21205dc35aaba89ccd93e8e38166285ac1365fa4337e14482a082b9a0e471d93

Resubmissions

23/10/2026, 02:49

261023-dbcctabw8j4

23/10/2026, 02:47

261023-c91bvscb474

Analysis

user interaction
yes
max time kernel
73s
max time network
79s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 02:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ApexiaLauncher.exe
Size 367KB
Sample261023-dbcctabw8j
SHA256 21205dc35aaba89ccd93e8e38166285ac1365fa4337e14482a082b9a0e471d93
MD5 b37206f549cc459fdd56a6d6542a4c04
SHA1 56921e9ef17a0abbaa11fcf370651bddbb19a42a
SHA512 b87c52cab82f64bc29bbd42469f14f6df27ac4ac94e1f5113695b8d381aead96c8a9adf2eee744fe2ffde1770e0253978036a69a0d4584495c15de23d613cad0
SSDEEP 6144:ERDauhDDCzyghlFtbK8A+yXjDd69jc2RJrHR0xYQxCqeNpZGfffffH1qlL34FtlP:ERDautaxFtbKRfXjD49hpKe3tEOS
TLSH
T1A0849F217A41E032D6A205715F79DFA58A6DA8710FA569CBB3C01FBE89301C2EB35F17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\offscreendocument_main.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\service_worker_bin_prod.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\et\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\bg\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\mk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\lo\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\my\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\zu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\ko\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\lt\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\hu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\page_embed_script.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\as\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\gl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\ne\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\en_GB\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\am\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\fi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\en_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\128.png	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\th\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\no\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\si\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\en_US\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\hi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\gu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\de\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\da\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\vi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\iw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\el\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\sr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\km\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\mr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\en\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\uz\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\id\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\ml\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\ca\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\it\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\ro\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\ka\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\ur\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\be\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\offscreendocument.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\kk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\ar\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\sq\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\es\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\hr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\dasherSettingSchema.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\pl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\uk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\cy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\fr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping200_985181611\_locales\lv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\msedge_url_fetcher_200_427835413\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_111_1_0.crx	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	ApexiaLauncher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	ApexiaLauncher.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ApexiaLauncher.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3432	msedge.exe
2776	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\apexia\shell\open\command	ApexiaLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\apexia\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Apexia\\Launcher\\ApexiaLauncher.exe\" --uri \"%1\""	ApexiaLauncher.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{B6166309-E1F6-492A-AD63-E7D9A0652050}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1404337215-1550464601-2805570857-1000\{D8BBB132-86B0-45ED-B7C9-A6B7B18116DF}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\apexia	ApexiaLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\apexia\URL Protocol	ApexiaLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\apexia\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\Apexia\\Launcher\\ApexiaLauncher.exe\",0"	ApexiaLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\apexia\shell	ApexiaLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\apexia\shell\open	ApexiaLauncher.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\apexia\ = "URL:Apexia Game Launcher"	ApexiaLauncher.exe
Key created	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\apexia\DefaultIcon	ApexiaLauncher.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
200	msedge.exe
200	msedge.exe
200	msedge.exe
200	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
200	msedge.exe
200	msedge.exe

Suspicious use of WriteProcessMemory 49 IoCs

description	pid	Process	procid_target
PID 3152 wrote to memory of 3472	3152	ApexiaLauncher.exe	89
PID 3152 wrote to memory of 4372	3152	ApexiaLauncher.exe	92
PID 4372 wrote to memory of 200	4372	msedge.exe	93
PID 200 wrote to memory of 1436	200	msedge.exe	94
PID 200 wrote to memory of 3432	200	msedge.exe	96
PID 200 wrote to memory of 4976	200	msedge.exe	98
PID 200 wrote to memory of 4620	200	msedge.exe	97
PID 200 wrote to memory of 4976	200	msedge.exe	98
PID 200 wrote to memory of 4620	200	msedge.exe	97
PID 200 wrote to memory of 4620	200	msedge.exe	97
PID 200 wrote to memory of 4536	200	msedge.exe	100
PID 200 wrote to memory of 2128	200	msedge.exe	101
PID 200 wrote to memory of 4536	200	msedge.exe	100
PID 200 wrote to memory of 4536	200	msedge.exe	100
PID 200 wrote to memory of 2128	200	msedge.exe	101
PID 200 wrote to memory of 2128	200	msedge.exe	101
PID 200 wrote to memory of 1900	200	msedge.exe	102
PID 200 wrote to memory of 3312	200	msedge.exe	103
PID 200 wrote to memory of 1900	200	msedge.exe	102
PID 200 wrote to memory of 1900	200	msedge.exe	102
PID 200 wrote to memory of 3312	200	msedge.exe	103
PID 200 wrote to memory of 3312	200	msedge.exe	103
PID 200 wrote to memory of 4516	200	msedge.exe	104
PID 200 wrote to memory of 4516	200	msedge.exe	104
PID 200 wrote to memory of 3392	200	msedge.exe	105
PID 200 wrote to memory of 4500	200	msedge.exe	106
PID 200 wrote to memory of 3392	200	msedge.exe	105
PID 200 wrote to memory of 4500	200	msedge.exe	106
PID 200 wrote to memory of 4868	200	msedge.exe	108
PID 200 wrote to memory of 4080	200	msedge.exe	109
PID 200 wrote to memory of 4080	200	msedge.exe	109
PID 200 wrote to memory of 1872	200	msedge.exe	110
PID 200 wrote to memory of 1872	200	msedge.exe	110
PID 200 wrote to memory of 5424	200	msedge.exe	111
PID 200 wrote to memory of 5424	200	msedge.exe	111
PID 200 wrote to memory of 3352	200	msedge.exe	112
PID 200 wrote to memory of 3352	200	msedge.exe	112
PID 200 wrote to memory of 1572	200	msedge.exe	115
PID 200 wrote to memory of 2564	200	msedge.exe	116
PID 200 wrote to memory of 2288	200	msedge.exe	117
PID 200 wrote to memory of 1368	200	msedge.exe	118
PID 1368 wrote to memory of 4136	1368	msedge.exe	119
PID 1368 wrote to memory of 3028	1368	msedge.exe	120
PID 1368 wrote to memory of 2776	1368	msedge.exe	121
PID 1368 wrote to memory of 3028	1368	msedge.exe	120
PID 1368 wrote to memory of 3028	1368	msedge.exe	120
PID 1368 wrote to memory of 1572	1368	msedge.exe	123
PID 1368 wrote to memory of 1572	1368	msedge.exe	123
PID 1368 wrote to memory of 2308	1368	msedge.exe	125

C:\Users\Admin\AppData\Local\Temp\ApexiaLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\ApexiaLauncher.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:3152
- C:\Windows\SysWOW64\tar.exe
  "C:\Windows\system32\tar.exe" -x -f "C:\Users\Admin\AppData\Local\Apexia\Client.zip" -C "C:\Users\Admin\AppData\Local\Apexia\Client.new"
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://apexia.cc/
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://apexia.cc/
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:200
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x25c,0x260,0x264,0x258,0x26c,0x7ff9b139c188,0x7ff9b139c194,0x7ff9b139c1a0
      4⤵
      PID:1436
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,4800708947101117944,14919890985606589624,524288 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:11
      4⤵
      System Time Discovery
      PID:3432
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,5499219111082919544,7865387467851731127,262144 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:2
      4⤵
      PID:4620
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,5740862533059847926,2369468109585245789,524288 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:13
      4⤵
      PID:4976
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3540,i,14086146212906690542,10590718716044172752,2097152 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
      4⤵
      PID:4536
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3544,i,16923549931562235532,11055005727736567873,2097152 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
      4⤵
      PID:2128
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,5463961617421064893,14924725102844049619,2097152 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
      4⤵
      PID:1900
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,14456620400514299693,15731183014497399238,2097152 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:9
      4⤵
      PID:3312
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3728,i,9687983656686140543,10794870892951562842,524288 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:14
      4⤵
      PID:4516
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,9625304061213665801,722011968999648368,524288 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:14
      4⤵
      PID:3392
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,5456084907410565950,4767218949955570895,524288 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:14
      4⤵
      PID:4500
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,8968130823826003416,6910970718834001811,524288 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:14
      4⤵
      PID:1012
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,8968130823826003416,6910970718834001811,524288 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:14
      4⤵
      PID:4868
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,18132421205859731297,2457047034388667361,524288 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:14
      4⤵
      PID:4080
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6412,i,8003638803066827643,15380243241836932268,524288 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:14
      4⤵
      PID:1872
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,6918250287003806907,16541899815278159486,524288 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:14
      4⤵
      PID:5424
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6656,i,14280394945110801461,8541183382445512237,524288 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:14
      4⤵
      PID:3352
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,7214113610202893198,18149688026709856031,524288 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:14
      4⤵
      PID:1572
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4924,i,15971192929023434838,12018594024203030182,524288 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:14
      4⤵
      PID:2564
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,13534521846920564255,1769819808388026138,524288 --field-trial-handle=2588,i,16158738707600136158,8287713267485717263,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
      4⤵
      PID:2288
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
      4⤵
      Enumerates system info in registry
      Modifies registry class
      Suspicious use of WriteProcessMemory
      PID:1368
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ff9b139c188,0x7ff9b139c194,0x7ff9b139c1a0
        5⤵
        
        PID:4136
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,16888759511818058431,15072382086077632141,262144 --field-trial-handle=2056,i,1463930676222411500,5188616656078869619,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
        5⤵
        
        PID:3028
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,15084311702375367913,7568757686916630380,524288 --field-trial-handle=2056,i,1463930676222411500,5188616656078869619,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:11
        5⤵
        System Time Discovery
        
        PID:2776
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2524,i,6631995771499772400,12920738436777388439,524288 --field-trial-handle=2056,i,1463930676222411500,5188616656078869619,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:13
        5⤵
        
        PID:1572
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4608,i,1672012069636275165,9668571664120012329,524288 --field-trial-handle=2056,i,1463930676222411500,5188616656078869619,262144 --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:14
        5⤵
        
        PID:5320
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4608,i,1672012069636275165,9668571664120012329,524288 --field-trial-handle=2056,i,1463930676222411500,5188616656078869619,262144 --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:14
        5⤵
        
        PID:2308

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5924

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6024

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4596

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

diffuse.dds

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\PlatformContent\pc\textures\aluminum\diffuse.dds
Size 152B
SHA256 8552dc6e0cb6d92005d531258fdb0648f943c720eafff55b51659ec80b7c3e3c
MD5 b79e6464c2a4e060275c1a947d2c46fc
SHA1 cbc5d75c02e4613e9002e39e9ef1d00d63183fd8
SHA512 79f8c6437f1e73b2b130fbdad2e4890bd0510cc47cfa77fa96f44e1ff4dcaf7718a7677df929e423f5623d59a94e1876d72be73c0be411128b29702237c9d0fe
TLSH
T14FC01102EC80000ECA2A0A308A222C8CC02F00A2CE8288030A0028080323020AAA20A0
MD5 SHA1 SHA512 TLSH

Submit Download

normal.dds

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\PlatformContent\pc\textures\pebble\normal.dds
Size 176B
SHA256 2a51ad9239a2102af2c08ee23e18407c3500770a931332a722c643ffca90a60e
MD5 620e055b9e500e85a131d8be2a65c11e
SHA1 d7fa8af56bfcfd48f38931e3ef8606585664a248
SHA512 551a93a5cffbc008f6d6b122f4c45d686faf1ef5a90975b8b2ef906123d7981e40efc644494957544832f5f605dac434714239a17baea97fcb38175d589d8794
TLSH
T113C01102E08E03A2CA0E0E38822A3308C2AA00220A23880A0BC02C83330B030CAA2C80
MD5 SHA1 SHA512 TLSH

Submit Download

am_FEMININE.pak

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\cef\locales\am_FEMININE.pak
Size 18B
SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Submit Download

.robloxrc

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\AppTempCommon\LuaApp\Models\.robloxrc
Size 43B
SHA256 2187fc8fed9d244f25492aae6df320c0ed6c004bcc8006f46f29d214998b5549
MD5 076c228c0e64a4c738e18656b3571b6a
SHA1 52e33bfdc3940cb3420dfef6d9eb7972c7d6d5b9
SHA512 d451bf819c70573ec6fbc6c2dbd01e93a22cc191bfff81604e5f8868d4f7d69f00565335afd5316f75f2fc732a90e3ea22058c25d573724b15b6c1748d8fce57
MD5 SHA1 SHA512

Submit Download

.robloxrc

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\CodeCoverage\.robloxrc
Size 196B
SHA256 81c9eea5327aa86b7c1b8695539ca86f2cba63144c0ba0baf9981f92929087eb
MD5 eda1ff02a3d52372cabc506469c14906
SHA1 4e8a81495ce277d31cef4e69afb687c601f4892c
SHA512 a8e9aad10a8196b8a869174ba3d690e77472b6d55a69b56cd2f5f40e06a5c7e10088fbd02f332424b0909dab647da20f30d860eb52282e72d37dc2cb052a343f
TLSH
T151D0C9B3E15FA883F8C488CB546C408160242CB866483A9B4BC1E6E1D5CEC7C3211447
MD5 SHA1 SHA512 TLSH

Submit Download

Otter.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\InGameMenuDependencies\Otter.lua
Size 251B
SHA256 86cf6587bdd8e270634765e2c05184a9846ddfe23c0c527f1597c27714c0474e
MD5 ef7871187248e94834d312122497759a
SHA1 9ea71c51ba74e76a5a16c877b33e7b27a6afaa2a
SHA512 7d3c59665386278abf0b3ba31bb3b67375432d3f927a32b83304ab0427021c8a1be42f8f2a79c1d305a0dd78e3718275133e2cb0efb207d1e3152a50dca91d4f
TLSH
T11AD0976AFBC2EB55A4012FD6F42C8A30FF7DF820B74C01E1F89920C0606266D44670DA
MD5 SHA1 SHA512 TLSH

Submit Download

Rodux.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\InGameMenuDependencies\Rodux.lua
Size 236B
SHA256 7da067dc7cc7f40797861d5ed7a9d463766f7697dc9334a8371d0f97ddc318b7
MD5 ae5067980f068f5125498e2bbe0eb5ae
SHA1 997bd4f40028f9d85a8d7f092a359222d28031ad
SHA512 95b887d455be9672bcdda3274b95f06cd8350c9aa0f18caeb31fcf43e789baf27889d1eca66ede33601b84a0437bc0fe886cce2ab916eb3e8575a1967dc072d5
TLSH
T1B1D0974AFFC2D31AA4011F8AB0288620FF7DF820B78D00E0F8592084704035C00630DE
MD5 SHA1 SHA512 TLSH

Submit Download

InfiniteScroll.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\LuaChatDeps\InfiniteScroll.lua
Size 260B
SHA256 07cc4c2083e1ccdb65f3aa5886c39dff74639c2f28979753f22c2adffcaba9c8
MD5 351ecf75c6d77dc3faa94bdb63b1ab8d
SHA1 d1c932babdd3f1e912ec9c2d31a979831c40a333
SHA512 de1b4f2b42bd90b0053119be680598cb0c73ee7027161a21a0435d915a28041fe75508577fe03b5dc7a576b8f65334df473618b3480bec5641446eea22a58255
TLSH
T15ED02B49FBC3930765010E46AC584631FE7DFC70F74D00D0B4551850D0406BC04B31A8
MD5 SHA1 SHA512 TLSH

Submit Download

init.spec.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\freeze\freeze\init.spec.lua
Size 82B
SHA256 ab2b7b1ad191519a8824e1acd53cd64a0d54395e36094e18fa45f8daf2439554
MD5 8b01d67f7cc7006a36aaf598939f52a4
SHA1 7fdd59dcbec71451013c237046204b66dd65cdf9
SHA512 447edd4f14493fdb492edadd7ce5f2e1c35e280125d9a606a75aa43e0b0fe6dad652618f202f79b4a1d8a96d0718fe458d03997c8febdf41a57c29af22b94921
TLSH
T1D3A0128C75C2902CF5073360403F40189633E42110804420500C40C188140876013CEC
MD5 SHA1 SHA512 TLSH

Submit Download

FitFrame.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\roblox_infinite-scroller\FitFrame.lua
Size 266B
SHA256 fc330a085c635ab21c4f037943611571892ac91e06102f2f3f15bb232d2c4368
MD5 f01ed9c2256bd5d924146be8c88e8027
SHA1 8261e1962ef9ac1a8ce9bc11f38c97ae827443b3
SHA512 066598de28eed6cbd8ee5e40bb2fa2cb3e7b05445f18073492b45cffffa3a2151fa6303d439028555b5627e22d25a3eab7f62b8e9fbf02099010ba67f303c7e5
TLSH
T1E7D02B55F7C2D32458011E9560344E23FEFDF410BFCD01D0F596918061C29AC40631DA
MD5 SHA1 SHA512 TLSH

Submit Download

t.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\roblox_infinite-scroller\t.lua
Size 228B
SHA256 d7f269f62bd142a359cac4e1ed66e293e3dc8a829ab8c17c17f81a3c7ff61685
MD5 914999726bd33da9c9e7e51a236959a6
SHA1 6e2181a5def64e9947a0e5091efd20299002297b
SHA512 f4b5a8ebc57d3891c17d5e89b10ef766a9235fdf1b0c43388afd6a8f693358699072068697163db915c2ad4bee2375dae079b8716fbbdb3510668ab75fbba9a0
TLSH
T15CD0974EFBC2C310AC010F8AB42C0520FF7EF820B74C00E0B4994084608026C00B3098
MD5 SHA1 SHA512 TLSH

Submit Download

StartHidingPrompt.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Actions\StartHidingPrompt.lua
Size 105B
SHA256 18a22422001b1c07d2d001d18e803f9d2e042b4cc9d95eab20dfa953b002055c
MD5 143617f56b6342101ee19399983e46cf
SHA1 69d71d6dda43eda1a5a8e8a281ce2aaa45004dde
SHA512 10694e6bd0edcc0ef4415cdc89bdb8678af761e5701e8de91588f5c592a67813feef0b9dadebca26557ba70799b28a784904b41d772f76f37c7d695a89f1946f
TLSH
T1C1B092C87C81F2202C0B39C2C0A2C8C66FBA848005064020A85BE0011B621E0068206D
MD5 SHA1 SHA512 TLSH

Submit Download

Cryo.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\roblox_roact-navigation\Cryo.lua
Size 234B
SHA256 d619b18d99073d049558a2e8a0aac4b76ee4632dee86e685b1e94b2f24b70d15
MD5 015ad3345180165adbf5e4b33c9f233a
SHA1 0a71c1047c66f31225d6264454bc962781345a4e
SHA512 64ed7e4035b50c24571cff0e2f8226060a976bf78f1c3d6c286e5a5bdae21324f002373df80d8fbabaf1927e61d31b2ea49a655400d6c5fefd697a9d71edf20d
TLSH
T1C7D0975AFBC6C314A4010F8BB4684530FF7DF820B78C40E0F46A5080604225C08630D8
MD5 SHA1 SHA512 TLSH

Submit Download

Roact.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\roblox_roact-navigation\Roact.lua
Size 236B
SHA256 18d8a74c775718fc0b9bf8102e73d948a2461d8ee45a6621658acd8ee5832947
MD5 78f7caae2af81d45990ee5c73c0e6cde
SHA1 2b0a63d6575942fe7c34071ed314b32b5190c57a
SHA512 ab95d81320a39220f3168d9fde0dca419e15ec4d961210310b115e78824b0014cd3e1c19c615a7234d1d8017764e882bc2e6ebf7718a43a7ad2f42ee3621bd0c
TLSH
T188D0974EFBC2D318A8011F9AB0280621FF7DF820B78C81E0F4995180608029C40630D8
MD5 SHA1 SHA512 TLSH

Submit Download

cs-cz.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\scripts\CoreScripts\Modules\InGameMenu\Localization\Locales\cs-cz.lua
Size 693B
SHA256 4a43d4888b0a6ab810743f8453ee50bf7e64588e9bb0a956284e2a8c7f6c9e26
MD5 d5ae708edf351d970ecb7e043b08c42e
SHA1 f920bfe71f48ab698fa012bbd8824f0703996fcc
SHA512 b8362d16d209a0b501b11c3e88dcf25174ebd94a1a2b0bc4775964de24fb48ccbef30425a6b0775310e7dd8c42206624d20759e04dff9a4f4d69fa8753c2ee21
TLSH
T19101C0F31EC08B101613D7516988E011EC318CA50766C395B90E51CFB9D7958334DDB9
MD5 SHA1 SHA512 TLSH

Submit Download

.robloxrc

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\scripts\CoreScripts\Modules\InspectAndBuy\Models\.robloxrc
Size 86B
SHA256 9239a058ac088e6b2203a60a5fafa41c0357bb66b831395c8a327506ebfb468f
MD5 bfeeec6f5059a3d7926c43fab20d0e2d
SHA1 b021b858e268ef30264b37be4c5ed46cd4d081ba
SHA512 c512e555a4b5a139641b51c63b51e79fa49ba8966aec24923c7c9559939681e44379bdcbd4162c82f1f7ace3f14ffe8a92333e8d294ab54163e12679b47f1b5c
TLSH
T17BA01221C11ECD57F1C4044698649000402410F036481B7B8781C004C1CEC21122018A
MD5 SHA1 SHA512 TLSH

Submit Download

.robloxrc

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\scripts\CoreScripts\Modules\PlayerList\Actions\.robloxrc
Size 45B
SHA256 82269088b366adf1a905b5714e368bbb65d7f532e0ceecfa0554ce5bb149b592
MD5 f4a3ac1a135ba37d32fa1d491c3b0540
SHA1 35aaf1296a42bd90f877efccc01168d7c2443c61
SHA512 d37a16befb68c3ecffd866d0b377c03f4e41e2dfaff797b98a58efcb9ac3e3137c38bbc464f38995c005c3fa3d3dcbf1eda5d2d43c196192bb3da4d213520944
MD5 SHA1 SHA512

Submit Download

19e1053e-26c4-4142-89fc-181835dc5c00.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\19e1053e-26c4-4142-89fc-181835dc5c00.tmp
Size 38KB
SHA256 8bd62ded039aa3ac1ceb9481ce02c365f2484aa184dca777da42eb7e0a3cda60
MD5 65fee6a56ec4a8e1d8a718fca5a3e1ae
SHA1 74998c441fb10caba6bbe951e43674a901f0b2f9
SHA512 fa070a44d2433038300fccc97eea545247295b3f1bb19b96ba9972ccaf3c13303b4ef54f18b8fafc5fc43a588585a16c0fd0d325918d85a34202b08984828817
SSDEEP 768:PO3RPhLYc7fZrK/HCp5XSwQs88uBkiT25pckZr+46bLF:PO3RPhvtr+8ILNBSp9Za4Yh
TLSH
T1E5039D3DEC80587F8CBEB341260E27129EA09237D4B40A58C7C9670DC2BB65DF787866
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

51106c7b-b670-4a1c-b115-3769a6819d52.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\51106c7b-b670-4a1c-b115-3769a6819d52.tmp
Size 38KB
SHA256 fbfad43712db377d1528a69ecab8e53a4e2f4e84650a90fb9da25de76d2b204d
MD5 aad7e05fda3ebbddbceb5e2270afb05f
SHA1 50c0d2793ab98f3fbaf0c52b985a7abae06ab4db
SHA512 984b672799243dd048ba518ac4d849d9610b86383ad1e321892dbabb4d58c3b349d3dcaec08ef91186fab9fdc20ea87cae4a6db3ab9100c7075b9bde3f560e79
SSDEEP 768:n/UxvxjgC+W3aJCc7fZrK/HNp5XSwQs88uBkiTzO/P84g:aZj3+W3aHtr+zILNBsHg
TLSH
T1A503C03AF8945867ACB3D381365B274BAFF05153C4C40AA849EE7A1E03CB75D670B897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8f1a3b98-24bf-4fa4-976e-4cc75cc830dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8f1a3b98-24bf-4fa4-976e-4cc75cc830dc.tmp
Size 33KB
SHA256 4a7b81622da24677b701e9b9989e7670df0fdf50083ea1d999f2a0fe1f8c9509
MD5 eadff0c2e1ee2c90372d22c2d41eb5f9
SHA1 c58c02ebade8265f87c43ea7e43bed63b74177a9
SHA512 6cc224968ec63c15e7253da30726ff32e17a92f20671835f2570267dedc79baca8caaed91ddbf5105e3adc2339302226280d186f15df118a5ce06c8ad8c162cb
SSDEEP 768:JC3QPheYc7fZrK/HCp5XSwQs88uBkiT2O6bLF:JC3QPhWtr+8ILNBnYh
TLSH
T1A5F2BF36F89458639CB2D382765A3743AFF09247D4C80A58C9DE761E02CB39E7747867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4376a697841a2a5dc871f77b5f0719b1d4a38c467bedfbd7d5dae536616547b1
MD5 40c596847315c42a85c89d5bbbf477c8
SHA1 3ac6dc372491b92e7a3e9815b3d40d0a27da2ff1
SHA512 42fede3ca69b61bd7a09b1c7b8746090d4216fa096f7b9fd744fb895cc2cb1c7634dfdbe97e27524e44009fd335dd7b3996ccf8309c471ea30a2bf4135e9e43c
TLSH
T1BFD08015792B7EBDD57F15F584D496442655DFA3DD10011515035C180B743821891DE9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3e7956a2e7cd41804b9e74c4ab542c920f50c83ea58e54a00309c30d35c626d7
MD5 f401c5073631424760f3be89bc9dff81
SHA1 3abd1cb1e018b48ab32fe131be55303f76ce2ed0
SHA512 2c9d234332edda531473b9962f5fa4e7ca31051e6df25be65b32ca4ffbdc3643593826fad840473ee7befec5ee4dae596ad6c74dde4d95ed97d4f2f7782d9882
TLSH
T157D0C02D730F3D1CCE0B14F318C083802201DF53CC01012124030C24066035908400F9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 660dde9648d9cbc663ffaf350c73807474c4a3bb0523f88929412da321686964
MD5 4969c596f7e83723c9c653f0274ceae8
SHA1 2befa34f3b2ca7cc580db6fd1e50d117dd7261cf
SHA512 b18e4b7104a087495f38765e813c4abb362166ce968087b65ae848987ca37b5ec289f8accbd048f6854c2b1d7ec3b1a7f36db7d71fecbd0ff4af44842670cc8d
TLSH
T10CD08029771F7D1DDE5B15F359D493946641DF578C05452124034D24066435919405E5
MD5 SHA1 SHA512 TLSH

Submit Download

01f528a9-9f0e-4a91-93c7-24efeb4ad8bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\01f528a9-9f0e-4a91-93c7-24efeb4ad8bb.tmp
Size 12KB
SHA256 55f8ddcb5dd6ca882c6dfe5561e4c5fa9e4f15e5b74e4fa16006029275dd194e
MD5 dd3b5556afd828cb9e0d6f254ab3f4e3
SHA1 e05c0b295ef201357d7bb795c16a74535249c281
SHA512 3858cafe6c1be89d29ce6bc49fadf6dbad3b339fd7ec0838610be1a13b82ae610fd74911c4c085dc042dc63716bee2cdd90d83a0f818e7c17b95791920b53de0
SSDEEP 192:sxRRCBRoC7/ftsGNZ4L1Qed1zoA8pck/g6+WN8mtXYE3csG1IgDaxHJ:sxRYB17/ftsGj/e69/5fXGEp
TLSH
T1CE42D816AD24A97B9CCBD21DBB55BF53D6F95032A0901E48EAFC862C05EB6DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f4245be-c877-4478-992b-8b0270992ac5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4f4245be-c877-4478-992b-8b0270992ac5.tmp
Size 11KB
SHA256 fb68dc92b9a84b88f11461a136bb468c7fdccb8a90fe192def13cb27ca7da6af
MD5 b9e27a16b24d83ccc673c4d7cae9d526
SHA1 a26412d2d1491b0722d5ae23636e75188d6a953d
SHA512 ac7ddc3a863aff1aaf874d3fbc6d81b992ffa8c74b2d48b31669a69fcbf0dcce814cb65c93d0cc5d369c120a5a6495a6d7ad2cb911ca2eb9c7565dde41151404
SSDEEP 192:sxRRCBRbC7/fts1NZ4L1QeG1zoA8pcK/g6+WN8yw/YEyMsG1IgD4xHJ:sxRYBc7/fts1j/eHb/5W/FSp
TLSH
T13042B816AD28A97B8CCBD21DBB55BF53D6F95032A0D41E48E6FC862C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

896da5d1-9d36-43c1-a8d3-aaa7262cfd97.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\896da5d1-9d36-43c1-a8d3-aaa7262cfd97.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 131051f160dd391d78983e0ed5e50e2796d218fbb18b1a0e774da1a9f694e3cb
MD5 a71dac61b5756302743707fbce19fd7f
SHA1 4b10b98c092daefeeab653e074246ea0e5e7009d
SHA512 369cf2334e5b9a5d01331f5410131d3274965ed33a0e19d21865bbc2cc8bf7b236d9ba4541f33bdcd8dbbe6af1fc6a159504bfd12f2fe1983e01659d70a65f61
TLSH
T10EE02BA5C821AC3B4CFD076851540706D75013263641444FBA3C85098F7173B4281C5C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 0ce4067848480a454a4a1d970228bffb527b10003978acc2ea343782bf111255
MD5 169f3d5a4a6ebf84301e71564229e8d3
SHA1 dc5b58f3ebeae47dba61df48dd4c60d189e884f1
SHA512 568df1660e8ad9923f12d991ff32ef3560e260f88effb6d9a6615404b73410c2fad87b592ac1cba39f2ac79e048fcff7e21f1c6a02c70e820dd59cc95fea548b
SSDEEP 192:/WWF2SVZqb38W3Q4menOUHlaEulv72PDkUNOpl6NJjD+vf:u+2SVysSOyaESj2PCpl6vmvf
TLSH
T17D13743E3A651E12F6C2087E84E76B7983F688BCCCC6A1635636F4298710B561D5E873
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 991566122ef58831b8a0c725de208e95f166add6926e43248ee6991a5f8a7068
MD5 1894326e55d93007e0bcd2e294bd1cb2
SHA1 2a77bffbebd5bfcf49cec9103f43fa27e5079922
SHA512 1f9d2dfd96b8d3ffe1e801cd2429b0809e0f54ea921e7fe055f3f15be6fe14d4907ea8c8d851c72af9ac436f5de7a809074ab986289d0eb1945a5752f558867a
SSDEEP 768:6+TsFNhAcL/8dzL/d2N1ntBQbEYNoPRuNeuLsaIIYXniAiniLk8QOc1zncB6TCI8:6+QnL/85L/dw7TeLKiAiiLQ1z6Ikc
TLSH
T195444FF74951601BCBA842F6D6033A3ED177051E7CD6F8A9E6788C812925F31B2BCE94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 ec4752ff7d910a0792bb89f85622b27ede561046ea69d0b8e171809ffbacbb0b
MD5 9ca475e38da4f8f73b8494a0fefc81cb
SHA1 c357fa966a1c20fd33571cb82145a113ea83cf69
SHA512 0bfcb5b1bc6e4dd14d671d543b3d4258388924f126de083337076955867e75a9baef7fa44767c925cb0a3fa2dfd26bba48cdba1448d56f1a296d299a27390fc2
SSDEEP 12288:0Be598u2qhlFTLaIrU2UrxSB0WcL08csLITKTSwDuHbBWXWy62KY5Fo7TrRPEZIo:6odkILIMLgFHMrrXTao7SGsdXs
TLSH
T1C0167CEDCA7858C3CD639A30B4F0E9477C7413C3F955D1D68898C184026BBC5BBAA76A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 075b77ba6f3f09cc75ac618070bfdb01cd6a80fb5c22168219bfb98768978923
MD5 a2bc95f133db71aeab583b11a0b9e032
SHA1 b8ce66aba992b5a0555e08bf0d52421ce6d246cc
SHA512 f2c7939758549a28045acfc3c0855d138a700d67f2d3e5a856e8bb4dc7e77316a991c5b3f3dcdb49317511df50284c39a1ccf7fda66aa9783b6a4fe3b7ea59c9
TLSH
T1AD41B56785A4C365EBE2053686F06397363081F5AF831C13B96CD9B1BBC6B668C24C27
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 ff5686ad7e8a9f8253d37d5848db1658531bd20fbf4a83a68d6c82f03635c4de
MD5 95e2ae332b362bbfedcceb478b6f5e33
SHA1 6c087508d856ccd8e9e1caafd0884ac9b895b895
SHA512 69cceff2f610e1feb98f2dee3bb1808426e453e4042906d646372e96659723bb946c362b9a5fb584319b6b29b23cd198b2b8367aaeeec536e18b3f9119378b2c
TLSH
T1EB41C66384A4C355EBE2153687F06393363081F5AF831D13B96CD9B1BBC6B658C28C27
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 3f0586e3382790bc0d8b9a82a3f2aa6b3f1864022e98c31f30ea7920a849a82b
MD5 d1943fe539bfb2d5102c6d4bac9ac8b2
SHA1 651cf415baf4d27cc1b5263597b9637ff1dfd98f
SHA512 b96a257629e4d46a1dec3b66ca2f4be59b3f1450fa26a9f0cef31bb49c613cca366f1767f939ade3d3413f327686e89328215df3cc07f53a593b750b73615223
TLSH
T1D941B76785A4C355EBE2153586F06393363085F4AF831C13B96CD9B1BBC6B658C24C27
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 c2b71e2ba08e904d040fae6c0926ef486ea3def63df6406666f8bc65acc7ef30
MD5 a9578bbcad180950ae67cdb4b9a9d2cb
SHA1 e85ecc23df4d7f1fdcae9ef6a2e9a1695eb8924f
SHA512 035abed0aa9b2e094e80e2d51aa1249cf1a0717002227af3c9d647b25e95d40ec6cffaeb842fc129a03fa23ab2b6fb2b2461e844a4c422dbb8094820277c5459
SSDEEP 3:MsEllllkEthXllkl2zEklyl:/M/xT02zny
TLSH
T1804404147FC00C1FCD015434C011C3500370D450451157C734711C735CC55410C50044
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7180685-dc9d-4139-89a2-69cec1fcbd3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e7180685-dc9d-4139-89a2-69cec1fcbd3c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 b078f3096c458f97e5dfc14ec05be7bbd5753e98edef6e9e180d51d62eb02076
MD5 a1bcfe69fd9bbab0278f342436877a38
SHA1 2c713ffe924b68c9f16f9eda0f8eedf0495acede
SHA512 932a5e3823d381e252c5f85bfb461fb49a72b49ec46947f4496a1b78347fde32ab8a47d89906a1d48621cdf516ca4ecb18d17c34e835f1e66c21970925c62dc3
TLSH
T14FE020A575D7C22E595434C312786F4883C43493D697AE472708CCC87687105F775546
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 6cd12a8fe182a0ab95bc79eee5e9de48cd26e4000cde8750336d7198e0c8639c
MD5 cdde50b738c0839a82358dc2e60407db
SHA1 39cfa3c2a7d17a854e174f23edfe19e3033a0d1b
SHA512 40e53c213b78071b6e8d729bb5d89513b16a36409a910b44029ec153c006ac1dde0e39a23c75a51718b57819334f59d7546f6daddcefe7311242cbdffd4235e9
SSDEEP 24:TLZHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfj2ZQN:TdD4jJ/0UC+lf5KY
TLSH
T11AE2A04C3E21F511C4ED733CA0D2C5D09EBC647C478DB67142386CA68D52AA2F49E55E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 399B
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 a5c7e7e63d8861f23505df890769d4e7198daa7d070e35dfe108e3cf001b2f2a
MD5 98200641a1818097ad1321817f10b7f6
SHA1 2ad23d6f385c5593f154aada9ea06219c07b9da6
SHA512 0cc1671caa085334947b8ef6051b8d4ea8bf1bd001784c0485f96f506c074b5cabb8be5408bffc71a2d73730961fa63b7cc5b505cb5cbab3bed22590058f8ad1
TLSH
T147E0865C34DAD22B92D879934B7C5308D7D1745BA7857D46170DC848E145A4DA2BA280
MD5 SHA1 SHA512 TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
Size 429B
SHA256 b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9
MD5 5d1d9020ccefd76ca661902e0c229087
SHA1 dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6
SHA512 5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c
TLSH
T10AE055170A1A50B79BB8DB90EE525CA2E8A0A6B1C50438D63E608234B68A11F738347D
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 22166a682de5b781c628025a526f62e42a2dcdf8cc260add621c36358aecc177
MD5 4ca1b3f513077e2962ae25ec1ad618ee
SHA1 6d654b46b67cc99304e39e01dc655a7d5e1e534a
SHA512 e119242ae02cb9a70fb52356b53d29f85affafc1d957f19c9f47018938285699c58bc956c2ccd716ebeb8bee3f1cad47831180ea251d0c1b61c3530b4155d095
SSDEEP 48:uzBmw6QU1Pz7LSpnpXgij+KY8xUVTVDQK3n7cj:6BCx7LSTXT9xeTVzYj
TLSH
T18492A4872E343803D7964E7B622A0479CF3FE36DAFE5DC65793850610DF8601A0B96AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 b5af9f43708de76f509a9e9bb843a2f58e85f3660b537cdd50eb91606f150754
MD5 23ce5994c6c85bc52a01a15e876e67c1
SHA1 d78b8741c5978ab8810f31ffee060031c37d55c8
SHA512 9c8946bb711b46e0075f379decd7f60f113fc9cfb821dbf02e010146514f0da18b203047e6be24c943745a95be5a717ad02c82c41cc383795558aaca63941f95
SSDEEP 96:h7NNtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/lbbbEOVpZf24JkMfXSFR+CFqD:ZNKH+bF+UI3iWGVoWN3qL/xVVV63
TLSH
T1DD241F5F5F342712CDBD813668E744A36C7DF03F8B5366DA686114B0CEE2652A02C9BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 6cedbf0bb84c6058a6e568fc28af0578b51b07a687e6a220f8511da80951f9b3
MD5 a207719a1c67f346d4b0b1e0f16f4f52
SHA1 4cfdab1e3fb5fb768d0dd19ba6082e9ea08e3e31
SHA512 e71feca176db64725e396b1eb3d532f44e735264be301a56ebebaf1912e64f2ccfbecf30505eeb0fcd3a3cbedfe1b904e75111e9a7f025ff5a91caa9afc164fb
TLSH
T114E0D8A154FFC23A514D71470B586708C7F0341BD6852E051B0CDD89F28A008A2A11C1
MD5 SHA1 SHA512 TLSH

Submit Download

12d50cca-eb27-44d8-b14d-21d1f0f13810.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\12d50cca-eb27-44d8-b14d-21d1f0f13810.tmp
Size 2KB
SHA256 2429e4ffcbc8d6ac992972ab644d97b50f98d8232f17e6fe437dc06eba111186
MD5 c90a8e95ba8d671c874f20d502d8fc8d
SHA1 b70bb5fc4eb6dc4668a6541be61306deada89cd8
SHA512 ab54638b117e5b4387bba7b667c41b46492c93eb39ac2b9e3aad435b73b355579d823357bbded5b9abd704bbd4487a16985b7b0838edf17f067d853ae0115a75
TLSH
T1DA51CEF783F4857D9A0196F4AA14AE2FCE2D0511432C7C6A89E49E2BD3E3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

31d0011a-4609-4626-96d8-49ac73019c48.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\31d0011a-4609-4626-96d8-49ac73019c48.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 9327c6adcb9dbe0d28aa409a6ecd770c20f88b7ae7df084b980276b15e6c1a4a
MD5 4816d372a994b29077cd48b34cc8535b
SHA1 76185c85a3697fb602b3f0026671e56e144bff1a
SHA512 a8f95ba0132acc057c7421976e6ccf162d7cda4ad4967c31f098a7272f159f67361a3929d4821c1bedb67f1ae32d740f9e8774b12e639038ec4ef2cdc7f2adf8
SSDEEP 48:TWt/LopFMaty423w/a9NUuTpwM+obwXBlMFa:6DeMatha9v/MDd
TLSH
T19BB20E4D1F307225D0F15B3BDDD085272E7C101D83A33649EE4820F29DA2A5BF6199AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 690B
SHA256 727f64464bbd9b3eb4360df588b6ae7b97e8806cfca5890004a4a3267c6430a9
MD5 9faa870495105e474813677daf05d0a0
SHA1 0c601f518d5304826243c25c54e8656779ede6d9
SHA512 c6a171063b384de669266a1d91ed86687192985402433ea1032b8ac64faa81d433f3fb3bd8d4407048d7846ce3362cf5877bcf73f0350fccd09243870c22f1df
TLSH
T1BD01DF1385BBA47B107999B7090AF88669BDA8310241A0F4DEA7837D70814FB4A0A43B
MD5 SHA1 SHA512 TLSH

Submit Download

a14754d5-29a1-4451-b372-5a3bbac667eb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a14754d5-29a1-4451-b372-5a3bbac667eb.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 dcec414966f6e22b484ebc46c53b064ce633b94ad172bfd8910e5da0197ed5f1
MD5 b6fc23e2fec88d2a866069e4ad82b52f
SHA1 f862c8ff955060492c15612a2b1c47c8331cfd55
SHA512 ff68babd4a35dbfaa3fab3cb540016c06e879da6915c1f7ac8032e7e2150510831a78f39938d5a39e6d4142102d3e8aa8734742804624de2f6a1bb60bf4a5f7a
TLSH
T18AE0262525CAC27E606924830739C30A87E4F43BD3C43D076F89CB48B9C7509B1A3580
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 c8e9a3b9b1315e13652d37e3cbb3e1dcd428e66c17ed4ed51bbb2d0654e74be9
MD5 7232e9eddb4077e504c479c02530eed4
SHA1 dce8a8a99eaa26b939a13379df3c49169eeef9b6
SHA512 8c3b9c40379239ba38371edc54dbd2d88457b7d0bfbe73a239e32847e7dedf248bfb6979c86f2c41262b51fd29b581105a9a0d2674882e0d2fa5efb176774386
TLSH
T19DB012207B00B216F0CD0432095ACF40D3B0E081058229535C079F340D6EAE7BF80885
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 23eef9a489fadfb75a8b9da7dd4963167401a9210cbff27e8f1073495d15510e
MD5 d8ec548b37fbc0e7669eb670b9095c32
SHA1 b66b5d980add23a5cc856ea822453902915d9f81
SHA512 2fe15c8eaa9950ebd0ac61cc4853db9ed36da6f13215e9ce5980b0b2bbc837f4b772381fb4f93e123344db0c92b03d59854789a786311d836777599e4f169b2d
TLSH
T1DBE0203035DAC76F6189308F132DD70CC3E2B41BD7D52D156F0CD548E24A1447253140
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 3cb0f74d13571de8dea188bca42016b370cd07deefa7383deea646a58ed6a37a
MD5 bd5602430f7791bc6c2ad80f06056feb
SHA1 a50c9ed1084a6b13a64bd3d7c3f095a0222c8316
SHA512 b79814ef1416ee79b73c4e912ed02f9f16802cd680b572d88293c2860f4c42d9278c48bdafa3673e73788e785b8273a7c093794f4e0af20e37172e901e2ab257
TLSH
T1A9E0867075DAC33A508E718B07689F0D87F0B81F97D53E4F570C8448E145249B2BB5C0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 2KB
SHA256 969fb31518607d3340be4b8e4aa766f31f7d47ea1bcd3ee03edb91b07ab6b29a
MD5 13524b55d2cc72b2eaabce483e99caf0
SHA1 7eff9eb9cbed65ef909a5372d5fe2a27d08ccbae
SHA512 691bae5f8e5f2fa54d0d0b5c1a044c61e27961896df93bc19a9e4551b06e989f14fb54ef0d0220346c9fe88a587d483ff2a65b0288c6fbb16e245dbedfbfb3a5
TLSH
T1F351F510B237A342683D272813B98596996174F7381CAC7F37ED81B15F2EE015DBC9D9
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 57d196e303609c44e696393597139b6fa5b790836f573cd6f67aace210e357e1
MD5 32daab291b6d196ee5d4f48d46f45d84
SHA1 18247c132781f7fe534ddfddf72b33cb4438f94e
SHA512 b1e61940df145618f1b391764146ec6b70c840021ad36cb6f76b04e354bd49144d97de585b161a204502cb8b2a886f80416258ff8bd4ff4bcd2cbf4c7eac5632
SSDEEP 96:PvWDvxRhirpwRF/iKdHFNi5fn4lvLCAAKtOogQKVGinfCRdI:PvWDvxRh8pwf/HHFNAfn4lvLzEDj
TLSH
T1649124117237A342283D3B1806B996A6996174B6391CAC7F37ECC1714B6EF021CFDAD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 959d4c4dad7a70e4eb690e56e2cc1534594b96d6392abf620ec38b2cd3075c03
MD5 5bc62f248370f57d42142b86ae30df7e
SHA1 60afd9b9169c545e2eb8dafeb0c1596480d26260
SHA512 1a131a85cdf884a233f64b95c94cf1aef738afb11651d70c3d89cba9f23b06c1149c1d304c37d9eb4e1360e238ad1a8f47095a4d72fd50403b9535f8a3fb69e8
SSDEEP 384:DNr8ZyYSDnxTIC0MEhIKyvB/mJMl7svbFKfk7:xwZrSDnigyI/Bbl7svbF9
TLSH
T18644850A7B746002DC96DD725CB080771E3CA16ECF22A6C16DA254594EB7853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b0a8ab7a-02a3-411c-8bdc-0283c183bb3a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b0a8ab7a-02a3-411c-8bdc-0283c183bb3a.tmp
Size 13KB
SHA256 3a9f3a0e0626c6b03bf26bd902ecedd23deedec0fba9d889667f0850fa8d2d6a
MD5 c7db8c112d5bc3915e4450780c5ce6b5
SHA1 8effccabe7cd5e9cab7e35d0cf103397bd2cf163
SHA512 6b9eb686d2ca713171e1d1134dbc434f63daa8005ff8e291832a19d86d5c5ac3f7d427b7149f2aa1286772d1920bee33c0172dc12bbd0ca08eb655e65de70cd3
SSDEEP 192:sxRRCBRFC7/ftsWWpV6NZ4L1QeH1zoA8pck/g6+WNptmtXYMLrFg1IgDaxHJ:sxRYBC7/ftsWWv6j/e49/5YXGEp
TLSH
T16452B816A924AD7B9CCBD21DFB55BF53D6FD5032A0901E48EAFC8A2C05E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b49f44a1-a37c-4bfe-9025-a2d2148143f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b49f44a1-a37c-4bfe-9025-a2d2148143f2.tmp
Size 29KB
SHA256 ba944898ac31729bbe408742d36ab443fc276e996094eb18ec04befe559a2ced
MD5 8e7eb33bb21e79374955b1b00ae1935b
SHA1 eed9e3e1bae35a957905bd991abfdd12c069f8c2
SHA512 5c8a2f7cd9c2b4a53fd575e8b66c0e22eb5ff7dbb813afe3597fae4c1f714ea6944f6dd9e64ad654f68b66c56b3d2a000c06717bb216d3b7778f9423864ad7e4
SSDEEP 768:U/pCTQ7pLuLjJmWg8KfrL8F1+UoAYDCx9Tuqh0VfUC9xbog/OVuFuyhp1roJd3:U/pCTcEjJmWg8KfrLu1ja9Fu8pOD
TLSH
T175D2D97B740CCB7F4F804ADDA8197ADA6DA902CB9698CD4047FE941C02C77EB911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d4054685-8160-4116-9fe7-bf42660d7853.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d4054685-8160-4116-9fe7-bf42660d7853.tmp
Size 11KB
SHA256 e07558428aa46c0f5651aa8e55cb3116c8af1c38934750623c288249254e499a
MD5 e267d6f1bfee6faa247450bf314d5b06
SHA1 d39b72599fe2c12b70484f8d673bc2f9693a3c9f
SHA512 e52959495564cde18488fe526ea0cfa8f6d8cd9cf967bc3be16b137f2976b15f09a37509bd8e8e8eb882dca1dab104a0bcd7e1610f2193284bac68e9c4a3a3c8
SSDEEP 192:sxRRCORbC7/ftsjNZ4L1QeG1zoA8pcK/g6+WN8yw/YEyMsG1IgVxHJ:sxRYOc7/ftsjj/eHb/5W/F3p
TLSH
T16A32B816AD28A97B8CCBD21DBB55BF53D6F95032A0D41E48E6FC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 72cdfaef2678350f0f4b809165436d026a27399c05ef56aab3e2039f0820fceb
MD5 1dfea94e2fea00ac93eb7d9073541083
SHA1 18a9f6c47538939513ff46b3c5d5752b5ddc9d13
SHA512 08a4e6b64029323982b53f7f9ee6051bf3633a5d0f319d2f56cba69f2d3e809890f5f8b4a41abe3395ab4a37c206c43acd33b12435a50f7f80d2d1c02e34be1a
SSDEEP 192:FQzIII2biMIM4JYcYmxOxMAszli1ECs+F:FQzIII2biMIMSBux1sZms
TLSH
T1B242746E27063B77C16E5B7A13668B545BE448820071252E317AAC0F9DF3F9783C56F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 d4b9ab5ab38f63729a2054d5bcd06d3c4e9b1dc68b542200d794bc1da5211f4d
MD5 be1499a3a4899c23a6b03939d0f03c79
SHA1 452ab0a595cf3cb89c5003117d7df207764656ef
SHA512 4ede80782fb8a98de50b30668987643351090f5443f4ad3be020954fa5c01a487677734c84f1fc8238ce9566532cc68f5adf13b5b3cb84e9dca4d0390f4eeb3f
TLSH
T19CE0CD71B9DAC32FB0EE258F076C474897D1B92BFAD52D4E5F08C54CE185148B2AA5C1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 de5eff1bd34ff95bdc8153190e81c0e923b18b58147def8ae7a84b111f2c72a9
MD5 3e902c60921d46d1d4fb788711be9f4f
SHA1 18abca558ba3ee88155cc10f3e2ffddc01d46cc7
SHA512 1f86841d03153a9879d011f1eae6b27c00b033eea0a551133f1c2506214d4b837115677730e33dfaaa19a535b519d78bdee45a6196eb4ef970b861219bc0d597
TLSH
T147210455F330C108E14E8679507E9B2A0378DC868FB8EC0F447520796EB2B181E8B3E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 37f1016c04ddfa019cd802a8fe3d195eb8f7ffd28250d5462e68924214296bb7
MD5 c644dd0bb5ae2736c04fa89d06518ef8
SHA1 d36812a42f18aefab6fe8daceaa24039c68a5fea
SHA512 ff5ffd00f2383b4f95dac7ef8577ae0da3caf3043b0a8001cd5ae288676f03ba86c4a2e89f5577c128d5523ee93834e2083efe6953629355098fac498c9e0e5c
TLSH
T17DE0206074C7C21F519E248B0368874883E17817EA803E0D5F04CD4CF185185725E5C1
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 17c96a7b3e8b410e77f0406d583f1698301d6aebf0029b619fcafcb104e796ee
MD5 7388562991ab46b40c701e136a7f93a2
SHA1 83ce142dc24e931f7c8868801d054e1b99d4fcde
SHA512 bb54221dc83f98db509abd2864138b87895664c9679609cd6f51501fb46dfa4315d941ab763d37dfc0363e34e07653fc08643b5fa24bb6e9b536dc3f1213072f
SSDEEP 3:MsEllllkEthXllkl2zEelxqnl:/M/xT02zNxq
TLSH
T1A044044CFFC41C05C5151430C111D3D00370DC1045135743345114335DC75C00C00010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 cf4f6600595905bd495929a24eb8f80adb83604df559e4c207d3ba7be777e2df
MD5 dafb49b4f487c6543e8e572c952a0a60
SHA1 f3e2e7f921f141084ddd53f41ccfd9fb0db9714b
SHA512 31c44d40ffb6737efdcc625dd9b2a59b384657d6a13cc404ed5e50fae9f1b865a70c7e1beec99b66fcca10827daaa915a3c744175c637154c8f45f91eca8d7fe
SSDEEP 3:MsEllllkEthXllkl2zEelNC:/M/xT02zNo
TLSH
T1ED44040C7FC45C05C5551130C111C3D04370DC3005115F4734D115337CC75400C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

cb74e5f6-eadc-4460-8718-192edd6552be.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cb74e5f6-eadc-4460-8718-192edd6552be.tmp
Size 33KB
SHA256 fb576ae8a9613b33b0a5675fc700737a15379bc7b275a09c447b34617c56c137
MD5 e2f6a685bcbf9e062db0987419785cd0
SHA1 e5f76f2c067692d619782ce3704097234602cfe3
SHA512 becf67626967f44945684eb840f8b53836aadc8410bb6e5dd9ab80c9c3af2c0ee5e43c94b4dea45ae4823e7ddef975b61fc0f80f836be9030e2f3459a8eaa465
SSDEEP 768:5C3RPheYc7fZrK/HCp5XSwQs88uBkiT2O6bLF:5C3RPhWtr+8ILNBnYh
TLSH
T1DCF2BF36F89458639CB2D382765A3743AFF09247D4C80A58C9DE761E02CB39E774B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5fd385e-b46a-4995-aef2-dc1f7a520394.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d5fd385e-b46a-4995-aef2-dc1f7a520394.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 cf4125d94d82b448cb33d6f462cf53eec00f2ee8165fa00f1b9c3bdba48e3328
MD5 8126a600a3d95922fb651e3a6f104f68
SHA1 e386add1c2c1d9ca74461e5ce0d1b271d689160f
SHA512 5a0e81111f0d9a0f7943b99f7bad8162de0d3f99fffa9d8f8ab466fa9c7c4249808bedfa6e4d26426bc2d1a422e2155900ba71adc222617a5f0880dc60b89a93
TLSH
T122C02B8F542E47CBBAA5152D42D40B3B4690CD60F199E6B449FA5640006435CC608C47
MD5 SHA1 SHA512 TLSH

Submit Download

fecca2aa-5dcf-46f1-a8ef-8075b72f2357.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fecca2aa-5dcf-46f1-a8ef-8075b72f2357.tmp
Size 37KB
SHA256 535106999b52006e0bf3a9c5c89fedf099220cf01142d0eea11ba6ae1249847d
MD5 c17793f1f57b97d428315a666872593b
SHA1 e448b5d865dd3f1400cfe7cd8b77cf102aa7e1eb
SHA512 9a15dea04f1db61d14f4a16b313d7ea106b524d554983fb1ce1d01f83713221233a5a014995d79d69f9460289b9299fe85bf6c19a3fa1d023974d2799f0ce92c
SSDEEP 768:R/UxvxjgC+W3qtdc7fZrKsp5XSwQs88uBkiTCV/P84g:kZj3+W3qktrnILNBoHg
TLSH
T13703D039EC946863ACF3D385365A274BAFF06153C4C41BA849EE7A0E028B35D6707897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b7c97f12-dce1-4f65-9247-db523e09d10b.tmp

Path C:\Users\Admin\AppData\Local\Temp\b7c97f12-dce1-4f65-9247-db523e09d10b.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

e6301a4e-a3ce-4989-93d5-b0d4e94ba260.tmp

Path C:\Users\Admin\AppData\Local\Temp\e6301a4e-a3ce-4989-93d5-b0d4e94ba260.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir200_246677900\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir200_582173631\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads