hxxps://github[.]com/yakupozdemir183-source/EndlessXsound-Yakup-Malware-Collection-0[.]1/blob/main/monoxidesound/Monoxidex64[.]exe

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/06/2026, 13:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/yakupozdemir183-source/EndlessXsound-Yakup-Malware-Collection-0.1/blob/main/monoxidesound/Monoxidex64.exe
Sample260627-qeq2labw4l

Score

8^/10

discovery persistence ransomware

Malware Config

Signatures

Downloads MZ/PE file 2 IoCs

flow	pid	Process
116	1368	msedge.exe
116	1368	msedge.exe

Executes dropped EXE 2 IoCs

pid	Process
1488	Monoxidex64 (1).exe
2064	蛊蚐駒卸菪崀邯笄碮鿰劅礝恾蒓蜀蛺.exe

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
96	raw.githubusercontent.com
116	raw.githubusercontent.com
118	raw.githubusercontent.com
95	raw.githubusercontent.com

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1368	msedge.exe
4956	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134270394628525972"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-28459746-3881314244-166055492-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-28459746-3881314244-166055492-1000\{0667052F-F293-4C00-87EE-A0D88E93EB4C}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-28459746-3881314244-166055492-1000\{B881F93A-3159-41CF-BE16-274849BF1013}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe

Suspicious use of FindShellTrayWindow 50 IoCs

pid	Process
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe
5768	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5768 wrote to memory of 6056	5768	msedge.exe	89
PID 5768 wrote to memory of 5952	5768	msedge.exe	90
PID 5768 wrote to memory of 1368	5768	msedge.exe	91
PID 5768 wrote to memory of 5952	5768	msedge.exe	90
PID 5768 wrote to memory of 5952	5768	msedge.exe	90
PID 5768 wrote to memory of 4556	5768	msedge.exe	92
PID 5768 wrote to memory of 4556	5768	msedge.exe	92
PID 5768 wrote to memory of 3436	5768	msedge.exe	94
PID 5768 wrote to memory of 3436	5768	msedge.exe	94
PID 5768 wrote to memory of 3436	5768	msedge.exe	94
PID 5768 wrote to memory of 2780	5768	msedge.exe	95
PID 5768 wrote to memory of 2780	5768	msedge.exe	95
PID 5768 wrote to memory of 2780	5768	msedge.exe	95
PID 5768 wrote to memory of 2132	5768	msedge.exe	96
PID 5768 wrote to memory of 1108	5768	msedge.exe	97
PID 5768 wrote to memory of 2132	5768	msedge.exe	96
PID 5768 wrote to memory of 2132	5768	msedge.exe	96
PID 5768 wrote to memory of 1108	5768	msedge.exe	97
PID 5768 wrote to memory of 1108	5768	msedge.exe	97
PID 5768 wrote to memory of 712	5768	msedge.exe	99
PID 5768 wrote to memory of 712	5768	msedge.exe	99
PID 5768 wrote to memory of 4684	5768	msedge.exe	100
PID 5768 wrote to memory of 4684	5768	msedge.exe	100
PID 5768 wrote to memory of 5628	5768	msedge.exe	102
PID 5768 wrote to memory of 5308	5768	msedge.exe	106
PID 5768 wrote to memory of 4412	5768	msedge.exe	107
PID 5768 wrote to memory of 5920	5768	msedge.exe	108
PID 5768 wrote to memory of 1152	5768	msedge.exe	110
PID 5768 wrote to memory of 900	5768	msedge.exe	111
PID 5768 wrote to memory of 900	5768	msedge.exe	111
PID 5768 wrote to memory of 5880	5768	msedge.exe	113
PID 5768 wrote to memory of 1436	5768	msedge.exe	114
PID 5768 wrote to memory of 5880	5768	msedge.exe	113
PID 5768 wrote to memory of 1436	5768	msedge.exe	114
PID 5768 wrote to memory of 1436	5768	msedge.exe	114
PID 5768 wrote to memory of 4864	5768	msedge.exe	115
PID 5768 wrote to memory of 4560	5768	msedge.exe	116
PID 5768 wrote to memory of 4560	5768	msedge.exe	116
PID 5768 wrote to memory of 4560	5768	msedge.exe	116
PID 5768 wrote to memory of 4164	5768	msedge.exe	121
PID 5768 wrote to memory of 3408	5768	msedge.exe	119
PID 3408 wrote to memory of 6072	3408	msedge.exe	120
PID 3408 wrote to memory of 4956	3408	msedge.exe	122
PID 3408 wrote to memory of 3280	3408	msedge.exe	124
PID 3408 wrote to memory of 3280	3408	msedge.exe	124
PID 3408 wrote to memory of 5404	3408	msedge.exe	123
PID 3408 wrote to memory of 5404	3408	msedge.exe	123
PID 3408 wrote to memory of 5404	3408	msedge.exe	123
PID 3408 wrote to memory of 2036	3408	msedge.exe	126
PID 3408 wrote to memory of 1668	3408	msedge.exe	127
PID 3408 wrote to memory of 1668	3408	msedge.exe	127
PID 3408 wrote to memory of 3128	3408	msedge.exe	128
PID 3408 wrote to memory of 3128	3408	msedge.exe	128
PID 3408 wrote to memory of 2756	3408	msedge.exe	129
PID 3408 wrote to memory of 2756	3408	msedge.exe	129
PID 3408 wrote to memory of 1324	3408	msedge.exe	130
PID 3408 wrote to memory of 1324	3408	msedge.exe	130
PID 3408 wrote to memory of 5852	3408	msedge.exe	131
PID 3408 wrote to memory of 5852	3408	msedge.exe	131
PID 3408 wrote to memory of 1148	3408	msedge.exe	132
PID 3408 wrote to memory of 1148	3408	msedge.exe	132
PID 3408 wrote to memory of 1616	3408	msedge.exe	134
PID 3408 wrote to memory of 1616	3408	msedge.exe	134
PID 1488 wrote to memory of 2064	1488	Monoxidex64 (1).exe	137

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/yakupozdemir183-source/EndlessXsound-Yakup-Malware-Collection-0.1/blob/main/monoxidesound/Monoxidex64.exe
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7fffd710c188,0x7fffd710c194,0x7fffd710c1a0
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1544,i,9909198040827787561,10211274704463048939,262144 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,11122170283078143093,13461461870385751527,524288 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,17015886805265557946,8505140551531105710,524288 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=3196 /prefetch:13
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3648,i,16589331805036999518,14914435892429396864,2097152 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3660,i,18148670976221432311,3473498521649891416,2097152 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,16424585106793744015,2749294004964768892,2097152 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:9
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=1588,i,9532395610275548430,11490025993629766899,2097152 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,10294149076880609893,8378745340687560072,524288 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
  2⤵
  PID:712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,12316183138131128791,5089276435336085202,524288 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,12720714043535155480,8534642566522866055,524288 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,12720714043535155480,8534642566522866055,524288 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,6924851643199102026,6730905402876753992,524288 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:14
  2⤵
  PID:5308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4632,i,10190206730301797835,12072406412840804453,524288 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3732,i,14886766474566758118,11173972238678707237,524288 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:14
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6576,i,15375126092237119470,13235515349654535098,524288 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:14
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6576,i,15375126092237119470,13235515349654535098,524288 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:14
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,15719190198022983139,11731901784620875882,524288 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:14
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,6570696058694777161,17717739058919952290,524288 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:14
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6176,i,15878032810061674423,12698781886786527804,2097152 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:1
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6904,i,6768779822665203668,6450160145921473826,524288 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=3784 /prefetch:14
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=3792,i,1467041912839042643,818918692621964853,2097152 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6216,i,15291098201887246055,9815543312514219529,524288 --field-trial-handle=1940,i,4270970396262738378,938525871462692380,262144 --variations-seed-version --mojo-platform-channel-handle=6936 /prefetch:14
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:3408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7fffd710c188,0x7fffd710c194,0x7fffd710c1a0
    3⤵
    PID:6072
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,9623877486518701512,18033341326027927939,524288 --field-trial-handle=2812,i,17048294477431558633,16977486258289881244,262144 --variations-seed-version --mojo-platform-channel-handle=2900 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,7256524128435006269,9311312408288984867,262144 --field-trial-handle=2812,i,17048294477431558633,16977486258289881244,262144 --variations-seed-version --mojo-platform-channel-handle=2804 /prefetch:2
    3⤵
    PID:5404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,5075342156802006143,8148234967101175625,524288 --field-trial-handle=2812,i,17048294477431558633,16977486258289881244,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:13
    3⤵
    PID:3280
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,6543621834313440781,6016117419914378197,524288 --field-trial-handle=2812,i,17048294477431558633,16977486258289881244,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:14
    3⤵
    PID:2728
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,6543621834313440781,6016117419914378197,524288 --field-trial-handle=2812,i,17048294477431558633,16977486258289881244,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:14
    3⤵
    PID:2036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4580,i,12002565382757434470,8018443113772938532,524288 --field-trial-handle=2812,i,17048294477431558633,16977486258289881244,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:14
    3⤵
    PID:1668
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4620,i,2632414404054355328,9169530206420036589,524288 --field-trial-handle=2812,i,17048294477431558633,16977486258289881244,262144 --variations-seed-version --mojo-platform-channel-handle=4600 /prefetch:14
    3⤵
    PID:3128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4688,i,14091940922071902936,17532197301230980697,524288 --field-trial-handle=2812,i,17048294477431558633,16977486258289881244,262144 --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:14
    3⤵
    PID:2756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4720,i,14180127069724005419,15954764969282099951,524288 --field-trial-handle=2812,i,17048294477431558633,16977486258289881244,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:14
    3⤵
    PID:1324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4600,i,1390199102296129524,15180703199803091070,524288 --field-trial-handle=2812,i,17048294477431558633,16977486258289881244,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:14
    3⤵
    PID:5852
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4724,i,9357607007274632504,7709584696501349627,524288 --field-trial-handle=2812,i,17048294477431558633,16977486258289881244,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:14
    3⤵
    PID:1148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,10415190850282421601,10542250291388100926,524288 --field-trial-handle=2812,i,17048294477431558633,16977486258289881244,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:14
    3⤵
    PID:1616
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,3855879820579263039,12628046022352558915,524288 --field-trial-handle=2812,i,17048294477431558633,16977486258289881244,262144 --variations-seed-version --mojo-platform-channel-handle=4620 /prefetch:14
    3⤵
    PID:3820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4652,i,17195657664435354430,14082869534252485380,524288 --field-trial-handle=2812,i,17048294477431558633,16977486258289881244,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:14
    3⤵
    PID:6032
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4640,i,2885556736117360345,9126471282805028101,524288 --field-trial-handle=2812,i,17048294477431558633,16977486258289881244,262144 --variations-seed-version --mojo-platform-channel-handle=4680 /prefetch:14
    3⤵
    PID:2872

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4540

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5552

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5340

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4164

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1112

C:\Users\Admin\Downloads\Monoxidex64 (1).exe
"C:\Users\Admin\Downloads\Monoxidex64 (1).exe"
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1488
- C:\Users\Admin\AppData\Local\Temp\蛊蚐駒卸菪崀邯笄碮鿰劅礝恾蒓蜀蛺.exe
  "C:\Users\Admin\AppData\Local\Temp\蛊蚐駒卸菪崀邯笄碮鿰劅礝恾蒓蜀蛺.exe"
  2⤵
  - Executes dropped EXE
  PID:2064

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b778cc535cfe9ef8131b9d727f221c5d63c7f15bcd4cd19db345f2c97bdf5594
MD5 a4b8f3b6133ca4686118d40b6c8d4ea7
SHA1 cbca41492cec17181764c1371da84a0e0481f93f
SHA512 65135f099a2e372c9a11538ad8ff73abdfa24612895545773034b613318a9166b5560e41026d2ec245dda6b088efde1566126dae35182ddcb3fe795a786554ad
TLSH
T1B7D0C0743F42F108C04904F08534EF101337B81230839900F070C80E84E40C0A3C9053
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b4edbbe62f29386512f6cd1726c675b23fdeee21a26a2896a394ff9b87143167
MD5 c0060c375421fc206e85d98fc2ea6677
SHA1 2189b0dd881564dfef39585cc2cffda4dcd3ec91
SHA512 338dc8a4791fbbe759582d4a8fd55c1a6245fcc722bff11ff926118daa91041d62e98b05cb2e63b22ea119d41a557c511dcfb12592ab416dab9980af0b5ca713
TLSH
T1F2D0C0703F42F008C04904F08534EF101337B81230839900F170C80E84E40C0A3C8043
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3d4fd35663b02db08c62f7b3c6893c5b67e4323a594e5630529b968005a74fe5
MD5 1b39f57384fbb4eac1f89563ab6336a3
SHA1 ddfc46b2273d05819958f696555d3db07bc7a4ed
SHA512 877126d091d1ace683c81a203529aa4aecc06ebd6bf27ba635cea82791a10f0faf9e4280e149d6f2b1a9d9f2571e2da1aacaf7695b3654816f4de063192526ca
TLSH
T1E3D0A7687E26E9D9C12810B595314F00BB66746372165601A1548C0D9CB94C556D6991
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 70b2d05d8beb47e1d2675ca3bfdd6b482b76fafe4d7aaf7d3d2b27f8dee8ed53
MD5 c9edcdc9ea5a855b68d7a46dee6f285a
SHA1 057f3da42e89fb66163fcc80fa364395f65cd193
SHA512 37c72d04f32d2dd45ea16a6d426fddd02c8ea275aa923b5f34d81d50e86084ef5e3f00cc772b95ad183f3de0e1741a84b61b11373693822714e2324511b170d7
TLSH
T11BD023EC7A46E909C10515F154368F1177B27463B75B6501D154990C5CFD9D902C70A5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d00505c6f57c6427c13484dade45c72880589bb86bca02cd51e6449975b76d45
MD5 a7ececd6133acd064b8e031390808837
SHA1 63191ca92356aa93aeb8b8c540e9466127b91ce3
SHA512 413822b9e7c7ba6213fe1ea2246b0293b86e480331a405cb889a69b349243a05c186db1a708d827ced0212eaaf03f4757deea447d378c6a0b2bb498b475d4bb9
TLSH
T14FD023E87A46E90DC11515F154368F2177A27463735B6501D154990C5CFD9D903C60D1
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 4ce5ac69232a2ef859175ce51ac77aad76b2bdd34a166977cde7c95d645d39ff
MD5 a20a1c30a92861e316fd7795a5d17d04
SHA1 93564e3521828ba25921757842fcd03beda4d6ad
SHA512 491f0e13144948b0d58c9470a184ba0dfc071328371aa0048bcf8af5338a040ebdfc28916925aff6e5e7afa8a1db46b5ec134f26d5b2c25f7aaafd8d51b69a9c
TLSH
T1E2E02BA9CD25D82709F907186421564AE60417672B40494F363D570C8FB1A3B428683D
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 82e477898cac5c78159bade76960879ccbcc5087a469c3d085940b28039e0315
MD5 86d87c5534929e28ebb2ba88134af074
SHA1 699c6019c88f576e0adbfae8e5b9ec73d388a77d
SHA512 3c289ff3df193d0fe2189228e0ad11875bab2495b810b79ddd948c56da93615c4d7c1dfe9b8ad103814be123e5edd8718115145de68c89ebb4161d619758f1bf
SSDEEP 384:dfke48FxstXDpakfdnp+7csq0Y1lM+XV2y7VOywwH:df/xstHnpuQM+XQyRN
TLSH
T1D6134EBE77564CF6D6D220FC0D0B4AF1A338C6B2E9A045A3D63A7521520637EB80EDD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 7b437fb31078daa23fd2bb769c3188fafd84e58e3a25eb0a24fdb9f9ae8207c9
MD5 a3e1a6bbde50c3017de0ae2ae2693e59
SHA1 1deda55c42225b543b3a32aaf1e7a7a622603b74
SHA512 9d5c269c7e2ae7632bb39271e0ce67a2edbbd236c215e917a4f932376d4d7c5c775fe8b838d13b1921ac4988160996268d0ddc9612f34c5151d0f56c37239a71
SSDEEP 3072:ikhL/QL/GFsGqN5H40L/CL/lL/OLqapv0:ikhL/QL/GFTQ5H40L/CL/lL/O2C0
TLSH
T1584440F71910A05ACF6816F6DA023A7CE27B024DFCD1EDDDD6390C916825F32A2B9E54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 3ae6fcfe44edd7e923ebf0a547140503bd2666dbe8681675d45d409c6d297f89
MD5 a7e05133bab536f7af2da21415eef244
SHA1 92d238303e9e06bc1b131856361fcc07460a208d
SHA512 f303d4873cb858b48e57cb2247b4748f28adef28e65f35a3b98a54c614f0a2ecf60056480826f20cf0c5b64385a1a965cb08659d7f70ece6c7caea2b004bbb87
SSDEEP 3072:Rv9G+6tjGarS+HZdicBoj7iOWvDkgKqPciY5/C9+bfA5NarYOVgHpe9Ws+cpkOqX:RQpjGgSydn4Ir35WA5NuKjTU1qsUX
TLSH
T109257BEECB682C92CE6B8B70B4E0D9077E712083B65CD0D39944C5D997D6B8175E82BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 ec44a6c4649c9dd3b54ca0df9fa80b9043aaba7abd7be829405e01a520df3c77
MD5 78cf8513baeb046d394f831e5e4e8953
SHA1 0a5f3345b73ae2acdcff0ad3f589d08b6d3644b9
SHA512 0139a84e9bfbfbb879117e8748304daa0163f40a1e44d4b88f71b9e4c55393408b2effcac560fd6201eb57605cf15d27b90d2c04d2e0b3e994944af0458841ce
SSDEEP 24576:fDKnGsPoqhxTzsvZMW1xElqnMC44jFgRCea3zBouKqq/2dxU/R9iGB17ADw8Rdzv:funPPo+lQOy44RgPa3VouKqv2yWSvF
TLSH
T1DB868EDED67458C2CE628930B1E0ED977D7013D3F994C1D2C868C58841AB7C6BB9E26E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000099

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
Size 330KB
SHA256 ae9405b9556c24389ee359993f45926a895481c8d60d98b91a3065f5c026cffe
MD5 692361071bbbb3e9243d09dc190fedea
SHA1 04894c41500859ea3617b0780f1cc2ba82a40daf
SHA512 cfdd627d228c89a4cc2eac27dcdc45507f1e4265eff108958de0e26e0d1abe7598a5347be77d1a52256de70c77129f1cd0e9b31c023e1263f4cf04dbc689c87e
SSDEEP 3072:7/yvAAdLz9aha9RMXtdf+IBC2nQ4oUehONFlT7vJ333AlOi9E3AAqgm:z6dLzgiMXzBTJTDqlOi9E3AAqgm
TLSH
T13174C3027151DA99D8214130CC2ECAF67E227CE4C6B149E736F2BF7F7D7524269AA720
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 c5f9f96b73599c55d603fc7104fdbb31d07aa1844f9c75f168058d80e5d805ef
MD5 5921a44aed604efee3a480e8421c8550
SHA1 1cf73fb1da2e090f94ec7f2a9a14a5ccb87188bd
SHA512 2ace04885da4b7a6d19093d60b42f9ce3a60dda0d9bbd1b1812f8bc64b27352d74365a3241f42613da3410a24ce1fc6ca0044142cf6eb5ca88f3f115fed84df1
SSDEEP 96:611gtW3aq3hin5eGCE/XZvIm/rc6/tJ36w/2aQiPQ13oc89XaVsSG06IOYeNO5jY:61YW3F3hin5eGC+brcstt642QPi3ocAD
TLSH
T168C14B8B835A18E8EBB695755CE538D6F330E0439B0B1FD1FB908AB549363AC3681CC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe594c32.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594c32.TMP
Size 3KB
SHA256 f5092283a05f16594e167b1fa6a429d9a80ab45bd66c0fa3beec3c6a83ad8afb
MD5 273bbc04a25c6b6fc2af08c984f6bae4
SHA1 55a6af3396c57885f1310289458376500e887afc
SHA512 8ddbf5e161752001036649c0cfc8cfbc705ad6192b0e315fb0b17d0007c28c9a039691b53860077ebd3e919ea2624a7db015b1f412f5c90f6221f551d1643d88
TLSH
T168718118845A0978EBF791B49CE244DB3330F492E91B1F11BED4CE399A2A77C3AD24C1
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 971d242c675e5f62a5844b1530f36d2260b1916474f06ed184a8d9498dd36671
MD5 8b5c4f136a5a3c9c65d17c72a3089bd0
SHA1 c9f1502f252fe6b569466f640333960b831dd7a7
SHA512 eb0e1e1bf32c917731ec3a9bbc6c71fd861adc8b6e3caa8e776b07b4d747911d5e967adb3c5d3b21a7c3d610e294cd5351b1e5ae725d46d46e4455a9618ced14
SSDEEP 3:MsEllllkEthXllkl2zEmOl:/M/xT02zDOl
TLSH
T1D0440414FFC04D07CD041070C075C3501370D5510513D7F73C5114135CC75C00C04400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 44f00f093ba7a4504be00b4a6a9052db47376ff262783ba0901fcaee91ba0b8f
MD5 9d29592ea7faf2aee718a2a24290470d
SHA1 cbe4c89f135913d6effd6c74e2dfed364c804d92
SHA512 4ede2cb057ecc65b91d0fc1be73b77db1e905fda043370571b7d0ded8c12e79a4eed2375ec0d74ab085b799fdfff861f5fa5373f399ca5da24cb59e582da4918
TLSH
T1F7E0D899D5C7D25DA6A038C342387748818074CED7966E171B00C8C47B47245B755BC6
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 52b8629e375ee76dd84639997aa6a037dbf44c1e3a695b21caeda679e9bfdc65
MD5 dea971d288d9c0d20aa01a4a7db30b61
SHA1 d655833969afa9f7e10ad2669744452bad06ef0b
SHA512 b0a83f5c630d0bafab19f97c3842c244267ac37899fb5a72eaca9e665ed866da26fe7a489c91672530d7fcef27244ce7e3f669ea5d4aed711f5f24dac76858fe
TLSH
T198E0869454EEE23BD5A5E897826DB388C7D1748FE7897E0A170AC89C6207745A3A6280
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 24KB
SHA256 fbe1cc303b258c95b3c9a3b2f4c3b8eab5239c1021fd54e3fd0acd5c63764249
MD5 373b53116b5950bb917c6e2bf75eeb8b
SHA1 ddd6a17828fac6428c388546b9d669702ec50ad4
SHA512 a736e617a03eb8e67b6bfbe0ca7f07b825082495584543d202126315e9291edc0186428d3a3a74d8c55fa6efd0de62b213f81881f75ea31579901e61fc5759b4
SSDEEP 96:UBCxFCNdL4yKoFdWBOJsUYlTCdad2bybsq1pW4EM0j:GazyX6BtUoTCcIIhEM0j
TLSH
T140B2D69B5E31301BCB461E3E1149A8B6CE3791ACEFE1DD597071443598B85EB90328FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 ed0deb19ac0ee5aad5c303794165cefc7c16c9397e3164c1efd3d9839635d203
MD5 f7f2a0ae2f085a8a8df2037f8aa7666f
SHA1 b54e36a13ae34edd5d39fafe271e67751d872948
SHA512 2ddf84bb58b9f9cf508ae17944a741c38b7933c690c24d14cdfc2c11cb455174e8bfbc3f0aacb8a5eab962be4b567d1ba6a9fb6bc683bedc1957ba4e8ec999ed
SSDEEP 192:6rEKEXT+3e+Q3H+bF+UI3iWGVoWN3qL/MVVV63:6wTD+3e+Q3IkUI3ijVoWN3qL/MA
TLSH
T1CF24634F5F212326CDBD903568DB44E6587DF07FCB1226DE68621474CEE2697A02C8BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 516B
SHA256 f206da8ac498d0b63186cb2a5fe0fb732adbe3017ce4a4cd828319115b7f3cab
MD5 04a47178ab869ac0fe35778b3218ef6d
SHA1 0d8e9089954180ea831a683f09b607560496aa32
SHA512 306dc2e3139e3dd10a5de7b63e05a09295031b64f39bc64a46d413f634c37bcc3f5ded3d54797bebfbe6798f4890096de22829ba0470ac0cda1287f2243de529
TLSH
T175F0C0EAA810417DEB17E4F4C4C124A8F36120E4D550DFEDC033760C81B555A5203C34
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 280f28fb66c108e0f5381cb02628d4e6602885d006f906ca50d7f62001621f3b
MD5 deaa9d34a9b1e313dd916159faab7ac1
SHA1 aad424d00f161156f9ff1c33e5aee6b2ce46c8c6
SHA512 359020f7baa1b1809338e530bee1bcd25ebb24977ee595e0b04e0184f8b483de88c8fa6ff7f1c8bc8854f5557f1b502b06ab5bc6bc0ffc315f8cf5646f809170
TLSH
T145E0D8A198DED22F93D430474229774CC7A0344ED68A6F0A5B05D949B14A604A3D61C2
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 c32908008c51f58beb840774464a661f14a08fbc37c9e27cd01a6adcaaf0dcfa
MD5 04a7369977eea2d6b92a709c7523d6d6
SHA1 e8a9c728ee42272b4e7dced0a83942f5421cbbf9
SHA512 9de60950a8eb691073afc244ba0a00464b14c4302b313a7b00b9809af782f7d9a36379e922091dfd5fdc3476385122d95a0ab9d222b6e1390a9fb1a475856b8d
SSDEEP 48:TWt/LopFMaty423w/a9NUuTn6sAwMRHNrttveN9fcocwDOzLgj/jA3:6DeMatha9jAhttGiEDjA3
TLSH
T14AB2450D2F347611C0E54B33DCE489A63E3C111D97376A59AA14B0B7CDB35AFB61606A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 a6e956a162e0224081d648771b800cd254f476e157ddaca7494f9c965a514a5d
MD5 9b8b3c4ee4c43da94a555b32c448de85
SHA1 2a613397243658b5a38a0431e3242bae7103d089
SHA512 e4bc755ee1559a85ea8a3d3d79e53721c2f70b23674f64118de8d344f0b8c42eaba38dd2ea8a222f0c624550dd2ef23479a868922961246e33193e5ea8a4a23d
TLSH
T134719BF787E5856DDA0255F0BA18AE1BCE2C0514832C386A85E0AE5BE3E3871E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 2a9947d64b261242b9dcb488872dfd0a2bbd86b591f1e1657bcb8a5e10520adc
MD5 de275c2de421b40d0a4cbd2eb2c720ba
SHA1 4c131129f0b1982e87a9af8729d7faedfbf7dd73
SHA512 2fc3af9e0668423bb07bd2dcf293b810df12aae8d2943c51978882ab5f15234331006c1f613a4bda7ac82d1850678e33cb30a223b95f8656937f122f5ceab85d
TLSH
T15E719BF787E5856DDA0255F0BB18AE1BCE2C0514832C386A85E0AE5BE3E3871E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 aa2fd1608a7f3185e6b5dd75f20e2e899803b7c8d2fa04a0f2c95b7948dfd16f
MD5 afed1f7b7432844f1a7416ebe0960f8b
SHA1 6b01688a59f11c34f00672624c8c21256b2adeeb
SHA512 43118fc99f0d0705f8dbe1006b8bf6a9e5caa62c1be7f3b1cbfa2e29819afc8fec79d064556a4964bf10a7c175109395091a1f93255c35c440bde1a381a00671
TLSH
T1F3319DF3C3E8467D890155F87B242E1BCE2D0854832C3D5AC5D49F5F93E1871D28089E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 4e6132be4a639ba4451793492a3de178ab943dd3ddd33c65a8e3760bd28a4135
MD5 3729b77a0b70458f1cbb7188284d17f0
SHA1 2831bcb226a31b465c96772525913d1461d3d6e6
SHA512 cd583106a3d4e88f22c0d70610dc016c30426ecf087491339f84abb4dd35e18f7342a05d5152a6657f1539a28ff08a0f04ea4d8929dbcdd7a72b2dabcff9e43f
TLSH
T1D4619CF787E4856DDA0155F0BB18AE1BCE2C0514832C3C6AC9E4AE5BE3E3871E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 cccacc988c92de7faf549d91df4bb4e0f1209a8d149dc64516665f05ae051e79
MD5 920a2702d062b3db31499dec7beea9c8
SHA1 aae6e39b09373839f4cb06e823416c2a04b781bf
SHA512 2f3b98b3b42f572ece71364fa05df091a5b158b869a63071f7496a755421cd1e357c21e138340b56d18b769b9967d2fb1cdd71d5299a5f7212604743e8ee8fa0
TLSH
T1FD214C978D7EB41B1078497F1D44B8056EBADC31021264F9DB92D27CB1864F75B1903D
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 94afd89f90196824eb4c1e2428194d49923526f64a5f75a82dddca6190666663
MD5 fa44788273b6b2e377a628813ab544bc
SHA1 0499c33db323f01c9bf64a83e6906fa92fd65819
SHA512 0fa1adc81dfa414ef511db9fac169f9cca6e40e823219f6cef59ae7c01c829f11d5b636f57d0ca41a42889133758636042cff9df49fdd5619bfa4c8987a108ca
SSDEEP 192:sxRNvRkPyM/jK1Ml8wFN/fDslmTbcGqg4zoA8py1i/g6+WNSVi/YYM8YuqJGRIgn:sxRNvarbN/fDslmTbfHBH/5h/7qqn
TLSH
T1FD62EA16AA24597BDCCBD21DFA55BB53D6F81433A6905E44AAFC8B0C00E7BDD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 04c76e01a21c9125dae79835e8f22fba94fffa17a5ceddba69506c6f9560e3e8
MD5 bd0d3c05f90947ac82a786bd929f1f1f
SHA1 bcee82751b97f555df0770f454fc605b02ee231e
SHA512 2aac81359e39fd4a1ff6f6135077e64277a7ebd1e6d246adf72caab6a0f14c1a7a15419cc1b8110ced493479632a97d8414c5eaa47dea7b80295d93d829c1270
SSDEEP 192:sxRNvRkPyM/jK1Ml84oN/fDseWpVhmTOcGqg1zoA8pw1i/g6+WNrb07ZYwMmYuqh:sxRNvarQN/fDseWvhmTOfHYZ/50ZDqfp
TLSH
T12272FA16A634597BDCCBD20DFA55BF53D6F81033A6905E44AAFC8A0C01E7BED220381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 fbe27080ffe9d5cfbbc6edbf8d925bde9a52694569d5e5d5c4270c4bb6eed942
MD5 d9bf97539f5726825a68882ad5f71b74
SHA1 d2ef6995b195183ed94b84dcf269f95b77924f84
SHA512 3811fecca3bac4e01de618a4b1c6880e37b94c804e700c761416e806348e3350f5057a7955ba4d2c11be77059162978c26f3e9ace32a27ce6b3ff81dc3cfeacf
SSDEEP 192:sxRNcRkPyM/jK1Ml8wFN/fDsMmTbcGqg4zoA8py1i/g6+WNSVi/YYM8YuqJGRIgg:sxRNcarbN/fDsMmTbfHBH/5h/7qqg
TLSH
T1F362EA166A24597BCCCBD21DFA55BB53D6F81433A6905E44AAFC8A0C00E7BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 9bcfc71829b9124805149adfaafd661cf6c27e4ec9c279b6e6ba19e77cba63e9
MD5 933f14a828d8b3975c844547a2560792
SHA1 afd474e65d15c3fc169a49fbabbca9b3841a00f4
SHA512 56dd69a369fbe60e7b94da83c0e646413a9b6caa22e7df07dcf36249700cd0050c1ebcae2c392c14ecea1bd9bba8db5120335c9829aba84d72f0537e3e3c2956
SSDEEP 192:sxRNvRkPyM/jK1Ml8woN/fDslmTOcGqg4zoA8pw1i/g6+WNSImXYYMqYuqJGRIgp:sxRNvarON/fDslmTOfHBZ/5oXjqqp
TLSH
T1A462D856AA24597BDCCBD20DFA55BB53D6F81433A6905E44AAFC8B0C01E7BDD220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a59d5888b963406d0157fb1f5a28c2b1d3defc4ef2978690eeac382b4421cb69
MD5 e79ea1784ed83ac669cc5256110e0153
SHA1 8503bf489b3a23fc12455f61b1df8a55f6c450b1
SHA512 6bf72aef84cf69f72daebe1bf38170bc4ab864b1eb6fb079a5321bfb9d5d607de953e0ccc52e9990ad2988d1d9b847a5e2dfeb76d0a82e6d926534cebc1fba0d
SSDEEP 768:j+8uI7WgNVfq38F1+UoAYDCx9Tuqh0VfUC9xbog/OVbBJ6WrolNsG:j+8uI7WgNVfq3u1jaaH6tlNsG
TLSH
T15DC2FB2B640CC77E4F844E9DEC25BED66DD801CB9B988D5447EE890C03CA7EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 670e4bfa7a231ff50eee31e61a49fd6b042e7950c4373e2c2045000f8e908663
MD5 5cb9fb7b3f5992b6f4ccdb30ae00e88a
SHA1 3f7a3b4443c3e4a0fd95d10f04207a448271cb3f
SHA512 c14ccfbdaf701e8d7fb0f6fe7c19b83ff4105642a12dac2cde1d2244cc88419ee382a309118d54c47b40d96e43ff2897abe5f750b172350ec66a39921c17711e
TLSH
T12FE026947DCBF27EA25A2083027AF34983E5B54FD3C83E0A6F05CC486243A04B792180
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 a7f9dcc6c67b89f65d4130fd30c992f76178a6b0885518e0d76a96a5521881d0
MD5 e2a9442b5c574987624b4ee65fda47cd
SHA1 1f4648957cef92bd0af455a912d445b798d2e160
SHA512 c6910608126a054a193e746e9da08ab2ee8d1c7161420d0c3a8721cb827e864b14bf7dab401eb388349888f4baa2add20fb79dd6a0e74cb377dcc2b5aca9ab32
TLSH
T115B012403B105277D8C6163116848F809F0AE403D56459074D4ACF294F45A942F40E94
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 43dd5d849de192903900b8f3dbdc0489f246f48fb1804e11c708d293acdf5769
MD5 51a79745409ec81926e9ac375b26c718
SHA1 fe757abcf74b792aa61ace6550f40aa339aca33c
SHA512 d0b577d95c4dee1a2a612e35b481d1fee54e93437b35e06ec191657dfd8cb507062838a5d17e54dd7d6d55b98899350951974db1591e520ba82be1cce2eadbfc
TLSH
T121E0D86066CAD32B628570875269F74CCAE3B44BD6C9AE196F09D4C863072447383145
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 e75c79f52c1c355f785ac6b47b14d369dc96531c5a9a88403549122ab7821caa
MD5 3a71418b88e4c1184c4bcbde32291339
SHA1 3d9e7cbe5a807753be5f6a26abaf136dd1add2a6
SHA512 1c2dae41f45ac34877b389aad20009ccfce3b031a5bdd9ddb66473efca117fb21596c076340896b50f2374cf1278cb46b8834d138abdabf2f73beae1616b26a3
TLSH
T14FE080F096C5D33A5145A0875279F78DC6F1B8CE97C57F4D9B08848C6242244F365585
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7d7026fde3ced3d153ba5ad344b144f13ea1a64a848c423a7c3f395578124060
MD5 7d485cac0d029f294efc1eef6cf32228
SHA1 66c5eb68d7016116e4974bc07ed305aebfe3d41e
SHA512 4ec326fd595b5aba3eeeb7128d9eba59f7ffe93d7ea774347b2f79feb68885f74defe9b0f142a0055c3dd1a405d2b157eda616ebedee90bfce2f056ce09a159f
SSDEEP 48:KUKIfKHKAbyZ2IXKPagfyI/KDSsQyTjKfDhpp+z:KUKUKHKWa2UKPaoyIKDSZ+jKfDhpp+z
TLSH
T136917705327623403CBE39098199A66F564231BB3266A87F7BE854E21F27F442FFD5C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 18fad504852fb71195dfb6d73018ecaadd32ba12736a23edad50a959217ef0f9
MD5 92c47dd222d2687ff9f3ab4e0210fb25
SHA1 a372a4c48678437c805ce3ab4e31fbf5733a6cfd
SHA512 076a75e2fce1b4795f66a9ab8d0eb42d48b0d9a4c6a58c31d8216871a75579888abb187e65f4ec89832100a51c8d2ff3d6fb92c1154f1fc4644ad5bda033d1e0
SSDEEP 384:DNrRZyCSDnxTICJcMEhIKyll7svbFKfk7:xFZJSDniGyI1l7svbF9
TLSH
T1CA44840A7B747001EDE6D9725CB080771E3CB16D8F22A2916DA254698DB3853A63D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 17KB
SHA256 2a9677f7595e8fb65e59451096c5e40aebd660d4ef7d2cb1c53a8324affbb16d
MD5 c15f8fbde700d2d9d831e18cda8cba79
SHA1 d3d58162d04439031f103f8a2894ee119a25cae3
SHA512 4895dce112ce63ae2aa8e30427d7440f9bba44e149ff831b24dcf407be6780bea35d6bd6f03815e594276255736af3c966410cbc7aef14cba131f90303416d0e
SSDEEP 384:+QoIII/b/MIMuB0LBs6KsEC4daUpMPTMPPvUvfEyNH9NHSNlX:+Q+K6T43mcU0i/Sr
TLSH
T19E82A99B271207B7C9AF2E7902B6828455E6DC420D62169D7062384E4CF36AFC7E57F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 1928f6af8b4b86a74848c3be92a6a815473ef6b18a63869e343bec946911b318
MD5 2fefc29b715bdea9d6b27ccda2bb3259
SHA1 d176e9dac34708273d2be1e5a230bba9eb225557
SHA512 441b19f022e97d4f23884cbd2595b7ddfef892fd2a9bcbfe25584e481c523171828f49102912f68b9ee98cb2469c9d4ef04e629115f10238ff2e1af22aebf48c
TLSH
T107E02050F7C5D2DE716920C7111B77C89298348FFA942E0D1F03C44C6102240F355241
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 863d4b4c6ab1f4955d72beaacb1154b04e4ed776469fd8bdb251820af2b416ed
MD5 cc90e89ea938598a668780c3d97fa4ed
SHA1 d0e1005e9bf87ef6d05def155341f734f024b729
SHA512 571c079a519d84b127b4ab0af3d9d6e01828cc12caa9852d2dd293d76f926e0b8568103decc8ee10edfac7b0514d02d50d82f3419b7e3044b7e849a5fe20391f
TLSH
T11B21D695F330C109E15DC67AA47E9B391738D8428FBCDC0F55792434AEB1B040D4B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 0503668b81003c34abed162f785e8452da11d2a5612e07e561e8c1856b205356
MD5 f7b928b864155aed13edc53d80371b35
SHA1 dcc8ab674524b9da574e6c55effa7cf7b616be54
SHA512 f73e0d0772dc246ffeb5d8ec25145e4dbc1c3340ebe16d3eb9e6ac2404ced7cadee28857ed1f89bbe92e2cf72b6a78f671aca690558dc5b42d44ec38dcaaa5c4
TLSH
T1C1E02051F6CDD2DF61A620C70169B78C92A138CFEE842F0F2F03CD4C5202281F356141
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59d6fd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59d6fd.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 5de33522aac49a68cb0a9efc5a33784d1cabdef933ef8619dc4ed7df6d795d93
MD5 86bbfde0735a09bee9214a873fc9cdca
SHA1 7b895665a5ae84c2b2ef67bd0f4340e9fd3518dd
SHA512 d282dae4c025a6a5c4adbc9e2ff0fc9fbad36a2593a6a7033930b70b2b1f42dfa65254a7c276a9f3d76042cff45be6e00ad4f8af9297e929a112a60e8521c3dc
SSDEEP 3:MsEllllkEthXllkl2zEolqall:/M/xT02zDqul
TLSH
T15B4404177FC00507CF0054304471C3740371D5540D1157D3355135135CC5F400C40434
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 27187ee40969a7cf3156810bba557cf8545d7f1f6c5d22831f856c0541913ce5
MD5 7730eb781ad7bfb5a95eb5037ae9a635
SHA1 5f552cd87e970efd9406b74314c118624536bb98
SHA512 638f9412eccbbc0ad07f7530bf4853cfaa1e03e5ed986c2fe39927bf8ff41ee3ea8bf730c5a23007e1c91f5278daded1bc1e2ee767742fad569be9d79764ac5c
SSDEEP 768:gjaeqD4MlshiLdMmv3RSbpPgaffRflwflOpVyJ5p3EFlnNMLmOgfT3:gqcjhIdMI3+ffRfOfMpCp3EFlSCLD
TLSH
T1C203C036ACA09D674DA6D6C5761B77836EB04267D7C53A48DCC87E0E019B6DE030BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 5c7428480cf51f296fa8f866fdf4630209060f054eff21e0607fefd054dca4d7
MD5 c0a621718db756b5d14f585cd3c267fc
SHA1 635ce7a10b5d178ce18bb88f36c40ea850df8be9
SHA512 c04aec0e80a2b4c08ef677396a2958b2a3a71c333031560426a21fef9de18c50d8d6f3c5f8a5027a7396a195acb67272208e5b12e8a0ae72b99476e5b8bdb63a
SSDEEP 768:Lj+9h32SAPgaffRflwflO0VyJ5p3EFlnNMLmOgzn12bf5p:e9h38fRfOfM0Cp3EFlSCLByn
TLSH
T1ECF2BF32A8A09E635DD2D6C9760B7787BEE4466397C42A4888DC6F0E42D7BDD130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 eee4ff500671d6f183f6d6d8e9b22e9ad7763d5bd3c66b0d36adae692efc8100
MD5 00de1f910b469a3b968574c7505a878b
SHA1 cac1740341bceb5b7b61ba56e9874f8c7058780a
SHA512 06a1cea4cfb3176f93338287c43309bbfd6d8c2a8ef6d82e4391a3527fe30f6e2095bda7c681d20ede5cd8b664ea31e45adb9e30375602f20d551a5dea6bd743
SSDEEP 768:aF1j+9037wgiSTPgaffRflwflO3ByJ5p3EFlnNMLmOgzn12bf5p:/9035fRfOfM3Gp3EFlSCLByn
TLSH
T1C5136BF288D38976D99D8787773E2E46ADBCC163B6802544B7C85A0DCD972BFC30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 4b45e648fa1e54d2da0b12ccc1e9227b51c3ee52f2d030a39c7f50c47ea8eedb
MD5 51b6a1f1d1c91aa49dc2c392f10133f7
SHA1 9c42533c9a5d690d063ee45ebb50d211a498bdd1
SHA512 4a24fa24fd23b5aee37455a7363930d9db23c1e3505df169ff89bc83289c3093e319d0850a206c2577b307928e1fa88aae1ed03360bebdaef84829e41431be39
SSDEEP 768:mFowj+9t3swgySt9PgaffRflwflO5fyJ5p3EFlnNMLmtezn12bf5T:HP9t3aLfRfOfM54p3EFlSCEByF
TLSH
T168136CF258D38976D99E8787773E2E46ADBCC163B5801944B7C8590DCD832BFD30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3c879c7f620411b5e8633f0e2b3d6115659aa3c2d149cebeaaf1f371e46e612f
MD5 f9b4b245188a0b3ab55c57a49979312e
SHA1 a6f3937f0e2766bcc3c21c78fac6f560ab86b1bc
SHA512 c1c64061fc17e0b6dcecc101cb0ada288823a4608180c575a58c586c2c481e93cb9aa85633860a943726a0d9e3e9f3f6a45745bb5af53d57855fe3137b48d118
SSDEEP 768:Hj+9h3RSAPgaffRflwflO0VyJ5p3EFlnNMLmOgzn12bf5p:q9h3zfRfOfM0Cp3EFlSCLByn
TLSH
T100F2BF32A8A09D635DD2D6C9750B7787BEE4467397C42A4888CC6F0E42DBBDD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 49KB
SHA256 74b5871a7c19c030a76b7fce3aafc3b0d14272db2fcb95e13ac625961331618f
MD5 60f47ad6e0d1250d1ab4580ce1546723
SHA1 5776e37a0b29a80fbc35abc0c1546e42e8e41907
SHA512 298be2192f55ec8170d267b955c707dfc9c51ceb4369ba4c81ae1eae42915f482930eaf81ea896d741c6f64ab6d7564865712a81fe5132490ad26ff7ff544800
SSDEEP 768:aFowj+9t3QwgyStePgaffRflwflO5PyJ5p3EFlnNMLmOhfKo64hSzzn12bf5p:rP9t3WEfRfOfM5op3EFlSCgfKoT0zByn
TLSH
T19A33F4F988D3893AC89DA74B673E2E6558BCC173F5A05508F7844B0DCD626BFE34A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e0fad029003f9e87340f459d5802b2e2df56e327b05f5eac068c81bb4878ba5b
MD5 1bf7d9417a11761e532da4c6b997a15f
SHA1 6ce2d353548b4603c032a3eeb5972b5d256ba74f
SHA512 ca0475b9ed6bfcc45a1d9fd4254886d72363ba7ba730a984d4d7b09ed53b5ead0df78bbc315007e3ceb7310544878bd860d50cb5e2ed2ba06974d72ccd0ad0d3
SSDEEP 768:UjaeqD4MlshiLdMmQ3ZegaffRfl/yJ5p3EFlnNMLmKYyjWtTzTb:UqcjhIdMH3efRfep3EFlSC7yj2v
TLSH
T1F703C03A98A09C678CB696C5760B77976DB042A3CB913B49DCCC7A0E01977DE130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 629df3bac9e7d4a934b255422857136febcabf4b0828681cd2d33f091ce85675
MD5 cb0818f9b6af038d0acb759be06bd239
SHA1 5eac7cb6d3da06677e9a67c54f91454f25358ae4
SHA512 a3f7613d36db417fea69ee186123d255af09150770dee59cd1c54b4c0094b25d1d92e58d8a511d9b28c6664bef75d6f070c4c5f0abe3d71ec9e8329a78cefeb9
SSDEEP 3:MsEllllkEthXllkl2zEolnY3/l:/M/xT02zDK/l
TLSH
T1414404057FC01407CD0010304C75C3704370D57C0D1157CF3C7114135CC55400C10404
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

d3080854-e8cd-403f-989b-8eeab20cbefd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d3080854-e8cd-403f-989b-8eeab20cbefd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

c6cea00b-9b84-48e9-bb2d-69a39c2a1367.tmp

Path C:\Users\Admin\AppData\Local\Temp\c6cea00b-9b84-48e9-bb2d-69a39c2a1367.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3408_1706318005\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Monoxidex64.exe

Path C:\Users\Admin\Downloads\Monoxidex64.exe
Size 319KB
SHA256 ae7eec2e74f69d60d3050a0cdd72efed35c9bc1c265b5eaa464570a7381c079f
MD5 a9de199222967be3357a39e0dd871848
SHA1 2ac0037b8d9849de1404e220dcc7521bc0f48fc3
SHA512 b0ae1fe5a0f9dfed61466c1eb4df17021d4f52c3f6ace4891d64251f945772d2d66b91681d5c6a90afd9a17f616f3897fd631624507e8a888abce8c5b1789979
SSDEEP 6144:yuoaNIzVwGoV1xOcxE0MPlOi9E3AAqgm:yurNIz3s0pPlOi9E3AAqz
TLSH
T1B764B3067151DA99D8214130CC2FDAF57B227CE4C6A149E73AF27F7F3D752426CAAA20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads