8cdd08a4910b8fdef04f6157715ce4137f38c50c7e7e02d4db57f0f801f68d44

Analysis

user interaction
yes
max time kernel
150s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/10/2026, 18:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Moon-Launcher-Setup-v0.1.0.exe
Size 23.3MB
Sample261003-xmvs3swt6j
SHA256 8cdd08a4910b8fdef04f6157715ce4137f38c50c7e7e02d4db57f0f801f68d44
MD5 27fe9a2d1b703344148e204299b23637
SHA1 a0c3d763d9e7af4573c746f39d1d033a13a101dc
SHA512 3ba973c909f4224f695236d798ee250e78d807d0476a117cdc0068d7ba64a3da1997987cdd4eaaf6cab2f1346695ad81c2ab4a15b7cfd5a5436cb3fec2974dad
SSDEEP 393216:IVeMHBVb103BRaOSaGdKZ9vRn9f5NncwLIMhhqXQJQvElN150x0yFeSEoMy8OyG:IBVZ03X9v5n9XcwkqqXxElN150xdFvwu
TLSH
T1ED37333FE197543AD47A47FD39B2F160173AAE2155324D168AE0B86DDB353B00E3E682
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution installer

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
2892	Moon-Launcher-Setup-v0.1.0.tmp
3196	Moon Launcher.exe

Loads dropped DLL 38 IoCs

pid	Process
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe
3196	Moon Launcher.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Contacts third-party web service commonly abused for C2 1 TTPs 7 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
56	discord.com
57	discord.com
15	discord.com
16	discord.com
26	discord.com
32	discord.com
44	discord.com

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4828_133350711\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3180	cmd.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Moon Launcher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Moon Launcher.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Moon-Launcher-Setup-v0.1.0.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Moon-Launcher-Setup-v0.1.0.tmp

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3792	msedge.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral2/memory/4284-1-0x0000000000A20000-0x0000000000B55000-memory.dmp	innosetup
behavioral2/memory/4284-12-0x0000000000A20000-0x0000000000B55000-memory.dmp	innosetup
behavioral2/memory/4284-505-0x0000000000A20000-0x0000000000B55000-memory.dmp	innosetup

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{C6942904-D8C0-4043-8494-380128F6A34B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2892	Moon-Launcher-Setup-v0.1.0.tmp
2892	Moon-Launcher-Setup-v0.1.0.tmp

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2892	Moon-Launcher-Setup-v0.1.0.tmp
4828	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3196	Moon Launcher.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 4284 wrote to memory of 2892	4284	Moon-Launcher-Setup-v0.1.0.exe	88
PID 2892 wrote to memory of 3196	2892	Moon-Launcher-Setup-v0.1.0.tmp	91
PID 3196 wrote to memory of 3180	3196	Moon Launcher.exe	92
PID 3180 wrote to memory of 3652	3180	cmd.exe	94
PID 3652 wrote to memory of 4828	3652	msedge.exe	95
PID 4828 wrote to memory of 2564	4828	msedge.exe	96
PID 4828 wrote to memory of 4564	4828	msedge.exe	97
PID 4828 wrote to memory of 3792	4828	msedge.exe	98
PID 4828 wrote to memory of 4564	4828	msedge.exe	97
PID 4828 wrote to memory of 4564	4828	msedge.exe	97
PID 4828 wrote to memory of 5508	4828	msedge.exe	99
PID 4828 wrote to memory of 5508	4828	msedge.exe	99
PID 4828 wrote to memory of 1392	4828	msedge.exe	101
PID 4828 wrote to memory of 1392	4828	msedge.exe	101
PID 4828 wrote to memory of 1392	4828	msedge.exe	101
PID 4828 wrote to memory of 4392	4828	msedge.exe	102
PID 4828 wrote to memory of 4392	4828	msedge.exe	102
PID 4828 wrote to memory of 4392	4828	msedge.exe	102
PID 4828 wrote to memory of 5728	4828	msedge.exe	103
PID 4828 wrote to memory of 4644	4828	msedge.exe	104
PID 4828 wrote to memory of 5728	4828	msedge.exe	103
PID 4828 wrote to memory of 5728	4828	msedge.exe	103
PID 4828 wrote to memory of 4644	4828	msedge.exe	104
PID 4828 wrote to memory of 4644	4828	msedge.exe	104
PID 4828 wrote to memory of 2160	4828	msedge.exe	105
PID 4828 wrote to memory of 2160	4828	msedge.exe	105
PID 4828 wrote to memory of 3404	4828	msedge.exe	107
PID 4828 wrote to memory of 3752	4828	msedge.exe	108
PID 4828 wrote to memory of 3404	4828	msedge.exe	107
PID 4828 wrote to memory of 3752	4828	msedge.exe	108
PID 4828 wrote to memory of 2176	4828	msedge.exe	110
PID 4828 wrote to memory of 5932	4828	msedge.exe	111
PID 4828 wrote to memory of 5932	4828	msedge.exe	111
PID 4828 wrote to memory of 2320	4828	msedge.exe	114
PID 4828 wrote to memory of 2320	4828	msedge.exe	114
PID 4828 wrote to memory of 4356	4828	msedge.exe	116
PID 4828 wrote to memory of 3080	4828	msedge.exe	117
PID 4828 wrote to memory of 696	4828	msedge.exe	118
PID 4828 wrote to memory of 4632	4828	msedge.exe	119
PID 4828 wrote to memory of 4632	4828	msedge.exe	119
PID 4828 wrote to memory of 1328	4828	msedge.exe	123
PID 4828 wrote to memory of 1328	4828	msedge.exe	123

C:\Users\Admin\AppData\Local\Temp\Moon-Launcher-Setup-v0.1.0.exe
"C:\Users\Admin\AppData\Local\Temp\Moon-Launcher-Setup-v0.1.0.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4284
- C:\Users\Admin\AppData\Local\Temp\is-7BVC32XFZT.tmp\Moon-Launcher-Setup-v0.1.0.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-7BVC32XFZT.tmp\Moon-Launcher-Setup-v0.1.0.tmp" /SL5="$400A8,23248918,1208320,C:\Users\Admin\AppData\Local\Temp\Moon-Launcher-Setup-v0.1.0.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2892
- - C:\Users\Admin\AppData\Local\Programs\Moon Launcher\Moon Launcher.exe
    "C:\Users\Admin\AppData\Local\Programs\Moon Launcher\Moon Launcher.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Reads the TCP/IP host and domain name from the registry
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:3196
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c start "" "https://discord.com/oauth2/authorize?client_id=1555084590434230334&response_type=code&redirect_uri=http%3A%2F%2F127.0.0.1%3A38741%2Fcallback&scope=identify&state=hreZTqbdGplktG3q_kj64F1xVXVrqAdp5-LDHznEeJY&code_challenge=D2yeXyYdxnkA-dIPraW3Hsj20Q5FmolIeJeIRv7ZG1I&code_challenge_method=S256"
      4⤵
      Executes a command shell one-liner
      Suspicious use of WriteProcessMemory
      PID:3180
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.com/oauth2/authorize?client_id=1555084590434230334&response_type=code&redirect_uri=http%3A%2F%2F127.0.0.1%3A38741%2Fcallback&scope=identify&state=hreZTqbdGplktG3q_kj64F1xVXVrqAdp5-LDHznEeJY&code_challenge=D2yeXyYdxnkA-dIPraW3Hsj20Q5FmolIeJeIRv7ZG1I&code_challenge_method=S256
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:3652
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://discord.com/oauth2/authorize?client_id=1555084590434230334&response_type=code&redirect_uri=http%3A%2F%2F127.0.0.1%3A38741%2Fcallback&scope=identify&state=hreZTqbdGplktG3q_kj64F1xVXVrqAdp5-LDHznEeJY&code_challenge=D2yeXyYdxnkA-dIPraW3Hsj20Q5FmolIeJeIRv7ZG1I&code_challenge_method=S256
        6⤵
        Drops file in Windows directory
        Enumerates system info in registry
        Modifies registry class
        Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        Suspicious use of FindShellTrayWindow
        Suspicious use of WriteProcessMemory
        
        PID:4828
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x25c,0x260,0x264,0x258,0x284,0x7ffc62d0c188,0x7ffc62d0c194,0x7ffc62d0c1a0
        7⤵
        
        PID:2564
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,998611277768002915,14769008626900050298,262144 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:2
        7⤵
        
        PID:4564
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,17311600034579796530,18273330524919295993,524288 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:11
        7⤵
        System Time Discovery
        
        PID:3792
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2372,i,3829311980972520264,12035042240115242476,524288 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:13
        7⤵
        
        PID:5508
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,5871638792796662775,12244629728835175426,2097152 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
        7⤵
        
        PID:1392
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3592,i,18323336504184810908,15883897430213540947,2097152 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
        7⤵
        
        PID:4392
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4324,i,6202773655052889285,5542877485581597157,2097152 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:1
        7⤵
        
        PID:5728
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,12344471141694978011,3064059470274728119,2097152 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:9
        7⤵
        
        PID:4644
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,4570978596499153687,8502148792779336730,524288 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:14
        7⤵
        
        PID:2160
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3780,i,796261109617344434,6935814857400833372,524288 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:14
        7⤵
        
        PID:3404
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,4906815039288279450,9226834820288124963,524288 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=3812 /prefetch:14
        7⤵
        
        PID:3752
        
        C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,8262811138016579488,10977799380672961477,524288 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
        7⤵
        
        PID:3992
        
        C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,8262811138016579488,10977799380672961477,524288 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
        7⤵
        
        PID:2176
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,4121059655063289340,12920851881639589344,524288 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:14
        7⤵
        
        PID:5932
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6624,i,196278947529946661,17471858499411543470,524288 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:14
        7⤵
        
        PID:2320
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4404,i,7689084630012200965,8702749313126438158,524288 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:14
        7⤵
        
        PID:4356
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,5753582438960762018,7036896738632092301,524288 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
        7⤵
        
        PID:3080
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,275819003153598260,7934337435381243204,524288 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:14
        7⤵
        
        PID:696
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,8702273347076978417,16548347796533924817,524288 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:14
        7⤵
        
        PID:4632
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,7510201640751710270,3566757959746855285,524288 --field-trial-handle=2208,i,14299846396327497587,11987566753377238029,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:14
        7⤵
        
        PID:1328

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:960

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5672

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3428

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

84f1d6d9-fe44-4c92-879d-447925cec2b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\84f1d6d9-fe44-4c92-879d-447925cec2b3.tmp
Size 43KB
SHA256 b7330bcc569534f3bed8680bd48f749a7e2d19e1a2f0c0e202ceccbbe8cb8037
MD5 119bf296d087ca3bcfb84265a8517d4b
SHA1 cbee9c404662b77e0af2d559777334213e2299ee
SHA512 fc08e452fc3f02ac0c790028962650bad7656ea514fef28d326ab07c9118999016b719210471b463f39498659c0644ca815c54826e149063a79914ecfadc542c
SSDEEP 768:XFQY3IwgM6xue1N+aDmGA5b65Q92RQMPbehYGHXJl:qY39MAF65dQZhYU5l
TLSH
T1511328F298D38AB7E8AD5783673E6E059EBDC153B1889580B7D85D0CCC861BFC306916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88b10d28-fef0-4865-9711-8660450e4431.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\88b10d28-fef0-4865-9711-8660450e4431.tmp
Size 35KB
SHA256 4faa47d58999864e004c36db1b0dd564b15cfdee4c1441f8298602d2b02c1547
MD5 5d7d347c7e1faf16c5e25a1641f2c1fa
SHA1 03d97b8d36ac0314197e29645b84f9720c1d5db0
SHA512 35b06c3e7ce7ef316c9f53e8aeea57fc0b243eaa6791eb6d7329beb3d04ec840930fa4d7d86aa65a968a0e33cda4c48e3b9cb3adfc53a105c974c90286174263
SSDEEP 768:sg33lugm1N+frDmGA5b65Q92RQMPbehYGHXJl:sg33jtAF65dQZhYU5l
TLSH
T129F2BE72ECA0DEF39CB9A1C1365376056FB98123D1CD869099EDBF0D0587A9B031792B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

913d0456-89fe-4f55-ba9f-1d73844214b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\913d0456-89fe-4f55-ba9f-1d73844214b5.tmp
Size 39KB
SHA256 1cf118282826bd06f40b65d669fcf815586802712e8a831fe6f51ea7fe093359
MD5 4ac39b668f460ab36f45e792022f6224
SHA1 e0974591cccfcc22091ae2936427a35ab70fcccc
SHA512 3e7fbef0337994c789c88ee70d997f895a83db0a14259ef5bc5c393a1c6a4d40dabc0dde2105ca3afdef027b38fb16340b475d48ff100f68e86070d45046514f
SSDEEP 768:U/UxvxjgC+B3Nnkgm1N+fFDmGA5b65Q92RQMPqeFj0O:BZj3+B3hPAF65dQuFQO
TLSH
T12903D036EC94AEB39CF59280364BB346AFB94573C1C956E049F97E0D09C769D830B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

50682b59-4b0f-4851-b202-e773175f17fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\50682b59-4b0f-4851-b202-e773175f17fc.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

640f701a-db74-4148-9722-a5cb9ea80eff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\640f701a-db74-4148-9722-a5cb9ea80eff.tmp
Size 29KB
SHA256 d8ee5795cf834e375169fb19a8ff1182b516321904487cebd97e50d108542bc8
MD5 8584b38fd27cf062c4bd2e583bc2de09
SHA1 ac2e1084c7b1193910cfd82b8ac7614014929cef
SHA512 084c308d28ab262f5eea7513f70fc725701fcbb19e1df7dd18601b250bfa847a904086132afa79718ac78c52e0cf452e7f86040839b565f6d6b6e524ef94fb8c
SSDEEP 768:L7aaMW7pLuLb6DWgptfrD8F1+UoAYDCx9Tuqh0VfUC9xbog/OV6YadNMYroHm:L7aaM2Eb6DWgptfrDu1jaNYarMjG
TLSH
T1F0D2EA7B640CCB7F4F904ADDAC197E9F6D6802CB9698CD4047FA941C02C6BEA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6de7dbe7-f2b2-46eb-bcc1-805dfc61a836.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6de7dbe7-f2b2-46eb-bcc1-805dfc61a836.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

730fbf21-af1e-4b54-8645-c079f0fbb99a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\730fbf21-af1e-4b54-8645-c079f0fbb99a.tmp
Size 11KB
SHA256 4371b873f08deec687136baa5dfb76534b36fbc552030a3d993cba55976fc92a
MD5 270c09a20823572e7c713b5b31405081
SHA1 25b1d9cfeaeb04eac853c60bccccb0bbd21b693f
SHA512 81ab24f815aa678ed8f6f31bcf050341d75c414895520834532612cc799acd05d353a8e0ac79a11e9ad923b4cfa7d3936bd23ed603830cee78d9bad5bc0a22b1
SSDEEP 192:sxRGRWCu/fs/sy6aZc7cmWzoA8pl8/g6+WNpP0/Y2rtoGOIgVgJ:sxRGju/fs/sy6M2m/5O/3i6
TLSH
T15D42B715AE28A93B4CCBD21DBB69BF53D3F95032A0941E48F6FC861C14E76DE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7df89bee-b5b0-4973-9c5f-73d885776a14.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7df89bee-b5b0-4973-9c5f-73d885776a14.tmp
Size 12KB
SHA256 4fb82fa08a4eb1f3a87cf09c964c0217a40e85ad4d7f3866ab4b6e828c67f370
MD5 f0d09ba8941ce84777dda1dc0a7cd0ab
SHA1 a4b32976a8289319057402985a0bd7c5d06c8bce
SHA512 655e00d2a77d762c7761af25c6ab8793128ff814649d69dd22cd9f73757d8b6bca562c5e61105399ea0dd9fb3bd7a1911f1cdcac5c8e88d467cb017b01dd3972
SSDEEP 192:sxRtRWCu/fs/sS5aZc7cmWzoA8pl8/g6+WNpP0/Y2rtoGOIgDUgJ:sxRtju/fs/sS5M2m/5O/jil
TLSH
T1FD42D815AE28AD7B4CCBD21DBB55BF53D3F95032A0941E48B6FC861C14E76DE220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d2e5b90-ae94-494b-b189-2af8686a0c77.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9d2e5b90-ae94-494b-b189-2af8686a0c77.tmp
Size 11KB
SHA256 750f145c3b1af84e8816a8fd2606a50f47c790602999ac5c3cbbeb053e514304
MD5 cba51cc5fe2a4aebb8dc74c38cd77a0c
SHA1 cc004539884a31e41e0e0263b4eae952d5b66b88
SHA512 7dbe90c9f5621f83f10630039d2c8f730721e746d06a4df5b64413aff53ec2b4128c380948915211b13ec5a257b276a4599f89c659d82c42094e9809826b0627
SSDEEP 192:sxRtRWCu/fs/sS6aZc7cmWzoA8pl8/g6+WNpP0/Y2rtoGOIgDugJ:sxRtju/fs/sS6M2m/5O/3if
TLSH
T12042B715AE28A97B4CCBD21DBB59BF53D3F95032A0941E48B6FC861C14E76DE120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 95721f5f0af437ddfa816acfe9acb638d9f0a84fa9556b1c540a8ed8116a2f9d
MD5 56c077a0a91734ef5fd0c17bb77792b5
SHA1 5264ddffee05642697694ecc58e90f1e19f255d8
SHA512 dcd979dc0b745e3bfb1f8c70611da46e9b22a2feeb5e49416a795fb1a103f76e88a56c71a930997cb7b4ee97572b0465c83ce9cde341c116bee2b6a368c1b654
SSDEEP 96:o+t6W++UdGI6RfqU+QN4DQ3Izz5UOQDQ8VWd8flK/K4gUaaiY4nalAXA6eZKQ9en:o+fJh+qYeOrE9qscuX
TLSH
T1AC914F5482925250FF5442750FC75A8B36F1866F92E35F7A05E8E9B4BFBA3B0430C084
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 abc0a20ff897a801b2c27e030b77bd42bb32e3f6947af5e27ad6df8518fbf3e2
MD5 692b813aec257e580ef29d88a05b44b1
SHA1 39badf19bc341785273262e830e140c26a9f9044
SHA512 ee67ac54528097822df2fe771a5d19cd804a12f600f4beed01e5dfc19202690dd872a5443bf312a024b719255787a77b6b00a3648455cfe11eaaf8774aa3d7e1
TLSH
T15641FD44C6A25655FF6902714FD06A8B7BF089B3A5E35F3E05A4ECB9AF8A3E483140C4
MD5 SHA1 SHA512 TLSH

Submit Download

910a0213-7549-4391-9af8-b9841be0c0fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\910a0213-7549-4391-9af8-b9841be0c0fb.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

03d205f6-f4a2-4818-ae6e-bb87feb21c3e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\03d205f6-f4a2-4818-ae6e-bb87feb21c3e.tmp
Size 1KB
SHA256 72f60ece03bcd2da4d8a42c3d98974e2f08f3580e67ccc33cf90d374cf847e03
MD5 84944ad61737b5a5e30318aa05a658e6
SHA1 e76d401d2151e6dcec7d422391517f18e621495b
SHA512 8457823c174c389082864c4dea85a3c483251a3147084e7ea0696c86cda49e67369b6013a8f8bcf2de8ec5e76fb0c5c5bf1179a0ec449a5ebc1265910aca6f83
TLSH
T1A821CDF7C3E8467D8A4156F877182E1BCE2D0864532C3D5AC8D49F5FA3E18B1E28095E
MD5 SHA1 SHA512 TLSH

Submit Download

725383f4-7353-418c-b2db-3e01329c9a20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\725383f4-7353-418c-b2db-3e01329c9a20.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

c5674c4d-54b4-4bc6-ad4d-ed795717146f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c5674c4d-54b4-4bc6-ad4d-ed795717146f.tmp
Size 3KB
SHA256 b0594e36b2f1feb766e4a3b336927fa86c66804b31f20b122fcee2a4631efa98
MD5 717c0359de1007371f511b2dbfbc2ccc
SHA1 c3f29065b9e20fed4af4a8bf9db026ac92786c77
SHA512 2270ed4c468ce66cd44a5d1e20fd5aaffdf1dffa6675e31a320b4e637e5d953662065e52a58330c268977569cd105e601bfbcd231dd92c750a1ba1eb6cb2a14c
TLSH
T1B871A2F3C7E8862DC91156F4AB183E1FCE1D0954432C3D6AC8D4EE5BA3E25B1E28165E
MD5 SHA1 SHA512 TLSH

Submit Download

d10a0682-73b8-481c-9eb6-48de62483d63.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d10a0682-73b8-481c-9eb6-48de62483d63.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 fdfcff228541d4d9fb6d2c83125f51fe9aee76f8dc0f0ac16916929c33c93ec5
MD5 3447f78138c66b30f26762188f647962
SHA1 afe3052c32c281cc08cb7b72b9894b3cfe5b2bb5
SHA512 6892ebdaa84a2d2a2c08696abb9db8a2fdfba2ba7f12ba88ac52d9a4c52c02cece504fd00c83abc4203a0f278cbd01d49bc69fadf584e7414e7f258c82cc12ab
SSDEEP 48:K4pIdKaAA3yp4IjKhCMlYIrKpKE/yVZIVKq4o9:K4p6KaAKq4YKhCWYQKpKOmZmKq4G
TLSH
T1C0B1DF4136BE424238BE360A80B5CB5F024136777159EB3A7F7D40568D6AE096DFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a3dce1e-294d-4f61-b27d-c6aac574fc8b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5a3dce1e-294d-4f61-b27d-c6aac574fc8b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e9dea3d-754c-4fa6-9e12-aee93ae4a340.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\3e9dea3d-754c-4fa6-9e12-aee93ae4a340.tmp
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

f64b147d-2ee8-4a4d-9953-4cac21aa8012.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f64b147d-2ee8-4a4d-9953-4cac21aa8012.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f4c08519-b42b-46de-a593-b5097b4abe2f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f4c08519-b42b-46de-a593-b5097b4abe2f.tmp
Size 35KB
SHA256 89715aab81cf3004d720889fa72ce560be5040301acc5008af19dec1c0e4a5ff
MD5 23797f2a8d1d2ce8850e54eeda860e7d
SHA1 ca833c38fd3ef9a5c71c97b45f203ecb202c5d1f
SHA512 1734da71804ae37645c4c36dac08124701f31033212863eb8fbaf064b8562bd049ce5b46c8d06ed82c03960ffca48c14c067a49c185091ddb5bd549c824c6bce
SSDEEP 768:qg3Olugm1N+frDmGA5b65Q92RQMPbehYGHXJl:qg3OjtAF65dQZhYU5l
TLSH
T15BF2BE72ECA0DEF39CB9A1C1365376056FB98123D1CD869099EDBF0D0587A9B031792B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Moon Launcher.exe

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\Moon Launcher.exe
Size 1.8MB
SHA256 11a679ca41aa1c74535d28e3d081277c627e17919e4660d3c470e93a5ca5c4c5
MD5 e272d0b7cf2ee4a787e0d9966b45afd2
SHA1 b031eebf3561a07848417d3b2435e97015f80c40
SHA512 0ebadcb65192ae139b98eeb2fdd18ecdf344d5fa95e5bc24d7d4a260d83371d2095af0793d454369f5d989ec38c079d20bef5011dfa5c5873be9e9a11105400f
SSDEEP 49152:Hw+XWGdKdudJdxdFdwfqXuHGjFEle7/L6IrbQIDmi/:5tFEle7/L1rsIT/
TLSH
T1CC95F753D1AB4CA6D8B213FCB9CBB2345738FD66CA38266B11C0F52179B37906B5A341
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-PB2W864UZ7.tmp

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\assets\ui\news\docs\is-PB2W864UZ7.tmp
Size 282KB
SHA256 5bdd8bd70670f6ed4ff6545bbada61dfc6a87c3ea3544a74a46a79ea6a7f12eb
MD5 f03d376f129b3b198702762c41029a68
SHA1 a1bfacb8dcc676b1397f41267c7471c41593eaf1
SHA512 455aafcac41f389b08e4c45c5362e9d28cbd7fd9e771efbd9bc3da34f23e95fcc9f4cbb5b67f6c141ca3b2e10a99f790eedf644ae341a69ba145106bb9bb94fd
SSDEEP 6144:+mlpK15Rt1Qn2p/iaPvFqjFpqLXS9mhUGPX5L283M1nmmKHwyjy1qjY:+OpK1LtI2p/ia0jSzhTr3MY/jcB
TLSH
T1D85401534358C0F3CA2AEA3D9E835EC475DE62E4ACEA5A24D73428FF345B9E1552324C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-RQT06Y976V.tmp

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\is-RQT06Y976V.tmp
Size 52KB
SHA256 901437548ad4fc7f62bc0401ac57ce04d04bf5eee309d06ac2545cdcc524fd72
MD5 de874d81e0d0366759a4527ef3defa61
SHA1 4d111db49041896157bf26c892b7bd43dcc101ba
SHA512 44bb363a3bfd9959a14e6f3c372bb93ad89ac47dd96fbb515029d72d2baf860c26333ee696e6af580a9487221c7cc21500b8a937aad8d0e804ef5ad9031df76d
SSDEEP 1536:6vuTmwKuBjPV0BN8eTOWgmF32+qbqbbRhD:6vuLx0BN8eLq0vD
TLSH
T1BC33E92BF652ECAECA77C278C2FB9332F57178052631AE1B0754CA321F61EA0572E545
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libFLAC.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libFLAC.dll
Size 456KB
SHA256 1288d518f0e84488b009a89b523d0cd83fe48916d5907576e5528eb67de89293
MD5 eae898e368ce02e44180b1fb920dabbe
SHA1 bf4da6041c1639f577cecbb8d3bc827e2f202a30
SHA512 afaf6394accd425e67bc1a1a0595ddbc300798eff19b199fa10b83135a1b0be43cd5aff35745d172e244babb07e26d49da090f3fd72fe76c4ba65506e103032a
SSDEEP 12288:sqXdxtbJ5pEo88ZQCfMj6UMVrVYqH0NXY43W0:ZxtbJQo8fsMj8YqUVY43W0
TLSH
T163A48D8EF79325ECD63BE57406A69BB3F83174195124AC7B57A1CA301E22F402B1EE74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libbrotlicommon.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libbrotlicommon.dll
Size 141KB
SHA256 c62c08223e450dfc2fff33c752cc228505ffd9d755201958ba800d5d30481a2c
MD5 b7b370c8fc1f6c2dbec0b6063f469348
SHA1 c867fb3e824f3c1acd0b0e7223f06d8cf968516d
SHA512 18a757a29f5cab79178bbfbb5fe9b93f49bb038f3d608344af4690d920ef82d7a8dbf78b71c69c675852a94509124e6431ff01bc798d9eebb4a9c185e1524c91
SSDEEP 3072:I8Hw4lzbWhNbNL8DXGvVh73pbi0tdpvGJaoZB7PxBJl:C4AhdNorGvHdbi09GJPl
TLSH
T1EDE36B61F3051737C66B627AE49A6BB8F335817493634521B4A9827D20C3CA4873F6EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libbrotlidec.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libbrotlidec.dll
Size 61KB
SHA256 e270b6e576594ee8ee6e33ccc54e34a54304616dd6225652e11e49d6f17ef896
MD5 719de82299491828886a7d2dd77e4e67
SHA1 bba8350e1f4c363c119398a9c52fd09a412d0e3a
SHA512 b694d01704a440c93a0e596a6d110d3cef1df2205df6bcdc91ff1854fa12618cb75cb9cf4ac563a9a4c248d0982b9fe76a5d1e66ad2f219e54295fc2918ffe18
SSDEEP 1536:uuWfWbMA6E3H4lawsok5LTN7o8DpvF3b6c:udfXuYlbs/LTN7oaJF3p
TLSH
T18A535B13B6A3A8ADDF9781389B97D7B3FA367C041325DB3751C4F2312E22DA09E58425
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libbz2-1.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libbz2-1.dll
Size 76KB
SHA256 669a4bf9266d5f020e843aa5fd75b93ce8ebde27014d5ac466a8b3cf39d8aba7
MD5 6b3421ee5222837efb4358f16ffefa90
SHA1 1e04b9f81109d16e875bbc26707c557bbb3abcbc
SHA512 5d27b5ea949264ab5480dca5dd11bb72a5f23cbb119984a23ee854435b0ed8d12ff4a539b3fadc1269dbe864a3379cc89ef95048df1627f825bbdca4a9148f06
SSDEEP 1536:dEhYO5rt8z1kmtrPa2xUpvo1W/ykFk618RBRcSnbqQcmXdZ:3OFGkirPXkvokKkWJRBR/t9
TLSH
T1AA734B29E1D25E8EC553823091974A2BEFB1FC2C0B1067339654E17B6EA3F614E6D70A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcrypto-3-x64.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libcrypto-3-x64.dll
Size 5.5MB
SHA256 237eeb55505d067eab5e0b886e519387b4b6a20c997084d08961e861959f313a
MD5 a5ac49940c4cf62bea46840ecd3b3847
SHA1 efbdedce7c5370fff40e42805c23f586858dcdda
SHA512 3e55bfebfaa81a61d470ef7e88fec2fd664d662f9d805db10dbe3362c73283c89f2d02586241f6c9d7ebbbd84169bada3cef706da7a500ba6fed73d059aa9002
SSDEEP 98304:K5dLyPnZiQ8NUHmF/sALZ6K+Yb4L5nwY+6DrX1CPwDvt3uFOxCPyWT+d:BHk+jL55xHX1CPwDvt3uFOxCu
TLSH
T172465A6BE07B109DCA6BD1B0C267AF73B931B81403747D7E6A14DBB01F61E5017AEA60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcurl-4.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libcurl-4.dll
Size 1.2MB
SHA256 d11d478640891c76fd1639664782bcf21e5ab9f10bb8bb35d24e7e900e3c19b2
MD5 402433a89b73dde06b50292bca0c8c05
SHA1 2006cd558d68dfb5fd3cd3dacd776d70697daf57
SHA512 4d961105ece8c85fed435bd71924a0ace4e7075c45cc42781cb4554e68335c8923578954114abc454d998cd2de318daef7eac05a87bd8443425913f04e13da93
SSDEEP 24576:dFBzaDrbEbIfSiZU/rQ/hFp+g0E459tYezRSa4bS:XxafAbIfhU/rQnp+VE4/Sa4bS
TLSH
T148453D63E1A320BCC3A7C1398267A773B535B4186134FDBF5668DA312F91E50237DAA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libfreetype-6.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libfreetype-6.dll
Size 774KB
SHA256 c3d1193a07b46107b5f74034574d767b98f0ab18423b11f44e6c1ad452a19466
MD5 e2ed7dcd0ea6c72079fd4a9a566a6c40
SHA1 70e5c8d5336f2d032ac958765a152eedf6e11273
SHA512 a31eb93a27945fce20aba413831a49c7a848f444c4fcc8f61efb27c8c8d21c525355156d643b49efaa4f481a4cfc581262671ba95c246e7b40ab93a861575e5e
SSDEEP 12288:AR65nSqUIO1bXlb5NeV0ndZa/S+MtXrSKIn6SJ+ixfEWmvdfh1V:AR65SqKxXLNeV0dao2UZvdfh1V
TLSH
T16BF45B53E2A361FDC76BC23443679772F930B4151128AEBF9190DB312E61EA0676CB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libgcc_s_seh-1.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libgcc_s_seh-1.dll
Size 147KB
SHA256 a955ab07e75e8773d20821fb94774267f2f5a8773641646c809024b2e298ef31
MD5 2d803f374205e9f88c4ac3399d900881
SHA1 ee93d63739aa70730b3b53321e90a0e2359e82b5
SHA512 6f10e4ec9588f74465d17f530dad573bc83579330ed548a9e373490f6008d467123ce7dc4f2c6521c1584b742623031411786c2b88c8b348f78a695f6c5b260d
SSDEEP 3072:YuQ7yKJ6VOA4ojx8lYTYjReZcRk6AGEf40u+LTCDeQWFA:hVOBojxWzRk6PuuzDeQWFA
TLSH
T145E32957F59364F8D516E2309A979BB5EC33BCB40330ACB31394FA382DA2F819619752
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libiconv-2.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libiconv-2.dll
Size 1.1MB
SHA256 b37d1b4acab5310c4e4f6e2a961d146454ff740d943724a68fa3cebc85deb7cd
MD5 3eeaa8b8d723b03e36c2d914c42ba68e
SHA1 cdbbd41181f4c6f44669249807f628b4182dbb90
SHA512 129a3d1d494e27dc991b02afbefa3765fe77cfd7f6e3baf28db181d34fb30a0630f631a11932561c5ced9962359256336b130a8cd22b25d828327673162e1a8b
SSDEEP 24576:iphc1BAUZLY3wPKo6VbbTOZGavkg3NyeuQ6l9fH+f/FP:Khc1BAUZLYgio6IZGaXBuQQ9e/FP
TLSH
T19C35CE51F3D3CB2BF263C6B0C9AA5B26E427EC216B0645337660B3BC5D33BA415C8566
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libidn2-0.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libidn2-0.dll
Size 240KB
SHA256 a054a6bb69aaf4666157f968740412e9697085cbc1e48a78f8dd9622169c5aaf
MD5 093c32640b34fd6407e025358e8f165d
SHA1 3d468154a934ff95f99503f81a79efcec5fef583
SHA512 d53d65b290d3f91e16566278b56c5788e78d02c378f2087f6ec553b4ae23dffc8796ca0ec93b89a63c483fd3337ddc3635e0f26f47be2756dabd4162efb8545a
SSDEEP 3072:4D1o+3OR1BljON96l5WcrKqeHdgmTdYHQQ/SBs/LLRjqS/sqAiNmQu/90PwZiPcr:i1o+0Pe4GUHQQqBsDwSs4m/uk5yBQZ
TLSH
T11A345B12EFC358BAE8BAC335A4875370A7A2BC012615DF5B5318FD387C326F54DA5219
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libintl-8.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libintl-8.dll
Size 292KB
SHA256 8eb731da34fe70fbf36239ca5292f92d5f44004ed4d9d10827421454de8c27a9
MD5 ba6f7987d1ba66ced33df37653ca1c3b
SHA1 5a5c9b66e78eb045de5c0f75017eafa9aa32f4ec
SHA512 08d0844a30d339462b7c0d43fa5e59391658ffa7d8a5549c3dd2b6c4ebfcdb0fa933988368e2f91f8f27a55c1124c07ab15ed050994b655d38783105afbaac1c
SSDEEP 6144:+HKg5kx2TM4VvApzTkxV1SrHbxFE7+dvJ5Fo:eKgwaVvApzgV1SLbv5dvJ5Fo
TLSH
T193541A07B2436599E553D430898BC7F5BE73BC624BA0AAB726A0F33C2E31C519B19717
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libnghttp2-14.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libnghttp2-14.dll
Size 207KB
SHA256 6d49ed806389b4892bcf29c6ed6e3984e06aa0d608bd5494db19d1b9c5feb2c5
MD5 8e75d4cdc02cf7a5614b0bcfa26de26f
SHA1 8c1a0036822b52d347d90784dd3b2fdf9ed9836a
SHA512 e632a218da9640c927309d7a6a91b8628b6067d21ef09ce0df77d59007405505b01917319b6ac76ec5ec5025401e485c2713d657ffea1aa782680b2c4607cb58
SSDEEP 6144:r0HPsp52kK0yzndLFiDdH5czQliKcKxiAMnWF37Q:3XK0yz50xliKcKxiAMnWF37Q
TLSH
T151242947B6A75EBCCA63D234D2678372F030FC115511ADBB2290EB78DE71D90AB1C668
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libnghttp3-9.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libnghttp3-9.dll
Size 189KB
SHA256 f9560d4dbdf305dc375d6466bd71fb1960143e96d2fd0da719271dbb1959cabf
MD5 f43dfee00ee6e04bffe56da2603a26cd
SHA1 1ac319305d5256d491c0d983a9b57d95b6962a4c
SHA512 f638f023897f3bbb00df1909bfa3f50eef384a718674c6ab8e1663cde2779ecb0bfbaee0e98b6a3d78f48bfa05c33de57c0e91a5eaa58550023947657359b161
SSDEEP 3072:/iMHxYB6q+1lAqKFgLI8wfPo+ZPq8CPfq3iiLVlOIZLa1Ozkwxi6AeRmOtTvIsCm:Kkiw1HAqKOE8CA+5CPyTZgJC3JCWo3vQ
TLSH
T134144A5BB183A8BCCA57C1309A52DB75F471BC6067279D3B36C0E739AD31DD0A30962A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libngtcp2-16.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libngtcp2-16.dll
Size 342KB
SHA256 910c7277ae767700ff0bff1ab1be92602eeff2dafaee4f5694a1551ea43f68bf
MD5 19845aafed7bd14b575b891b299b2363
SHA1 fa5fdba210c07404f4073bdfc11bcf4e73497227
SHA512 37e0619b7c49ee940b574decb6bd1adb76dc88792f6600c66756abd83a1a59c12ab48ec1ced4130ba8d63c3bc51da0f67b30de2af437041dd5509927ae79b3d2
SSDEEP 6144:w++Z7H/FAJcVwaYYW/ff1BJqTC8Q1MxpZ4do3vQ:w39Ht4AAXLeCtkIdo3vQ
TLSH
T15C74276BE2A314F8C6A7D134D757A773B832B82451346E7E1750DA312F30E60E729B68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libogg-0.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libogg-0.dll
Size 40KB
SHA256 2f102fba6f2a49516be85cb2643f6a9ba394dc5657aedb3ea235b6603c12d3d2
MD5 31c2afebed8cc8b7db533f2af126de4e
SHA1 08ca0ca773d629d9af17669be6ce237ac0279224
SHA512 611a7c1115357a6bff46d86bb8b0dbeeb7387da8302c89d48210d21dc5b244b038d829e81e893b00daebd2560111d34da76fd021d31f8551de8c6faec92c55d9
SSDEEP 768:Q6LtmEslo15cwI0cu3+35i7Qi+GtUplY5atL3G3QVM:VJmEsOGwIPQ+3KH3w3G3QVM
TLSH
T1DF135B4BBB93A89DE42AE1B585FEF7B1F4BA781D9601A9334380D3350D76C505E38C98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libpsl-5.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libpsl-5.dll
Size 103KB
SHA256 a531e72de3c64d43fb83cbfb6fa63e5ee982a970292ec51314e29d0acabf1dd5
MD5 e05dd5684b8f73f52a7bbac0537e7694
SHA1 7e3fc77faab8d86d9f4070865f969d4d324ca273
SHA512 778ffce073adb8814ec8fd4ae343e0d9ba0f9caaf67a2196169bc360153aeb27c4bf08005448f39ac885321c3b70a409250ea5bdaa4eaf50596d18d47fc39918
SSDEEP 3072:7PH7tELKlcQqr8oaKJ9QLA/W5wn1rhuCAPLZotVH36FYR:7+LKjAjFW5wn1tcLZ8VX6FYR
TLSH
T12FA3BE16F28375FDE757D23494C36B71F632F8106222AE3BA744DA389D30E909E2D625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libsfml-audio-3.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libsfml-audio-3.dll
Size 756KB
SHA256 5213b2253638c5fc77ef50be833e9fa09c895b0f927730e1bf980645daace847
MD5 ba8b3115519955d01e421fbd5ba45428
SHA1 d6276b7afe60d2256402d30828a174301c278c89
SHA512 1bba3c4173afad960415a628ae64c8a300a6f73b173a20b50b08c5476ea26e03a32e32cb684e0168158aba523ed4aec81bc186062dbb2eabc7613179c7152e5c
SSDEEP 12288:WjoMz37H4W7PT8NsIZW3sV8SKyRSbRdRXt5ek+mcK1ppY7OqSJWtC9iub+:Wj9ftPT8NJW8VPKmSbnVVDcK1pp454iT
TLSH
T1C4F45A57F2E760FCC277D0349267BB33F932781915206EBB9290CA341FA2D60266DB65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libsfml-graphics-3.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libsfml-graphics-3.dll
Size 595KB
SHA256 4fc9251571486d0f7d8da9a4171ffbf77db8f491127b8c7e89dbe8a286052386
MD5 0874480aafe4c0aec5ec360618946e78
SHA1 d93486c32cebff4b4e80cf8cf75de5647ca41838
SHA512 0a5a65dee75a123d45cc969f6266f39cd89f89f1fc74a653488bab788543d51943385572a37472355f143cffa7262b998ce8a5e09d387b5f805c0e040335d863
SSDEEP 12288:9o3e5PoICBlvFjcQ3nDnjqU+cXdL1SvOn85Fdnf9:9ou5PoI89jcQ3DWxcXdL1Svx5Fdnf9
TLSH
T12AD45B03F16361FCC567D63642936A77FA307C2901587EEA6390CB362FB1E405B69B98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libsfml-system-3.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libsfml-system-3.dll
Size 65KB
SHA256 0fe9c2163d87447269af0536e64382b6afba5b382e69057df60d95a56d8d30c8
MD5 23a1bdd32c2185cbe21bb7939bdb9db5
SHA1 c9d818de1219e71bc1ffb352f39df47e8c8e3c8f
SHA512 c1367c60bb2fbff7c669a68d239b69d3f760aa9e64762197d547288d1112072a17dcfba0247d60fd972b7bf9be6b90e5afc3b72e67629f5a6ca995377930579a
SSDEEP 1536:5gwNH56944RMAtsBCKK0eip7Rzpz+IIap8+mi3r/jpebO+h:5hHV4fRKK0eE7RzpiIIa2ti3Xwa+h
TLSH
T12353F827B7575DBECCE6977461DB2331F631BC220A269F6A8704C2350F21A546E3A7C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libsfml-window-3.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libsfml-window-3.dll
Size 185KB
SHA256 f34390d58b6b0ee925b24580bf8f3352a317d92d82d2b89f036f49e4ced79069
MD5 1bf955ac0346c080091067bb169d4d76
SHA1 e5d625af2c60caff5b02babd9157b7f81b7c94a3
SHA512 3336d723570e38697ceb78d058daca816ebba2c1b0b61c00d8bfbb2803f9b1883fc7416d837cfd91fcba693b0f771a0a4ffcc694d3c698c28d275404026e6620
SSDEEP 3072:u4oS8wydZ5DXx2s9RQVZFkNk3eLcpqqzIcWWHI75tE1J+at1W6M9fjfyf7rfWS+g:xqwydTt2s9RQVPkNYeIqqzIl01jdMhfo
TLSH
T186042937E22324ADC967D27895976332F5327C680325FABB0354DB315F72A90BA2C785
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libssh2-1.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libssh2-1.dll
Size 301KB
SHA256 afbfe060fe810843d4e7efad3ae5cd50d2f282e4ee88105751087905aad301f2
MD5 d048c3d2f597a6d2c367d22556a98218
SHA1 3918caacabe1f1181fc0658dc0fb85ec57fe69d0
SHA512 12aff16924f22a20748c1b74d9d4eacd0c44d192486d3f21f845092f5b37b64363e6a4e5054ad56af20b6564757ad197103046743d36c235e539f52767b11a80
SSDEEP 6144:OUQmwWJ0Rhbem5M2wPdjdzyQFETFqzLk2kzExAke3UJIiEEZ56TzJOPe78:9si0R9BM2wPGQFETcnkLzEakeUuzJOPn
TLSH
T1A9641A13E29234FCD27BC13492966733F971B8195334BD6F2624DE392E21E60A72DB25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libssl-3-x64.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libssl-3-x64.dll
Size 1.0MB
SHA256 61c4a248ea35b1c26c89932697282e44a61dc45572430549e2dc08721fa79f45
MD5 c5244943face6d9df0b430d9321ceecc
SHA1 9f34ab2cf8ef83c20ab7d6840cc63d913ea21c02
SHA512 27d037bf4b526d3ab1aca9d8c6e0d9b779dd14f05223196252cdad49cf569d9accc9f7a1dd07e2001d0a552c4fc523518ccc6bec939d5c14cdfc97dfd46f23e9
SSDEEP 24576:CBJhbXd3X02743wzZTiTCRaelx/tab15QJ2lYXPNrDHGyEsqJq/m5c268GzRcO7m:CBJhbdJzZ2TCR3lCO7j6emH5esVOEATS
TLSH
T107253A67E2A724ECC5A7C134C7679372B932B8142234FDBF1A50CB312F61E60536DA69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libstdc++-6.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libstdc++-6.dll
Size 2.3MB
SHA256 81836382ea9c84175fbec2a67dcace716bf3db30706a604c7a7f55ee58cb5b4a
MD5 02a23b40de8ef62d3535363299205f64
SHA1 6f8109822c9caa07d6f2ec0e647ec8266efb8e06
SHA512 7be9982b9e2c003e381a5697d3fcbbf2c4603c80c6e15e7e6d416c6385f395ab73a84f1409a5a542fb574c55db9880c55d1141aa148fd20c6d787f4640222d05
SSDEEP 49152:GLTbQqIzCesx4aVG9oprALD3D7pSl13gjO4b0Ya0Pq9zA7:GLTsqIz6rAPTVSlZ4b0zaq9zA7
TLSH
T128B55C03E5A34C6CC9E7E7B4525B5736A620BC2985387D7F5E9CC7302B61E50A22FB60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libunistring-5.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libunistring-5.dll
Size 2.1MB
SHA256 2fd22f7d04bfa8ee8614e0f2445265df3dceb9bf32021c826a72f53ee693cf3e
MD5 0ea5313a26bc4edb16db7da6afe408b8
SHA1 9ff46f0c1fe380df14a68bece143afe271758195
SHA512 ae38b61be78501d57858fe3f746c56972b6bd31354aaff92b7174d7b3c8980700290086d74c6688cc759b56c8e815af2b3039377e0d87d4b6e8740bfd6460016
SSDEEP 49152:mSo2Tw552U/QFix+WoXHd6PFbE6QTVpJyLMF3hQ:mSVwZ/QF93l6QQMF3hQ
TLSH
T1A6A56A16B11FD3D8F5CAC4300E4EFAB295517C29ADA0A67FB650F32D1D3E8E74A09126
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libvorbis-0.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libvorbis-0.dll
Size 181KB
SHA256 43b00d5e347b6b35a3912e3179d6433b5bdae7233cc04cbe38bcc61f164cdc6f
MD5 a1caa07fdea61f3a3f8722339deab0a0
SHA1 181657fa07ae122820071f68080a920ebab9c19a
SHA512 94db6216964dabdf732c1184b4bfee5109429944888f72940e1d53d965dde41e6ebed0dea1efe8aa17e91e1667f5a90f8a8ea01e31213c60278e1e05362ccdb3
SSDEEP 3072:8chhURdYYBqAODfl2eHKAIdGA20RbQcsn3Z6NzRKI9RtW1t3u:8chh5YNkNobGJYcQRs1t3u
TLSH
T13E048D02A152A4DEC1EFC174629BFA37F832781C2324AC7717A0DBF55E65F606F4A606
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libvorbisenc-2.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libvorbisenc-2.dll
Size 569KB
SHA256 a765abbbe42de7c8bba31b41591cfe4c4307c30af67c478f372f76116f28e72e
MD5 97101502cb7e1758bff07c3970c64fae
SHA1 d327a7f58ce1702105cfe4b553657b1ed436d474
SHA512 27c56c65db3634d5ae020554299ab04c1b577d62b0749c2d8719cddafdaff8092d09f074633eedb0b3198d6376d888938f57991c99f35bb51496f39f1d182c93
SSDEEP 6144:Ln7uNruVRJ/RbM4YkuYFSlq+LxVwVh/c1eoVRc38Qr9gKutRJhuusoAu3Fskhv8e:jtz8lpLxVw7/cQwRc378FbAz/+
TLSH
T1B8C4C923FA92ADA3D7E452364593D5303631BCBCD7E312F63D84B6BD39E61045B1AA20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libvorbisfile-3.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libvorbisfile-3.dll
Size 42KB
SHA256 fdf5aa6913cdf3afd3f731c0283babb2dd15eb41840a7966cfebb9470877dd14
MD5 13dfd549703ca81881fd608e8cf9d317
SHA1 b795703a1a52a24b09004430bb1002e06b7bd481
SHA512 0b94b14e6f1f5e53e1efcdf078342b0a8d3e3ee88c160be0a2cc358f1fe916a083182fe4d86864ff90b015b51aa8902fdd74baaaddbae322cdc37981ab0020c3
SSDEEP 768:dgB6tYdIW/vYrS/1gH0ks12uWi9S/tF5OnSw+rsP2OQ7IbUX:1tIH/vYK1gH0ks1lWi9SlzOSrc2OQ7I2
TLSH
T1BB13F85BF6E2AC9EC2A7D23892DB5731FC3278026731AA371B58D2301F30E90676D555
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libwinpthread-1.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libwinpthread-1.dll
Size 62KB
SHA256 6372a2613b3ac725e24e8a08ac7b081886d53c01728e732f56cefc6551c8409f
MD5 679e0b101b204a1f71a81047e6495106
SHA1 d1bb01e521e101db34ce6567c81e3f05ec8d1d8b
SHA512 c08657bdec57ebf29470661fe2ed00b2dda8e969f815984e26f509508a2bcdcbac6d99b370905b393e40f696af891f80ea0b8dbc3d78e235aae49bc042ff3deb
SSDEEP 1536:fQjP1sw0q2jhRFVDB7jATb2bPQTUyD8w3djpu:fI9h0t/V17jAn2bPQTUyIw3G
TLSH
T1CF53295A72A614FDC657C23499FB5331B533B8201235EF2F9720D2312F78D668A2DCA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libzstd.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\libzstd.dll
Size 1.1MB
SHA256 a25427164f8775046eb8ce488d7d08842c3b33224c5817d4c0c3628b5b588129
MD5 c3810bc55116fa6793ce0f5ec6b537a4
SHA1 5e0857e5af566df804b15357e347ece6517c9c9c
SHA512 e701f751015dfc83a059dae5c3aa9827c3c28c6bd26b73ca70dfdfbaaea579467e154443b098c98149b3c514fdf5af7e3450b5165fd24d08b27c560289b82237
SSDEEP 24576:I98Nesz8YSjjsHM35m5a/0hjCgxJ7qJCRTVhs1fRkIM1nHxUR3nQ:IJvYSjjsHM35yashj7JuJCRTVhMfRkI+
TLSH
T137456D87E4D720FCD26BC0B08757A673FA35B81891207E7B9794DB312D22F90951CBA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lua54.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\lua54.dll
Size 281KB
SHA256 bffea0804b66156c39a8795429b233ce3a3d756cf500a0db529e707a35047052
MD5 bcbc74b922e0f4a22606ab09cbb1fcd3
SHA1 b1c8202db588ade9704d5741544ee7cb00cbff09
SHA512 d86f37dab5eae71999f2df0f7ea8b30eeee8f97537977204bf78c9728267b2eb3eb29ab8789b28dfcf436bd0d14960015781236516b6aa592a9428998a5e7cb0
SSDEEP 6144:4ndNWPet0rrOLalNR3jpOU/I0xZRYaSQMfNs2NKRUdB:4nrWPet0K07zphg0rRYa/IBNKRUdB
TLSH
T1ED544B57E6A321BCC26BD13583E397B1B872B8611320BDBF15D4D7312D21D60AB6AD38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zlib1.dll

Path C:\Users\Admin\AppData\Local\Programs\Moon Launcher\zlib1.dll
Size 97KB
SHA256 1dc85208162ee57fe97e892bb5160fe9588903992995f90adc3a3a358dac6fc6
MD5 ee01439a96e6c269c5d3d42c46c4516e
SHA1 bb68ca3b10f3949f093a65c7278da6319e76aa5d
SHA512 3866a452892f1d76b31f3db273161e0059c68791ba5d83c068db2264145c9f1f92578621ff2e496bdd492e5220a67de40c7724732d87a5efd7d8440c2c486b8d
SSDEEP 3072:Bjn5jCyYi8wveqVRGGtSsh2BAKrXIVfmWt3C:99CyYi8dM0wUAKrXifmWt3C
TLSH
T1AEA35B5AF9A269E9CAB38170C5D78775F630B8101A706FAB4248E3742F11F505F1C6ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1a6e5e6b-e3a5-428a-ba7c-b25939ca3ece.tmp

Path C:\Users\Admin\AppData\Local\Temp\1a6e5e6b-e3a5-428a-ba7c-b25939ca3ece.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f0ba1f5-efd4-457f-9bdd-4afc29f7c8c5.tmp

Path C:\Users\Admin\AppData\Local\Temp\3f0ba1f5-efd4-457f-9bdd-4afc29f7c8c5.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

Moon-Launcher-Setup-v0.1.0.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-7BVC32XFZT.tmp\Moon-Launcher-Setup-v0.1.0.tmp
Size 4.5MB
SHA256 fc30777333028d9ee22252d1d22398717444c0dfd34f4cbe06ec3c187b87bc57
MD5 1d547a1e0d31ae536baeeb6b105f268d
SHA1 45f9d862617f55a9d175309f63bf7d271e9fcf2f
SHA512 b667174ced9eee04a0408e62bdea0b52078ffd38a8e704fe111fffdb6c59d5f4a4f1ba7946dbdfdd52a4b58a1aef2981ee203b781cc75fd47ae71f45d18ca080
SSDEEP 98304:n9SZUvl30aj90ZFcvdQ0hdgvminQLMj+J+333c:0ItJj90Z6RgKwY
TLSH
T1C0266C03F248653AE4B71B7E883BB2505A3FBE2139368D4B67E4395C4E397416D2A743
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4828_319054160\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4828_133350711\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

memory/2892-8-0x0000000000780000-0x0000000000C11000-memory.dmp

Download

memory/2892-504-0x0000000000780000-0x0000000000C11000-memory.dmp

Download

memory/2892-436-0x0000000000780000-0x0000000000C11000-memory.dmp

Download

memory/2892-11-0x0000000000780000-0x0000000000C11000-memory.dmp

Download

memory/2892-456-0x0000000000780000-0x0000000000C11000-memory.dmp

Download

memory/2892-10-0x0000000000780000-0x0000000000C11000-memory.dmp

Download

memory/3196-527-0x00007FFC63690000-0x00007FFC63C22000-memory.dmp

Download

memory/3196-523-0x00007FFC6B9F0000-0x00007FFC6BA42000-memory.dmp

Download

memory/3196-520-0x00007FFC6CC00000-0x00007FFC6CC5C000-memory.dmp

Download

memory/3196-519-0x00007FFC72C00000-0x00007FFC72C21000-memory.dmp

Download

memory/3196-513-0x00007FFC72A30000-0x00007FFC72A65000-memory.dmp

Download

memory/3196-516-0x00007FFC6EAB0000-0x00007FFC6EAF3000-memory.dmp

Download

memory/3196-515-0x00007FFC7A640000-0x00007FFC7A656000-memory.dmp

Download

memory/3196-514-0x00007FFC7BD30000-0x00007FFC7BD5B000-memory.dmp

Download

memory/3196-512-0x00007FFC7D210000-0x00007FFC7D225000-memory.dmp

Download

memory/3196-511-0x00007FFC6EB00000-0x00007FFC6EB9C000-memory.dmp

Download

memory/3196-518-0x00007FFC7A4B0000-0x00007FFC7A4C3000-memory.dmp

Download

memory/3196-507-0x00007FFC766E0000-0x00007FFC7672C000-memory.dmp

Download

memory/3196-508-0x00007FFC7DC00000-0x00007FFC7DC15000-memory.dmp

Download

memory/3196-517-0x00007FFC63C30000-0x00007FFC63E8D000-memory.dmp

Download

memory/3196-532-0x00007FFC63580000-0x00007FFC63681000-memory.dmp

Download

memory/3196-533-0x00007FFC63460000-0x00007FFC6357E000-memory.dmp

Download

memory/3196-535-0x00007FFC63230000-0x00007FFC63457000-memory.dmp

Download

memory/3196-538-0x00007FFC630B0000-0x00007FFC6322E000-memory.dmp

Download

memory/3196-509-0x00007FFC6EBA0000-0x00007FFC6ECD1000-memory.dmp

Download

memory/3196-537-0x00007FFC6CFD0000-0x00007FFC6CFFB000-memory.dmp

Download

memory/3196-522-0x00007FFC6E510000-0x00007FFC6E54C000-memory.dmp

Download

memory/3196-521-0x00007FFC729F0000-0x00007FFC72A25000-memory.dmp

Download

memory/3196-506-0x00007FF612700000-0x00007FF6127F9000-memory.dmp

Download

memory/3196-524-0x00007FFC76850000-0x00007FFC7686F000-memory.dmp

Download

memory/3196-525-0x00007FFC69DD0000-0x00007FFC69E49000-memory.dmp

Download

memory/3196-898-0x00007FFC7DC00000-0x00007FFC7DC15000-memory.dmp

Download

memory/3196-899-0x00007FFC6EBA0000-0x00007FFC6ECD1000-memory.dmp

Download

memory/3196-913-0x00007FFC6B9F0000-0x00007FFC6BA42000-memory.dmp

Download

memory/3196-896-0x00007FF612700000-0x00007FF6127F9000-memory.dmp

Download

memory/3196-526-0x00007FFC74C80000-0x00007FFC74C91000-memory.dmp

Download

memory/3196-528-0x00007FFC6CBC0000-0x00007FFC6CBF3000-memory.dmp

Download

memory/3196-510-0x00007FFC76610000-0x00007FFC766D3000-memory.dmp

Download

memory/3196-541-0x00007FFC62E70000-0x00007FFC62F26000-memory.dmp

Download

memory/3196-529-0x00007FFC69D30000-0x00007FFC69DC5000-memory.dmp

Download

memory/3196-531-0x00007FFC72980000-0x00007FFC72992000-memory.dmp

Download

memory/3196-530-0x00007FFC695A0000-0x00007FFC69668000-memory.dmp

Download

memory/3196-534-0x00007FFC69CD0000-0x00007FFC69D21000-memory.dmp

Download

memory/3196-540-0x00007FFC62F30000-0x00007FFC630B0000-memory.dmp

Download

memory/3196-536-0x00007FFC6EA90000-0x00007FFC6EAAA000-memory.dmp

Download

memory/3196-539-0x00007FFC69550000-0x00007FFC69595000-memory.dmp

Download

memory/4284-12-0x0000000000A20000-0x0000000000B55000-memory.dmp

Download

memory/4284-0-0x0000000000ADF000-0x0000000000AE0000-memory.dmp

Download

memory/4284-505-0x0000000000A20000-0x0000000000B55000-memory.dmp

Download

memory/4284-1-0x0000000000A20000-0x0000000000B55000-memory.dmp

Download