdb63b1ab8d
SHA1 d1c932babdd3f1e912ec9c2d31a979831c40a333
SHA512 de1b4f2b42bd90b0053119be680598cb0c73ee7027161a21a0435d915a28041fe75508577fe03b5dc7a576b8f65334df473618b3480bec5641446eea22a58255
TLSH
T15ED02B49FBC3930765010E46AC584631FE7DFC70F74D00D0B4551850D0406BC04B31A8
MD5 SHA1 SHA512 TLSH

Submit Download

init.spec.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\freeze\freeze\init.spec.lua
Size 82B
SHA256 ab2b7b1ad191519a8824e1acd53cd64a0d54395e36094e18fa45f8daf2439554
MD5 8b01d67f7cc7006a36aaf598939f52a4
SHA1 7fdd59dcbec71451013c237046204b66dd65cdf9
SHA512 447edd4f14493fdb492edadd7ce5f2e1c35e280125d9a606a75aa43e0b0fe6dad652618f202f79b4a1d8a96d0718fe458d03997c8febdf41a57c29af22b94921
TLSH
T1D3A0128C75C2902CF5073360403F40189633E42110804420500C40C188140876013CEC
MD5 SHA1 SHA512 TLSH

Submit Download

FitFrame.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\roblox_infinite-scroller\FitFrame.lua
Size 266B
SHA256 fc330a085c635ab21c4f037943611571892ac91e06102f2f3f15bb232d2c4368
MD5 f01ed9c2256bd5d924146be8c88e8027
SHA1 8261e1962ef9ac1a8ce9bc11f38c97ae827443b3
SHA512 066598de28eed6cbd8ee5e40bb2fa2cb3e7b05445f18073492b45cffffa3a2151fa6303d439028555b5627e22d25a3eab7f62b8e9fbf02099010ba67f303c7e5
TLSH
T1E7D02B55F7C2D32458011E9560344E23FEFDF410BFCD01D0F596918061C29AC40631DA
MD5 SHA1 SHA512 TLSH

Submit Download

t.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\roblox_infinite-scroller\t.lua
Size 228B
SHA256 d7f269f62bd142a359cac4e1ed66e293e3dc8a829ab8c17c17f81a3c7ff61685
MD5 914999726bd33da9c9e7e51a236959a6
SHA1 6e2181a5def64e9947a0e5091efd20299002297b
SHA512 f4b5a8ebc57d3891c17d5e89b10ef766a9235fdf1b0c43388afd6a8f693358699072068697163db915c2ad4bee2375dae079b8716fbbdb3510668ab75fbba9a0
TLSH
T15CD0974EFBC2C310AC010F8AB42C0520FF7EF820B74C00E0B4994084608026C00B3098
MD5 SHA1 SHA512 TLSH

Submit Download

StartHidingPrompt.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Actions\StartHidingPrompt.lua
Size 105B
SHA256 18a22422001b1c07d2d001d18e803f9d2e042b4cc9d95eab20dfa953b002055c
MD5 143617f56b6342101ee19399983e46cf
SHA1 69d71d6dda43eda1a5a8e8a281ce2aaa45004dde
SHA512 10694e6bd0edcc0ef4415cdc89bdb8678af761e5701e8de91588f5c592a67813feef0b9dadebca26557ba70799b28a784904b41d772f76f37c7d695a89f1946f
TLSH
T1C1B092C87C81F2202C0B39C2C0A2C8C66FBA848005064020A85BE0011B621E0068206D
MD5 SHA1 SHA512 TLSH

Submit Download

Cryo.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\roblox_roact-navigation\Cryo.lua
Size 234B
SHA256 d619b18d99073d049558a2e8a0aac4b76ee4632dee86e685b1e94b2f24b70d15
MD5 015ad3345180165adbf5e4b33c9f233a
SHA1 0a71c1047c66f31225d6264454bc962781345a4e
SHA512 64ed7e4035b50c24571cff0e2f8226060a976bf78f1c3d6c286e5a5bdae21324f002373df80d8fbabaf1927e61d31b2ea49a655400d6c5fefd697a9d71edf20d
TLSH
T1C7D0975AFBC6C314A4010F8BB4684530FF7DF820B78C40E0F46A5080604225C08630D8
MD5 SHA1 SHA512 TLSH

Submit Download

Roact.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\roblox_roact-navigation\Roact.lua
Size 236B
SHA256 18d8a74c775718fc0b9bf8102e73d948a2461d8ee45a6621658acd8ee5832947
MD5 78f7caae2af81d45990ee5c73c0e6cde
SHA1 2b0a63d6575942fe7c34071ed314b32b5190c57a
SHA512 ab95d81320a39220f3168d9fde0dca419e15ec4d961210310b115e78824b0014cd3e1c19c615a7234d1d8017764e882bc2e6ebf7718a43a7ad2f42ee3621bd0c
TLSH
T188D0974EFBC2D318A8011F9AB0280621FF7DF820B78C81E0F4995180608029C40630D8
MD5 SHA1 SHA512 TLSH

Submit Download

cs-cz.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\scripts\CoreScripts\Modules\InGameMenu\Localization\Locales\cs-cz.lua
Size 693B
SHA256 4a43d4888b0a6ab810743f8453ee50bf7e64588e9bb0a956284e2a8c7f6c9e26
MD5 d5ae708edf351d970ecb7e043b08c42e
SHA1 f920bfe71f48ab698fa012bbd8824f0703996fcc
SHA512 b8362d16d209a0b501b11c3e88dcf25174ebd94a1a2b0bc4775964de24fb48ccbef30425a6b0775310e7dd8c42206624d20759e04dff9a4f4d69fa8753c2ee21
TLSH
T19101C0F31EC08B101613D7516988E011EC318CA50766C395B90E51CFB9D7958334DDB9
MD5 SHA1 SHA512 TLSH

Submit Download

.robloxrc

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\scripts\CoreScripts\Modules\InspectAndBuy\Models\.robloxrc
Size 86B
SHA256 9239a058ac088e6b2203a60a5fafa41c0357bb66b831395c8a327506ebfb468f
MD5 bfeeec6f5059a3d7926c43fab20d0e2d
SHA1 b021b858e268ef30264b37be4c5ed46cd4d081ba
SHA512 c512e555a4b5a139641b51c63b51e79fa49ba8966aec24923c7c9559939681e44379bdcbd4162c82f1f7ace3f14ffe8a92333e8d294ab54163e12679b47f1b5c
TLSH
T17BA01221C11ECD57F1C4044698649000402410F036481B7B8781C004C1CEC21122018A
MD5 SHA1 SHA512 TLSH

Submit Download

.robloxrc

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\scripts\CoreScripts\Modules\PlayerList\Actions\.robloxrc
Size 45B
SHA256 82269088b366adf1a905b5714e368bbb65d7f532e0ceecfa0554ce5bb149b592
MD5 f4a3ac1a135ba37d32fa1d491c3b0540
SHA1 35aaf1296a42bd90f877efccc01168d7c2443c61
SHA512 d37a16befb68c3ecffd866d0b377c03f4e41e2dfaff797b98a58efcb9ac3e3137c38bbc464f38995c005c3fa3d3dcbf1eda5d2d43c196192bb3da4d213520944
MD5 SHA1 SHA512

Submit Download

00bc3410-c509-46c6-85ac-f27b32357f3f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\00bc3410-c509-46c6-85ac-f27b32357f3f.tmp
Size 42KB
SHA256 eba9e9f432db5d66ddb97cddaaaa05ccd8a2dbd455d05ebc08c0db157c899db3
MD5 88ffae9309f004a16c264ffd6c9aa714
SHA1 0e43516e003c04f889b5e2e84fd1b715926c9244
SHA512 fe77a44e4ba090c849a593b8d3a1c73605aaa5b79002fb00809adef0145d6ed393d2c4c342e0f3468554ef1b4b42f37db955b716c42da9003cfacc2663a5cec3
SSDEEP 768:jFdJ3GwgblwJOfYf49JfqGJYe1ELsAvC8/YERF6GUxLD:DJ3UfYfEJfDYe1EQujYuhUxn
TLSH
T1EB1307F298D78937DDAD5783A73D2E02AEBCC113B5884994B7891E4CCC861BFD30A855
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1b9d30fb-0b13-4d2d-b9eb-7f6411023d26.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1b9d30fb-0b13-4d2d-b9eb-7f6411023d26.tmp
Size 40KB
SHA256 395930bf6f259d997692b00a3e290035c73956e02de7bb84b1c33a3a5d163cca
MD5 89d49901397e6040ef578415f11f84c8
SHA1 ed2a0594c813fcfc1d285f71c1f485bdb6c19165
SHA512 7a90fa4f4ca766d508af952c92f1a2f95dbc99a096a330971ad44c58489fbe556c681fe229f7d7ecbe64305dba1d366b902507c6cfc88c0f57bf41b77040495f
SSDEEP 768://UxvxjgC+n3ZlA9TOfYf49JfIyJYe1ELsAvC8/YERF6GUUR:SZj3+n3ffYfEJfBYe1EQujYuhUUR
TLSH
T16E03BF32DCA49D379DF1A694B74A1B53EEB88113D0C45A9895DD2B0D09CB3AD230F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

229299c7-86aa-4bb2-ad03-ff0d36aedbde.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\229299c7-86aa-4bb2-ad03-ff0d36aedbde.tmp
Size 33KB
SHA256 afa4142f0357d3bf86bd7f5a2674bce1b5caa06061e3f0a7a0a113620ae99eee
MD5 1a62e31ae6355ed02171516c0d075e18
SHA1 325335ef7e86a1bacf569051462331b9076a3871
SHA512 57a211facdc225402edbaef03fad31f9a49013dba4601649bb023042847d274c4863bd75cff52edc1c5c8823201a86c0c45d9f45a0f3e54aa59507c65b0e76d9
SSDEEP 768:Ir3tlA9TOfYf49JfIyJYe1ELsAvC8/YERF6GUxLD:Ir3rfYfEJfBYe1EQujYuhUxn
TLSH
T118F2AE32ECA59E778EB19694B74A2A43FEB4C213D5C84B54D5CD2B0C05CB2AD234F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2b21318f-c8f1-42cc-bff6-8669273689af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2b21318f-c8f1-42cc-bff6-8669273689af.tmp
Size 33KB
SHA256 17defb7fa7198813e4bbc7c4f0efaafe282ef6c875bfcb89cb4e2c41ee08afbd
MD5 ce3b282cce6976b4dea81ee86d7cc820
SHA1 df9b01578653feb62fe2a8cd99730dcb09a1cdb6
SHA512 07381e6dcf20763361fe657c38d1262f03039133d2b0b41a4944fb5bdcc0e188386d8a3b8aede6fe13956167b090bea9dff43c2a1f9f2aeb10378fabd9d605d1
SSDEEP 768:kr3SlA9TOfYf49JfIyJYe1ELsAvC8/YERF6GUxLD:kr3kfYfEJfBYe1EQujYuhUxn
TLSH
T134F2AE32ECA59E778EF19694B74A2B43FEB48213D5C84B54D5CD2B0C05CB2AD234F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

93b74942-9756-483e-8592-d77f42807f54.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\93b74942-9756-483e-8592-d77f42807f54.tmp
Size 37KB
SHA256 3f3adc072e5a81034c62e4130b40965a461c07adccb5ae5df956750f67bc57f2
MD5 f093c0f3b29dd06a5d0953798554ce34
SHA1 911e40347f29625a6b1feff358eb78953cccbdcf
SHA512 46955b9fa0b2a6cebe0a308573826398b527396d4e616819bb2bb28e44c571bb0bd89663e21118013bbcd8c34c2339c6d3d3e1d28ddb1ce8e9a0f6bf02ed9b54
SSDEEP 768:h/UxvxjgC+i3PC9TOfYf49CKJYe1ELsAvC8/YMK/SHrkw:0Zj3+i3FfYfEzYe1EQujY/S4w
TLSH
T19003C032ECA48D375EF2A788774A4717FEF4812394C46BA496DD2B0D05C72AC630F85A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a9db3b181fe23d2da858b764c2d3bc2baae4a7e217d8cc5885ed34c7b21166b7
MD5 c2e18a2143bb27e5b37e2d5b65c09643
SHA1 43bb7d235630acc17d81e04e37f3cd25e299ecc7
SHA512 08f1e7fa966122b22bea5e316c89298987fac4c53be675ad48a1c1c8a784dc7b1d8789be8d1abdb8cdb59c14d6757e0f1934d0a56d919c8fb08e311621fe4d9c
TLSH
T109D02BB0B77DCCD3D00310FE0015AE0421A370159E0402802302885844001041101358
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2664448b8ab4f4edce89a8c875c31ed1e748ff3060fa1567c434149210bb4fc5
MD5 35b0bc3bbbf168c9b6c74d3bc119d3eb
SHA1 3dde0e79982d9dbcf2dbd3045bae0a5bc63e14cd
SHA512 9c5f83f731b8e4bf7f7e64c2e51191192b13fa5260950a1fcade843318dbf7d5b99057f3ca893e35cb6c19942f5b5852e7124ed01f7c46e7de9bcea70152fc0d
TLSH
T173D02BB4B76DCDD3D00310FE0014AE0421B37015EE040280230248484400104110236C
MD5 SHA1 SHA512 TLSH

Submit Download

4fa02a0e-d093-4885-99e7-ae15fb40b0fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4fa02a0e-d093-4885-99e7-ae15fb40b0fa.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

63f37a09-af40-4630-9db7-84fbfc7657a5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\63f37a09-af40-4630-9db7-84fbfc7657a5.tmp
Size 29KB
SHA256 1b74e996d725d3b623e17b2a41e02d1db60abdea09774c5131d78f641f387e45
MD5 5d876988936d745d3fc93b4097c6c0a8
SHA1 0ea8033c35f98b57e7a6750b4ef46d15db0b84e5
SHA512 ccf85ea6c33fa5ecf84506563fefd14d54f2b025521311e7d480697b8fa2d2e4ac4e343ab0f4d1266a3507d45aa3062eb9543ef9acbdf84fe0a93745b63b7781
SSDEEP 768:zBDnoh7pLuLjiFWgbjfkW8F1+UoAYDCx9Tuqh0VfUC9xbog/OVFGZBK3croNTC:zBDnoXEjiFWgbjfkWu1jaaGZ03HBC
TLSH
T162D2D87B740CCA7F4F804A9D9C197E9E6DA802CB9698CD4047FE945D02C6BEE51260DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

85d60cdd-b8d2-44f3-8275-53d9d0a97e50.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\85d60cdd-b8d2-44f3-8275-53d9d0a97e50.tmp
Size 12KB
SHA256 3ac02ce89b8815b98532536887d107a240da78ce76bd1e83cd82156d092768e1
MD5 b01c53c6e2602ef33e9a9d9642449d37
SHA1 5ba99dd18a3cb8fcc88be1d3a880c44765506c34
SHA512 951efd6c55c553764ae4480af3d96834dde197887dae9178bbf0cd63242a97809402b93258c12bc39c5a0b134928e51774f31076ec8728e410f1a02156544dda
SSDEEP 192:sxRNR2Cw/feEsWsOwZuoDbzoA8pcx/g6+WN8C4/Yxn7qU/GzIgDrAFHJ:sxRNHw/fZsWpure8/5y/PUa6p
TLSH
T13442E716AE28A97B8CC7E219BB55BF53D2FD5032A0D05E48E6FC8A1C15E76DD221340F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 f5af523a2fefccf90c476f240cb2dd155eedcebdc4ccf13f93f8d7c44a10bf95
MD5 e50b2545ae9cf071d3cdcd696b40fea3
SHA1 73bf90cb37ad83dcdf54c952e5468501e32ee91a
SHA512 ff010c8232ae8f3a158e74da81dfea647348444966b951a33e8a8eb81b3a18c86d21d30adc5e960218483d819cc1eac2022f1b7889433c0810aad513ad10061f
TLSH
T1EA615F0411975BD2FBA802B19BD25CCB763C45F8AACF0D71146AF7BC9C6EBB24092480
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c2a12eeffd89beafa4c20fa6ef36634c76a8f2eb158dd178c0e06688da2a909b
MD5 a9c2bb6028a42513161284cd8777c96e
SHA1 222ae0b183909299d70c2ca1507f9b7756e439bd
SHA512 2d47eb46472132cfce584a71b9d8ee6bf190948f420d33d97e8bb0db6b957ed5fee9527bd835712c7fe94d937988f7a91413d7c25651b413a3c881db8048b3dd
TLSH
T17B614F4411975BD2FBA405F19BD24CCB763C45F8AACF0D71156AF7BC9C6EBB24092580
MD5 SHA1 SHA512 TLSH

Submit Download

91302e8b-8d42-4d9d-ab72-82435b9eb79a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\91302e8b-8d42-4d9d-ab72-82435b9eb79a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

2ac986af-bbc8-4a1a-abb2-04486f116745.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2ac986af-bbc8-4a1a-abb2-04486f116745.tmp
Size 2KB
SHA256 d01c4f4d5b0a22922a541ed3b3639d440430d4e3c98f6a4f851bac97e79cfabb
MD5 38045ff822a9fb5cbe43250e7bfec0ef
SHA1 811b98b85b45643074e74db7f73571f378256e3f
SHA512 66c6f33ea22d6cb1a80721e53c9090a7f6213f91319584feb05667a34d35b20b42b25c20ebae20729676b210774e46b429fbebcd43a180b6c501fbedd3ce5ca5
TLSH
T19C41CEF3C3F4856D891196F0AA18AF1FCE2C0511432C7D6AC9E4AE2B93E3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

3b573683-5f53-47c8-9ccf-26a1637fd38c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3b573683-5f53-47c8-9ccf-26a1637fd38c.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

a641b8ed-854c-4797-9990-49978e584ebe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a641b8ed-854c-4797-9990-49978e584ebe.tmp
Size 11KB
SHA256 a27e195c472b1d73dac215fcb81d9961e5f9c393ab5304945ed464517e6ab99f
MD5 e2fc467b5cee8df79d5fddc1862ac91c
SHA1 ba27ccb7244a71f4ceef140aa2f186fd51c0e73a
SHA512 d47f0189ce174124a6f2d78ca84b5ba8b5398c7b3fb03f6da69f6e1a91afb6e2abab6dfcb8fda0c630bbd84a772d0c95e020fb9d5ba06ad7deec82137797c826
SSDEEP 192:sxR2R2Cw/feEsasOwZuoDbzoA8pcx/g6+WN8C4/YxQ7qU/GzIgVAFHJ:sxR2Hw/fZsapure8/5y/AUaQp
TLSH
T1CE42C616AE28A93B8CC7D219BB55BF53D2FD5032A1D05E48E6FC8A1C14E76DD221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b3339245-4329-45fd-9502-bbce0a5a86ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b3339245-4329-45fd-9502-bbce0a5a86ae.tmp
Size 11KB
SHA256 adb945e8e467e6b7ff82a9d5879a5e4c1be585896eeeadb48825c05fb5e0a65e
MD5 e1523831d644a9432c0d9731ffc5af97
SHA1 08afe087dc5fb4eb6fa58914da0cca3cf09866c8
SHA512 8f7f1638db7051c0c6c44ecfdbe527af8aa2628c39fe4ff2378ed528b2ab777bc54bcc39503b696d752599b363813c38afeb78fab737e9459ca7558450cccf30
SSDEEP 192:sxRNR2Cw/feEsfsOwZuoDbzoA8pcx/g6+WN8C4/YxQ7qU/GzIgDBAFHJ:sxRNHw/fZsfpure8/5y/AUagp
TLSH
T19642D616AE28A97B8CCBD219BB55BF53D2FD5032A0D05E48E6FC8A1C05E76DD221340F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15230867-2521-49d0-a966-6b1d738bb5db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\15230867-2521-49d0-a966-6b1d738bb5db.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

c9b2bfae-8d04-4c27-9473-d6961cde2088.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c9b2bfae-8d04-4c27-9473-d6961cde2088.tmp
Size 38KB
SHA256 d8041ec89b23abd21f0e991ac919598008a27678cbca1ec6ee45624218a61566
MD5 77c04a678e53348d0f84f8afbc5c2b8c
SHA1 72f7037b0a026950a10f3137a05cfcafa6098e66
SHA512 94b73d887431923486312671f38103b53ed825d0c39a38c535eee3e1c7c90e3ca00c0206ecd6bdae5864c762c6d62cf4bccca5836f2be4bdc1b3bf8c42a990b3
SSDEEP 768:3/UxvxjgC+i33lu9TOfYf49Jf/yJYe1ELsAvC8/YNRFSHrkw:qZj3+i3rfYfEJfoYe1EQujYZS4w
TLSH
T17403CF32EC748C375EF2A698774A5B43EEF88213D5C46AA485DD2B0D05CB3AC630F45A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

889d52d8-06ad-4ba9-ba5e-92a5a6081cef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\889d52d8-06ad-4ba9-ba5e-92a5a6081cef.tmp
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

d205c1ef-5664-4496-8a7f-40bd9038549d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\d205c1ef-5664-4496-8a7f-40bd9038549d.tmp
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

0257cb82-5947-4c16-b4ec-874659b018b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0257cb82-5947-4c16-b4ec-874659b018b5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4db76634-52e3-43e4-9ed4-9641109f4315.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4db76634-52e3-43e4-9ed4-9641109f4315.tmp
Size 132B
SHA256 cf4125d94d82b448cb33d6f462cf53eec00f2ee8165fa00f1b9c3bdba48e3328
MD5 8126a600a3d95922fb651e3a6f104f68
SHA1 e386add1c2c1d9ca74461e5ce0d1b271d689160f
SHA512 5a0e81111f0d9a0f7943b99f7bad8162de0d3f99fffa9d8f8ab466fa9c7c4249808bedfa6e4d26426bc2d1a422e2155900ba71adc222617a5f0880dc60b89a93
TLSH
T122C02B8F542E47CBBAA5152D42D40B3B4690CD60F199E6B449FA5640006435CC608C47
MD5 SHA1 SHA512 TLSH

Submit Download

ba4c956f-8e2a-4008-bd08-cb0dd7a053d9.tmp

Path C:\Users\Admin\AppData\Local\Temp\ba4c956f-8e2a-4008-bd08-cb0dd7a053d9.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9489b38-e4ec-466a-b93b-41d7bf22158b.tmp

Path C:\Users\Admin\AppData\Local\Temp\d9489b38-e4ec-466a-b93b-41d7bf22158b.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5768_1655013455\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5768_262570888\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_268913489\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_281214126\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5768_389288550\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads