hxxps://github[.]com/Da2dalus/The-MALWARE-Repo

Analysis

max time kernel
149s
max time network
142s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
03/06/2024, 14:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/Da2dalus/The-MALWARE-Repo
Sample240603-req72aac92

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 6 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Debug\ESE.TXT	MicrosoftEdge.exe
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdge.exe
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdgeCP.exe
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdgeCP.exe
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdgeCP.exe
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdgeCP.exe

Modifies Internet Explorer settings 1 TTPs 2 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main	browser_broker.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main	MicrosoftEdgeCP.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta\generator$vBulletin 4	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\Active	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionHigh = "0"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-DXFeatureLevel = "0"	MicrosoftEdge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 4cda2950bfb5da01	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\MrtCache	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder\TreeView = "1"	MicrosoftEdge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta\generator$vBulletin 3	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\ACGPolicyState = "8"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\Main	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionLow = "395205405"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\Root	MicrosoftEdge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Content\CachePrefix	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate\CTLs	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Rating\Rating Prompt Shown = "0"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\PendingRecovery\ReadingStorePending = "0"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge	MicrosoftEdge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta\generator$MediaWiki	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\Disallowed\CRLs	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\trust\CRLs	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionHigh = "268435456"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DomainSuggestion\NextUpdateDate = "424219254"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore	MicrosoftEdge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionLow = "395205405"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Rating	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\EnablementState = "1"	MicrosoftEdge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\AdapterInfo = "vendorId=\"0x1414\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"10.0.15063.0\"hypervisor=\"No Hypervisor (No SLAT)\""	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Cookies	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Revision = "0"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionHigh = "268435456"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\VendorId = "0"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Extensible Cache	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\DisallowDefaultBrowserPrompt = "0"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\ACGPolicyState = "8"	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Explorer	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder\SyncIEFirstTimeFullScan = "1"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\Disallowed\CTLs	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\VersionHigh = "0"	MicrosoftEdge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\SignaturePolicy = 06000000	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\CIStatus\CIPolicyState = "0"	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\ACGStatus\DynamicCodePolicy = 05000000	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\History\CachePrefix = "Visited:"	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\ACGStatus\DynamicCodePolicy = 00000000	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Explorer\Main	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\OnlineHistory	MicrosoftEdge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Rating\Next Rating Prompt = 80f8528f25c6da01	MicrosoftEdge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionLow = "0"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\ACGStatus\ACGPolicyState = "8"	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore\LastCleanup = 0000000000000000	MicrosoftEdge.exe

Suspicious behavior: MapViewOfSection 6 IoCs

pid	Process
1944	MicrosoftEdgeCP.exe
1944	MicrosoftEdgeCP.exe
1944	MicrosoftEdgeCP.exe
1944	MicrosoftEdgeCP.exe
1944	MicrosoftEdgeCP.exe
1944	MicrosoftEdgeCP.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

description	pid	Process
Token: SeDebugPrivilege	1504	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	1504	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	1504	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	1504	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	4256	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	4256	MicrosoftEdgeCP.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4700	MicrosoftEdge.exe
1944	MicrosoftEdgeCP.exe
1504	MicrosoftEdgeCP.exe
1944	MicrosoftEdgeCP.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 1944 wrote to memory of 4152	1944	MicrosoftEdgeCP.exe	83
PID 1944 wrote to memory of 4152	1944	MicrosoftEdgeCP.exe	83
PID 1944 wrote to memory of 4152	1944	MicrosoftEdgeCP.exe	83
PID 1944 wrote to memory of 4152	1944	MicrosoftEdgeCP.exe	83
PID 1944 wrote to memory of 4152	1944	MicrosoftEdgeCP.exe	83
PID 1944 wrote to memory of 4152	1944	MicrosoftEdgeCP.exe	83

C:\Windows\system32\LaunchWinApp.exe
"C:\Windows\system32\LaunchWinApp.exe" "https://github.com/Da2dalus/The-MALWARE-Repo"
1⤵
PID:2912

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
1⤵
- Drops file in Windows directory
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4700

C:\Windows\system32\browser_broker.exe
C:\Windows\system32\browser_broker.exe -Embedding
1⤵
- Modifies Internet Explorer settings
PID:164

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Modifies registry class
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1944

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:1504

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Drops file in Windows directory
- Modifies registry class
PID:3684

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Drops file in Windows directory
- Modifies registry class
PID:3312

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Drops file in Windows directory
- Modifies registry class
PID:4152

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
PID:4256

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

edgecompatviewlist[1].xml

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\XCFODRP5\edgecompatviewlist[1].xml
Size 74KB
SHA256 853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1
MD5 d4fc49dc14f63895d997fa4940f24378
SHA1 3efb1437a7c5e46034147cbbc8db017c69d02c31
SHA512 cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a
SSDEEP 768:gL9S+ZZR8+zAmz7B4P/jRLhOzgT6YBNxdvEFd:K9/ZJAA7B2jhT6YTxdvSd
MD5 SHA1 SHA512 SSDEEP

Submit Download

suggestions[1].en-US

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\ZE6UHZIL\suggestions[1].en-US
Size 17KB
SHA256 c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad
MD5 5a34cb996293fde2cb7a4ac89587393a
SHA1 3c96c993500690d1a77873cd62bc639b3a10653f
SHA512 e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee
SSDEEP 384:K4gN8sGygaEKfWYSJUKbO7UckxtBjCdY7mO3D0C5l+piEieDSV126ry1/XSGKwG3:K4gNFXiKfWfJ1Kockxbd7mAt5Mp5ie2F
MD5 SHA1 SHA512 SSDEEP

Submit Download

dark-4589f64a2275[1].css

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\5JOMC4M3\dark-4589f64a2275[1].css
Size 48KB
SHA256 b459cea038df58dd56e1cc7df606193ea027792427343f4d35a535fb0e96ebcd
MD5 f61d3d72b892ced3002fed1b6dae1a06
SHA1 efe5d615d7f12c1e089ed7e68238d3e161b7ef4b
SHA512 4589f64a2275cb4827c2f43b254ce635913bf9eb54a20d479c2cd12b1c506105de508d551bad833ee1e9396c31e50a552d5186966ac974646e84330c3348161b
SSDEEP 768:I26BIEsMZiMtmaJnKb2HSG+8Ek5P7+QfoATta4B/h/V4guOkogLlQ3Bamxr0:jEsMZBo8Ek5ZQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

environment-2168885ea2b8[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\5JOMC4M3\environment-2168885ea2b8[1].js
Size 12KB
SHA256 3de027e86916dea9ccca9f0c9435cc20da1480bef2a797f6544074f462b1e5d7
MD5 9cc4cfdbadea1eb96bc923f120b5405a
SHA1 2c0051d7fda65f19b520fa7813ae87eac2e81e64
SHA512 2168885ea2b8ab820cd72d6e85ec6d968a54db7f3a4135408e3411173bccf5c46fe49007ad553c7783873960881ccef4dac25e3a352c6efbae17180d0bb26ddf
SSDEEP 384:xPcuqfrb5y5s06To5D/QuSZ6SF5EuYfVKQm:xPZo4Cup/T9Q
MD5 SHA1 SHA512 SSDEEP

Submit Download

global-545513c45073[1].css

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\5JOMC4M3\global-545513c45073[1].css
Size 277KB
SHA256 b7251f9d9119c23f1a2a83192425003284c58d5b117f30c551c2617addaa42b5
MD5 00dd87ad233982361cfc87d246086590
SHA1 54ca129f85a02ced8e26ce325a7bbe36a11a6d5d
SHA512 545513c450732d23237cc1844c0c0e07b92ca929c9f6dcae347e600217d83aeadd1d08e19eb76181343b9cf7ab37d1bfb2e2277e09944a66183a5cb176a32943
SSDEEP 1536:l0oR8CFiw6BSQenz49bzXI+X461NzalxXBsgeBYI4NiDcXa/3LY6K7j2zVE87AvG:lNp+87XBC/3LY6YctNhEmR
MD5 SHA1 SHA512 SSDEEP

Submit Download

light-f552bab6ce72[1].css

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\5JOMC4M3\light-f552bab6ce72[1].css
Size 48KB
SHA256 e9f53883f1a355c1c0eaf1e6c7e9a278da8cd726c7da7a5db462ebe436496d59
MD5 57b715fb666fb30b8734dc22bc74467d
SHA1 9fc81a5dceb105e5cc83b1b3b859d3f54b8ac898
SHA512 f552bab6ce721c39d04a62d52ccb9d360387b45011a271807c7c677c45458ad0acd77c5f618a3172dddf0dec7d555f78e6d3b6217becbc97d28d62763f26da13
SSDEEP 768:p83UycWV9BKIFc/sNBscqtIRkseV9hxTOdnucjQhriPfC/hFS/jhy9oqnX3Mt:HWV9BneV9hE
MD5 SHA1 SHA512 SSDEEP

Submit Download

The-MALWARE-Repo[1].htm

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\6JTX2QJX\The-MALWARE-Repo[1].htm
Size 273KB
SHA256 d96a61748a892e76a9109ead4ede3c05476f952d2e6c9f85578b3d8b2af01493
MD5 732a2d32c8007f337ffdf5f090f2adf4
SHA1 71ce3fabd14e50b759ae4329af82cdf2fe5acc9b
SHA512 331ac0a0d4b7ee7e5eefdc17c2871432287b3fd78c41ca558d8b3979d62fd254d66204336c16e864c3be13d5e76a7b89446a876839fa15c4bf38631cd811c754
SSDEEP 6144:lmTq02n9ddKM2vkm0aWyRv3pIdhR39ZvZJT3CqbMrhryfQNRPaCieMjAkvCJv1VP:sTq02n9ddKM2vkm0aWyRv3pIdhR39ZvK
MD5 SHA1 SHA512 SSDEEP

Submit Download

app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-ae5060590d17[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\6JTX2QJX\app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-ae5060590d17[1].js
Size 12KB
SHA256 6156c5c471879744a2d427763da07685e0f96ec6b94839e402b5970d424c8b72
MD5 ba2fde722e3ff133b37bd6a85f364f07
SHA1 d7dea7aa89bcf48333574cb52fea804acfdbbca9
SHA512 ae5060590d171a3b900a3c2897f3cba129d0cf13f8852de0c24d390fc7d2bdf9186a254902549f536b1c42a8554d6cca1a9cfccee80691e77c3b67e8dc8c55aa
SSDEEP 384:WcKeqMrHx6xs0I7v7b3o8ERKqdZEI2qPN:JPbJg8Ln/ql
MD5 SHA1 SHA512 SSDEEP

Submit Download

element-registry-7523664a04a9[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\6JTX2QJX\element-registry-7523664a04a9[1].js
Size 44KB
SHA256 fd74f7f700a0d8db2ea7cb25de4a804cf8a39fcb550ab014e274bec50c3790d0
MD5 d071d74055159b0da3ac806c596ea79f
SHA1 134b050bc2950d443ef55d968443b517b1206ce3
SHA512 7523664a04a911ebf59e73cb60e4bb2cf2c8b005757e0569768f87643d15ca8152df5901411b169fd016d1131305319ecd1156b12b26151a0d5c91417b7e1810
SSDEEP 768:hwoLyDkK7FOX4ZYBYJYcY3YBY6nLwlxNk25KjPoSXle:+oLyn20hQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

github-elements-d00866eeec16[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\6JTX2QJX\github-elements-d00866eeec16[1].js
Size 32KB
SHA256 2f1a381361307258eee4659dd52c5ef9d5fd8323512c179c252834312d0fe2f6
MD5 264b24f967a8d05dd0201218adc97de2
SHA1 ba486fd16e0b13f1b891e6cecf65bf25b6556589
SHA512 d00866eeec16979a57b083075deb93ec737a0d8d7547f7b1a5fd9af4787d49332d4f8e1be8d184a6081909ffea1bd86d10909b6867d185e0e33a140dc7d7e9e0
SSDEEP 768:dDdH2/MPWOwQAyf8rjgeqmdeiD6JuSuCAqvmCkrU4ln6F95KyS1uEw9i9Oiat+6k:dpH2/OwQDendeiD65uCAqvmCkrUNKyS1
MD5 SHA1 SHA512 SSDEEP

Submit Download

vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_githu-fd5530-4007dac5c26f[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\6JTX2QJX\vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_githu-fd5530-4007dac5c26f[1].js
Size 23KB
SHA256 2a0d5e25c4a82248d109b8d0216a4d16b952073a06652014240fde17c8e480f2
MD5 9860aa7de1ecc1d8ff1f90e811b10651
SHA1 74a19f002d2ff446d0104f4d2955aa7c2770ca15
SHA512 4007dac5c26f85cd55d1ecd387e90372b8dfe61cc9a278bfa82616d1f1981eebb77516dbd6403733686ed82a12fb469147a3b09cc5c148a99ba9dad9f7dbc654
SSDEEP 384:R84Pm6zQgx0ACApQsuggABZ1yr6J5itPRT3dPmxEtu/LEDidBeLnU:RHPR0qir6J5itZTNPqT/LnUU
MD5 SHA1 SHA512 SSDEEP

Submit Download

vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-c238a4-c6bbd5d2c027[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\6JTX2QJX\vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-c238a4-c6bbd5d2c027[1].js
Size 106KB
SHA256 e084075330aa3d57644492b0609224ff9643d3bc0f18dbecabd85b736d7c1fad
MD5 45793c7e530c232258b2535acfe3c346
SHA1 cc1719f4f5ef907133733167cbbc2e362c052b76
SHA512 c6bbd5d2c027d8ee001fee77c63c30912dea9cfd67ab948f3d4c1530ffcf45116be8c9b7c0dee61379baefcfb27ad0d9b164c77e30ac7015838db04111aa95a9
SSDEEP 3072:cZ3NTmHx5dK+rBeWkGjcNOlIyr0SG3BASlR587vs:cZ3hUxK+r0hks3BASlRmY
MD5 SHA1 SHA512 SSDEEP

Submit Download

vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-6e6f83bcc978[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\6JTX2QJX\vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-6e6f83bcc978[1].js
Size 18KB
SHA256 9ea40b58c32c154e2cb17834f70f7bf8c6049bac1dcf640bbda8a8ba1e0f7670
MD5 c51750a26a33cf80e50f4a3d0aeb6892
SHA1 e98129a8f85a2630c649dc239a94d87eaf04ae4a
SHA512 6e6f83bcc9782b534fb50f26d877fe691ced39bf579844a5f4667460de9d723d918d312f7f1454f29ab63bb9263f5364339f3022c8c33b8c7ce816e869f15eb7
SSDEEP 384:6jHPpl2NbQTVmY/tLkZhU5D4Y3k1d+C31Vj+BeoSaUt2MiF3AI9sK8lSno7dvh0Z:6LPOQTb9kQU1d+C31Vj+soSaBMiF3RBH
MD5 SHA1 SHA512 SSDEEP

Submit Download

vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-b63d41-209f14258c8d[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\6JTX2QJX\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-b63d41-209f14258c8d[1].js
Size 17KB
SHA256 88bda48a59ff29866ec711b693f23cbe44ca2cab539ea01ed2b5e18209bc6aeb
MD5 66bbc8cd9047a60834eb7d2780b82305
SHA1 bc12a8439f2681fe5358327ad270416912b6a147
SHA512 209f14258c8d0da36404a07edc7cf13a13bcc48a0d9dd74ab3fba8c5db418b829f6e506c9e1cc19e4f4ec58802181538bb265607d25aabef2bb56fe74e1f1f35
SSDEEP 384:mSblhaZP7J92FNroD1P8T3ITSQfKpeSL2CEfFmXSmfaDiSTO:VT+J9Wxo5PIImQgeSLUmXS3DiSTO
MD5 SHA1 SHA512 SSDEEP

Submit Download

vendors-node_modules_github_relative-time-element_dist_index_js-c76945c5961a[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\6JTX2QJX\vendors-node_modules_github_relative-time-element_dist_index_js-c76945c5961a[1].js
Size 14KB
SHA256 55cdbee6ddce98f5c299a24fb9851501f46ff0cdd2ef3b2f7bb572a3940b462d
MD5 2cabd818fb8745b2fc7d5f92594269b8
SHA1 88108fecb3839f06671c2a21e35163e0e414b2b0
SHA512 c76945c5961a4f5b2cb1f85bd3cbb35d5e81f611c3ba05543acfe870728e94e9719c9331b65f4c2c8723960c5ac1e9cac0495a892f049b41ed3ffbe899b93700
SSDEEP 384:pT7l7ZUtbryTU94HhXfwiOOxeXyW7TLG2k1/KygZd4F:pTjKyTUSHhXfwiOVXyW7TLA
MD5 SHA1 SHA512 SSDEEP

Submit Download

vendors-node_modules_github_selector-observer_dist_index_esm_js-9f960d9b217c[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\6JTX2QJX\vendors-node_modules_github_selector-observer_dist_index_esm_js-9f960d9b217c[1].js
Size 9KB
SHA256 f87c5b59b8f353c8762f2e44e1f82feafab882a96a0fad135dc6fc1555872ab3
MD5 683a7fe431bded8fbbf7b5189a1b8209
SHA1 2fb527473877ea06ec6b023690ce933c216c5d07
SHA512 9f960d9b217c457d467a9510dd9797c4ec9df9a892c0a3e1746b2b87dca8ec191dc901e983bc509bc282004967b6fd588dbff5bf70bc7e20a5ca32bc7f1d772a
SSDEEP 192:cYtHD8XW+0RC1hKvjV53maRzR63v6R+z5tu41D+5mnDzc/tWuplJ6U:ciHD8XW9RQK7RzRIv6R+z5tD1qAklWup
MD5 SHA1 SHA512 SSDEEP

Submit Download

vendors-node_modules_github_text-expander-element_dist_index_js-b2135edb5ced[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\6JTX2QJX\vendors-node_modules_github_text-expander-element_dist_index_js-b2135edb5ced[1].js
Size 11KB
SHA256 0dd1ec9da83fce11b3bfecf9aed67d4f33f7a1d4bd3f04dd1ed941f3b4c8b3fa
MD5 3f5c04894f0202a67ec6f0354c1f9acd
SHA1 6a6bf35008b0121bb5806e68bd5f87b20ba72f17
SHA512 b2135edb5cedb3b45ffb96906170b242918156621c0d13000d18ccffcd2f20c2f1e2827b391cbe89f499745b748ae99bc51b972b4234ba739624caa4d2e33862
SSDEEP 192:KjENGl/ybxKp3nnPlY19e22DA/HDZRM+GvSU7x1he0q589+Vqez:9NU/wKp3nPlY19erDAPFRM+Ixf2Qez
MD5 SHA1 SHA512 SSDEEP

Submit Download

vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-c7679f99a1f3[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\6JTX2QJX\vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-c7679f99a1f3[1].js
Size 8KB
SHA256 9934ea98e9391532afa53b20441b8a9157ca4914e33643be75172478a82c8e70
MD5 f4c247ce967cbfd4ab3c833c9b82ab6c
SHA1 c3d38f4f6dac79bcb91b4fe0c3f8dabe23b5455f
SHA512 c7679f99a1f36ab562986302c30fd1445585810dc1ebb2804a61c59384378af7f6a1a514dace66ae79e582baab7d882d47fb7f9081eb7d70061ccbd931ccba6f
SSDEEP 192:soNcJO1epOXvDEcmo7QEZyXycy/NhOYQrlm:cKeqBsEZyXycfrc
MD5 SHA1 SHA512 SSDEEP

Submit Download

code-33498bbbf39d[1].css

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\VB6NM2YV\code-33498bbbf39d[1].css
Size 30KB
SHA256 dbe4579afad9456e07fd6eab0e4e0f6ef895e360fe26c5d4b3867f54081eabcc
MD5 c33214069c8aaceb09d0bda33fc0dc53
SHA1 e048f70e3ec7acd9e07aceb3054b5946e57e0423
SHA512 33498bbbf39d518a3b435bc1ba104a944183437fdc155a5dfaa6c4b3d67993b9e01661a416a53975889059e4a5d4a3ab164afb30634f6c6ffadee24d2893450b
SSDEEP 768:OzuitDWY8trQxCXJ+BzeS+INuqfp/tjw+Iv8aED+h5h:332BzeSt9tjw+Ica5h
MD5 SHA1 SHA512 SSDEEP

Submit Download

github-f1af66156f94[1].css

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\VB6NM2YV\github-f1af66156f94[1].css
Size 121KB
SHA256 6ba40ac0936fe04a8fa60d907799d58d481ab153323d65b92ccc9219ccf6ba19
MD5 837cf1bcc858f007f7639fac65f6426d
SHA1 9b4377d76468d6786dde49e0521d173e633f7db3
SHA512 f1af66156f947ecedc848f7ea645fb556da9a697d818a7a0c6daaa26530a42fa29d9be6f9fcc1ec5bb35ac81fd3e7b16b5e17a369965525acca3c44c8efbd19a
SSDEEP 1536:EbEL/6ZCpp+VXLVzCm/V5Q0XYsyLVNPykKUBu1s2VF4fU5Oe2auyMtcONv+aQ:P6Z83bu1j6auXtcv
MD5 SHA1 SHA512 SSDEEP

Submit Download

primer-fa3434a1ba0a[1].css

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\VB6NM2YV\primer-fa3434a1ba0a[1].css
Size 330KB
SHA256 273e68d7232307185309cc38ab390b80fa30e8f6c09675349fc10d6c2d9b2ae0
MD5 9d810cbc96c21361d02f677103a34e7d
SHA1 cd540740f4c7a135d65bbd9e30b265252f877e12
SHA512 fa3434a1ba0a7d83b4ad5753c0f59371ce5092f12dbd6ddf9d2cf31716e21ffb5fb10d4ff2a1be7cf1734b1c9ca0050dd7d7803cab44b452c4d2a193abc0692b
SSDEEP 6144:c/IgWmP5czYu1wX00d4yjZKU0b33yO/7OLHAp6c5b3CSQX+gPecMYrXJWK:c/IgWk5czYu1wX00d4yjZKU0b33yOoPZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

primer-primitives-4cbeaa0795ef[1].css

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\VB6NM2YV\primer-primitives-4cbeaa0795ef[1].css
Size 7KB
SHA256 6b4f34714b5e626392f944037b222b232adb545d407f96136d31934f685a0a5d
MD5 f78dad1c29b12057a61e4031fd6cd307
SHA1 36953db7f8d8ef34aedf6d6a608287f1b93586f5
SHA512 4cbeaa0795eff125cd72798ad6d5db8682a910a200d54aa52dcfd3e8334f62a59eb4a2d7eec3158756bc196e66559f7e08a7282e7c507902b26891a6ce3eff09
SSDEEP 192:beAaC75UaEZIWWunHlmqEPHWnqn3OH3aml6wL:SrJZgPU43OH3aml6wL
MD5 SHA1 SHA512 SSDEEP

Submit Download

repository-2e900f0ac288[1].css

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\VB6NM2YV\repository-2e900f0ac288[1].css
Size 29KB
SHA256 93687313c07170c3ef1624982cdad4939f9ddbc088b24da5882dddaf1fff0058
MD5 0e753444198d619939444d6f8d168f7c
SHA1 830a3b21b982bd016ace447462d1ffcd0e91c1f6
SHA512 2e900f0ac288f08a8f9053cd191db0f007263da300cb50cad02ae785cdc1bc8debd76cefee03471f7ae6641ada999e765160e41fba8d812bc7ae668a84106e45
SSDEEP 768:DslafoBmG+PSQulmmICsFuHbNxwa5rCIaPr:DffDSDHoa5Sr
MD5 SHA1 SHA512 SSDEEP

Submit Download

vendors-node_modules_dompurify_dist_purify_js-810e4b1b9abd[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\VB6NM2YV\vendors-node_modules_dompurify_dist_purify_js-810e4b1b9abd[1].js
Size 20KB
SHA256 3b0d2012948870af14b480bed5535b34c5f7e649a2c9c13234c319fbf8d2d7db
MD5 917054ff94af6b65ef610aa7b541865a
SHA1 ae699adc368c0bddf428d4f17cec479c6d96cd6c
SHA512 810e4b1b9abdcf5f10506f484ad38bc17cae973d1609d2d8d51bb4a8eb8d3c542cacfe6e4b1c31a062238087e216dfe4206064e8c1dc4cb5d961fc8e97a5a1ea
SSDEEP 384:MhAQbEJSm6v87lMOUr5kF0XBfGU8FYpVu8Zr/JrhTiY44WliwoFOxS7WxK:jczPv8xMO+5VXBuU8FYZi1hiwMH
MD5 SHA1 SHA512 SSDEEP

Submit Download

vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_catalyst_-392fe4-1327b94f3269[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\VB6NM2YV\vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_catalyst_-392fe4-1327b94f3269[1].js
Size 26KB
SHA256 81a187c88d2cf527154d681ca1891c122b519035673689e706956ed74747e4b4
MD5 5ff54a67c72cc7fa84817e0fe75b510f
SHA1 1a1cf59fbe8d463ef12b0a5e1a11f0050e47e57a
SHA512 1327b94f32699e098e60e1814a5ab921f75d4f594c1036974572b69d3b70b6a4179021afe9f55b70fd956e5f6c1223ddddeb4e0fda25c42f98aa25f581969bff
SSDEEP 768:mAN4K7Z9sJ+NEG/819UCdaoNqgA3INgMKSnwsqFYOHr6gbeiG4nTzUs:tN4KdE+NEG/8ACdao0pINg56GYYr6gbn
MD5 SHA1 SHA512 SSDEEP

Submit Download

vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-4ac41d0a76fd[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\VB6NM2YV\vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-4ac41d0a76fd[1].js
Size 9KB
SHA256 97652a00703643a49de00ea59316fd488cf72429b599a62d7cfae464f7bf5a96
MD5 4e684fa742abc9befc4748e8a4680586
SHA1 25129f277cfd66774a3c47db8b22c19b364bdc25
SHA512 4ac41d0a76fde41832af2c742d4a063ecea83aafd5233ec46f82938fd5ba06aebc0a69fe241df477fcdf08b1a8e6d6f02e0a42669a351ea50b3056ebc8eefc9d
SSDEEP 192:Fhk3OeIPiCQ26YqdjhdFPWB/r0DXPfZU5qoP94G69tPw3xMsJW3re6K:FCZINQ26Yqdjhdk99MPEGskK
MD5 SHA1 SHA512 SSDEEP

Submit Download

vendors-node_modules_smoothscroll-polyfill_dist_smoothscroll_js-node_modules_stacktrace-parse-a448e4-f17a27f30529[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\VB6NM2YV\vendors-node_modules_smoothscroll-polyfill_dist_smoothscroll_js-node_modules_stacktrace-parse-a448e4-f17a27f30529[1].js
Size 13KB
SHA256 c2aa448500cc9bf17d5b318607d25f1d7a27ff5a4d0bcd1fd72f09b24fe9c3dc
MD5 e7e4593fc2e398b643ac46f72fb64c2c
SHA1 ff807a2fffcf90fadc032dc284191da75b1a3b45
SHA512 f17a27f305292f98031a79ed141ca71b8881070db030000ff52c7519ab6af5ae65fc83fcddf5cdfecf903c9ec1633e8dd7f117590fb47a8fba3011afafe00132
SSDEEP 192:uA8ReY6D8DCavpl0BICF/rPKnW4Z1cN/bcV6f2sB0bYxzSIvTx:usIk5lPcuEul
MD5 SHA1 SHA512 SSDEEP

Submit Download

wp-runtime-8eba61d9cdf8[1].js

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\VB6NM2YV\wp-runtime-8eba61d9cdf8[1].js
Size 41KB
SHA256 75370f0c4822a7294039e6769e0c62ea2bad02a39460a2cb12ba7e310e00cc76
MD5 a7f42fb10ac21078385fef5f33f60954
SHA1 7705f6d961e944f7a9e1322999291f17330b5d70
SHA512 8eba61d9cdf870a60125af4f2d2e098ac8fd9f077f700a517f06d057256ea5a69b956cfe1225c363661edd79317ad978b946a765d4f36ec9554418d6b36b3cec
SSDEEP 768:hheo5Gos8EW33PLXEawf1NRAyqJcgZM5k1qABmYsbnaXn2p:0os8EWHPwgZIk1TBP4aXn2p
MD5 SHA1 SHA512 SSDEEP

Submit Download

B6ULCK91.cookie

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\B6ULCK91.cookie
Size 169B
SHA256 df280c3c02d9dafcbfe9655c15be02392dd54d0566f9e8971e2c41cd88936587
MD5 e83f2b2b10ea058f8114dc375bacef21
SHA1 7f02781d0f70f8cbdb597fdf9873857f8bb7c06a
SHA512 a7e1e7960df413a1582969eb6f82f11749c85d960ca03a51cef88e096884e416951e8f57395c1cc4360813628cf6c1610ad299e3373dd551bde1364ae1521a0e
MD5 SHA1 SHA512

Submit Download

A66A8DB907BADC9D16AD67B2FBFFDD5C

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\A66A8DB907BADC9D16AD67B2FBFFDD5C
Size 282B
SHA256 aa59a1d866ce19af4c07c41fab7b0f076071028ca5d48e60bbd29d3cdd66b548
MD5 ff24ac34b750092a94186c8e52fb4d7d
SHA1 30ee6a11bfe71637ce78a18db523461d425e7279
SHA512 78b8fde2cfb3bfb6982e7f106e866138f98a05c2dd437941197800bb8c039dc17056e5cee29aaddc75c82237f3c97b6a636683a5c8ffe63ff57d2880e9889e35
MD5 SHA1 SHA512

Submit Download

B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25
Size 1KB
SHA256 46d3ed9486f6c000d1e52b27979054fdbd340efe906522441306ea0c189276b6
MD5 76d4d147245ce8da3cf3a4aff0bc5611
SHA1 edf7b96b65cbe3e3ba82799502871c790d9ebb78
SHA512 631a6e44a0b135335bfd4cba07fdebd7bd688379f4012b0d3219f36680d1b735572e69601c631d9a1137aa615a4afd3bb91087d04bde887bd1a1130fe46c5dd2
MD5 SHA1 SHA512

Submit Download

D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90
Size 979B
SHA256 d3a4273f83db93b4afe9c06918806d71e6268a4b8b41cee65e047cfaa1af548f
MD5 61c060748daca8556274bfabc587f30e
SHA1 05b5c3bd691071c2071f7864a15ba98f60cfacfc
SHA512 5a8566c72fa10bf6380096f57f5b3c638e347d4b40adb8706a50f84095d0047c39e72f1fe413f05c819cee4f84b6208d9702e2cbdc2f52e22321bb204edfc4ec
MD5 SHA1 SHA512

Submit Download

A66A8DB907BADC9D16AD67B2FBFFDD5C

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\A66A8DB907BADC9D16AD67B2FBFFDD5C
Size 480B
SHA256 be5fd93dd5cb8221d0f7d93e8995acc412e4ba82db06aab62bfb3544602d489f
MD5 51ac148428aff44d5e115d511e8eb729
SHA1 6c43bd9daf4bf5caf04796e698b854b12b3ac892
SHA512 f9b2525a6ddfebabeb654413e7d3f537996f0a5888f2b14e1272b644a8924a20b2db05eb291fa14e1caa86f0439ed102e0d9258e927c89f0b5904b4709b6019d
MD5 SHA1 SHA512

Submit Download

B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25
Size 482B
SHA256 f5bf7d59bb68cef8cde6fb2f1ee517af7c170acf36ec8c88887d138053cbbb9b
MD5 76563d32af44fddb1680e2cd69180b8d
SHA1 63f7ed7e1063afd1564b84f75dce32bbe7afbf2d
SHA512 fce94184b6bf1a36316c1d7f41b2cd848811844ca15644bf322819ddcc8e61c49399f9999cea95401fc51702a78b01366390643bf749335f311918288cd05768
MD5 SHA1 SHA512

Submit Download

D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90
Size 480B
SHA256 43bc36cfd0a47e3a8fc6681d0501cb61e33f6e7f484d7407dffd551384264b55
MD5 dc52b1951d16ae80f6fd2c09d0a67cc5
SHA1 95581ab9af9af033c6fe6ae18369ea2acb8cd3a7
SHA512 8a89c7c8314673f2172dcf9ba018148202ad7db91260e93e552e3a2f62e0117809e7b06798dd8699d0cb3e948410de415918b97ded61f018bd6b55c8b4065216
MD5 SHA1 SHA512

Submit Download

memory/1504-43-0x0000029DC1900000-0x0000029DC1A00000-memory.dmp

Download

memory/1504-45-0x0000029DC1900000-0x0000029DC1A00000-memory.dmp

Download

memory/3312-184-0x000002C9FA400000-0x000002C9FA500000-memory.dmp

Download

memory/3684-66-0x000001C980D00000-0x000001C980E00000-memory.dmp

Download

memory/4152-208-0x00000217321F0000-0x00000217321F2000-memory.dmp

Download

memory/4152-201-0x0000021721AC0000-0x0000021721BC0000-memory.dmp

Download

memory/4152-210-0x0000021732210000-0x0000021732212000-memory.dmp

Download

memory/4152-214-0x00000217322F0000-0x00000217322F2000-memory.dmp

Download

memory/4152-212-0x0000021732230000-0x0000021732232000-memory.dmp

Download

memory/4152-206-0x0000021721A70000-0x0000021721A72000-memory.dmp

Download

memory/4152-216-0x0000021732310000-0x0000021732312000-memory.dmp

Download

memory/4700-0-0x000001BCAD620000-0x000001BCAD630000-memory.dmp

Download

memory/4700-35-0x000001BCAABF0000-0x000001BCAABF2000-memory.dmp

Download

memory/4700-229-0x000001BCB4400000-0x000001BCB52C2000-memory.dmp

Download

memory/4700-235-0x000001BCB68C0000-0x000001BCB68C1000-memory.dmp

Download

memory/4700-234-0x000001BCB68B0000-0x000001BCB68B1000-memory.dmp

Download

memory/4700-17-0x000001BCAD730000-0x000001BCAD740000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads