Resubmissions
30-06-2024 10:57
240630-m2fycswgpd 130-06-2024 10:56
240630-m1ptwawgnh 430-06-2024 00:25
240630-aq5fcszgmf 10Analysis
-
max time kernel
31s -
max time network
38s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
30-06-2024 10:56
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://needlejuicerecords.com/pages/friday-night-funkin
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
https://needlejuicerecords.com/pages/friday-night-funkin
Resource
win10v2004-20240508-en
General
-
Target
https://needlejuicerecords.com/pages/friday-night-funkin
Malware Config
Signatures
-
Drops file in Windows directory 9 IoCs
description ioc Process File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdge.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri taskmgr.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\4183903823\2290032291.pri taskmgr.exe File created C:\Windows\rescache\_merged\1601268389\715946058.pri taskmgr.exe File opened for modification C:\Windows\Debug\ESE.TXT MicrosoftEdge.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe -
Checks SCSI registry key(s) 3 TTPs 3 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000 taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A taskmgr.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName taskmgr.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\Main MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\Main browser_broker.exe -
Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-VersionHigh = "0" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\CIStatus MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\SignaturePolicy = 06000000 MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore\OneTimeCleanup = "1" MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = f9ea4d24dccada01 MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionLow = "395205405" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionLow = "0" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\PendingRecovery\Active = "0" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\JumpListFirstRun = "3" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder\SyncIEFirstTimeFullScan = "1" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\SubSysId = "0" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\AdapterInfo = "vendorId=\"0x1414\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"10.0.15063.0\"hypervisor=\"No Hypervisor (No SLAT)\"" MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\CIPolicyState = "0" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\ACGStatus\ACGPolicyState = "6" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Extensible Cache MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\PendingRecovery\ReadingStorePending = "0" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-Revision = "0" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\ACGStatus MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionHigh = "268435456" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DummyPath\dummySetting = "1" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionHigh = "0" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-DeviceId = "0" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Content\CacheLimit = "256000" MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:" MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 413a2c2adccada01 MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore\LastCleanup = 0000000000000000 MicrosoftEdge.exe Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Content\CachePrefix MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-VersionLow = "0" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\JumpListInPrivateBrowsingAllowed = "1" MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 8461332adccada01 MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\VendorId = "0" MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\SignaturePolicy = 06000000 MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\PendingRecovery\ReadingStorePending = "1" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionLow = "0" MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\ACGStatus\DynamicCodePolicy = 00000000 MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\Active MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = a75f8224dccada01 MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Cookies MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Content\CachePrefix MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3\{AEBA21FA-782A-4A90-978D-B7216 = 1a3761592352350c7a5f20172f1e1a190e2b017313371312141a152a MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3\{A8A88C49-5EB2-4990-A1A2-08760 = 1a3761592352350c7a5f20172f1e1a190e2b017313371312141a152a MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Revision = "0" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Explorer\Main MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000 MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modif = "1" MicrosoftEdge.exe Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\History\CachePrefix = "Visited:" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Explorer MicrosoftEdgeCP.exe -
Suspicious behavior: EnumeratesProcesses 5 IoCs
pid Process 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe -
Suspicious behavior: MapViewOfSection 8 IoCs
pid Process 4308 MicrosoftEdgeCP.exe 4308 MicrosoftEdgeCP.exe 4308 MicrosoftEdgeCP.exe 4308 MicrosoftEdgeCP.exe 4308 MicrosoftEdgeCP.exe 4308 MicrosoftEdgeCP.exe 4308 MicrosoftEdgeCP.exe 4308 MicrosoftEdgeCP.exe -
Suspicious use of AdjustPrivilegeToken 9 IoCs
description pid Process Token: SeDebugPrivilege 2316 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 2316 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 2316 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 2316 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 336 taskmgr.exe Token: SeSystemProfilePrivilege 336 taskmgr.exe Token: SeCreateGlobalPrivilege 336 taskmgr.exe Token: 33 336 taskmgr.exe Token: SeIncBasePriorityPrivilege 336 taskmgr.exe -
Suspicious use of FindShellTrayWindow 30 IoCs
pid Process 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe -
Suspicious use of SendNotifyMessage 30 IoCs
pid Process 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe 336 taskmgr.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4844 MicrosoftEdge.exe 4308 MicrosoftEdgeCP.exe 2316 MicrosoftEdgeCP.exe 4308 MicrosoftEdgeCP.exe -
Suspicious use of WriteProcessMemory 9 IoCs
description pid Process procid_target PID 4308 wrote to memory of 4492 4308 MicrosoftEdgeCP.exe 81 PID 4308 wrote to memory of 4492 4308 MicrosoftEdgeCP.exe 81 PID 4308 wrote to memory of 4492 4308 MicrosoftEdgeCP.exe 81 PID 4308 wrote to memory of 900 4308 MicrosoftEdgeCP.exe 84 PID 4308 wrote to memory of 900 4308 MicrosoftEdgeCP.exe 84 PID 4308 wrote to memory of 900 4308 MicrosoftEdgeCP.exe 84 PID 4308 wrote to memory of 900 4308 MicrosoftEdgeCP.exe 84 PID 4308 wrote to memory of 900 4308 MicrosoftEdgeCP.exe 84 PID 4308 wrote to memory of 900 4308 MicrosoftEdgeCP.exe 84
Processes
-
C:\Windows\system32\LaunchWinApp.exe"C:\Windows\system32\LaunchWinApp.exe" "https://needlejuicerecords.com/pages/friday-night-funkin"1⤵PID:4776
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca1⤵
- Drops file in Windows directory
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4844
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵
- Modifies Internet Explorer settings
PID:3360
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4308
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2316
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
PID:2532
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
PID:4492
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
PID:1384
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
PID:900
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:336
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
74KB
MD5d4fc49dc14f63895d997fa4940f24378
SHA13efb1437a7c5e46034147cbbc8db017c69d02c31
SHA256853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1
SHA512cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\AUOMX54H\component-rating[1].css
Filesize992B
MD577dc9f9671df3af3fff2be7d474a593e
SHA157147b205ee8c9065a2b54b81226a7b0b8865e58
SHA2566451fd2571891ba75c6cadfb3e226d605843d4f8b855d4c5e0c8490c6fe21268
SHA512d2ddb50577cfc04d1ecdc8e7a0dae12ed1505b5bea3e06d4589ccac46b72bc5f4526e04e32bba97a1b2449b5ca0ec272aa8f84f11e7a1582392d2981cc75357a
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\339TKJSV\FNF-MiniDiscNew-1000[1].jpg
Filesize6KB
MD5f1ecad92932a5705c900aa511c68a99c
SHA1ea6d90dd85de6807c54dbd38d028f263fc02f580
SHA2565a16668a5cc037baa01e6218483527b43f3407bee6829e9445f805daa0992992
SHA5125440b900a28024e453f0f5bfcbfadebbb1c8a2e9fe05c02bbd3ce77bd973a488dd5f983f5b89f23aec930d2efb643b046b901e76de46d84adb0e42d92fe326a1
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\339TKJSV\Needlejuice_Logo_v2_1[1].png
Filesize12KB
MD52e225798f7c51755821c19cc09a53678
SHA1101ad3af04adc422439aca72c17b7e327cf1b117
SHA25606ee5a49f7f235b1ebce4e60256215a9686dbe689c5c9a3bb58368dc06c72f50
SHA512c10d6c0f8c963ebc1b421565714e642312e13a13ef3788f6e93f8a84831990533a6097de501c18026737b07083ebad6bc6cf86f17233421eba25789711a628b5
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\339TKJSV\assistant_n7.3335c7bdaddf2501ddab87cdbd9be98f3870e10d[1].woff2
Filesize16KB
MD5ae996c66c78687496650da0d8a675770
SHA13335c7bdaddf2501ddab87cdbd9be98f3870e10d
SHA2561a518385d78080bb5f35283c798b4e9853841509f3cadc746714c1fbf71d1f84
SHA51223ec17a3a8b39a8e7f532ecb2a1665bd20e087b09f575cda74cfa8a9c279441dcf80e812428669cd430306bff95d0d94dcbe1a08737f3ea0ff885422e5a9a306
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\339TKJSV\component-cart-items[1].css
Filesize4KB
MD511dc02e9471e88907ed84f0b0d42984a
SHA1014c9d8a9a13eb51159af16e52fb6d70904f76cf
SHA256003a6ace8af0b1dcc37591d970b7d6a6dadae712cfb776fef92f860872cf5443
SHA5126526131bccecaeed2a61393c3b4968070dd5b93f6e52442ff4ecfb86a775b507fcdab01e1b353bdc7edfc5aa09d343e2a78134f0ccd5867f2a1ea0fef82e01ab
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\339TKJSV\component-list-menu[1].css
Filesize516B
MD5501d64354e044821e95ef3e3903af7fd
SHA17f8de8cb54d47df6f32d14fb58cfefe91afba01a
SHA2567e5d9009e86a53f67e2eb846cc835fcea43bcef8afd1db9d65bd3053239d703c
SHA512e3436a3b9b5a43548d10837e2253c1153ff34ad9b2377ac69159bb87b4497ab806da6ab587e4cfe1156ef94a6dada0df63d87f2a65927fc3eee75be10fc18d37
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\339TKJSV\component-price[1].css
Filesize1KB
MD5b175f02919914e1b05d01b7abed6a553
SHA1b20c352d3c1b1aff604be15ac69a20508f5dd3e8
SHA256bc094494969c04c0d26fd474bf639d6281eff66064c839b5bb354e7b97e2299d
SHA512e15aae598079aa0e490400b55a4b42889605543205907377bb1614028db266d0dfa7528566e65f4c74310870404cce7262f92cf1c2fe51ea9ee96d35add0c916
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\339TKJSV\details-disclosure[1].js
Filesize1KB
MD5c42854946191594056482a7750b23fc1
SHA1e1b33dbecbe5b0c580998d7fb1d6dfc2c34ed071
SHA256638b613d7764a353042bb45631c62d28e71225f898be22fd04b1cc99f670e1a7
SHA512ac23deaec277380b186e855207dd79d85a1305b3d5b24ffce60ef3640f59ca3b089d8cd12d94fc01d718721a2cd5f95bbda2038b6f8e0b8631d972a4214130f1
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\339TKJSV\details-modal[1].js
Filesize1KB
MD58fc433d942e2abfce2ab7ff23d25f2fc
SHA196c305486d7c09173edb9e266b8351c0d5f6672a
SHA25671ab94430c675a4cc0a3e328b80aceb3b913206918dc0630031fd482bbe47ac6
SHA5125788267f0f41e25a57e7d19bf0e2ca52bf5050ffc5d9c1b2bbe0197f931dd643b6c4b8e5678beb3079a4e36671753882ba25b62e30b943828e4b56930b10d319
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\339TKJSV\features-1c0b396bd4d054b94abae1eb6a1bd6ba47beb35525c57a217c77a862ff06d83f[1].js
Filesize36KB
MD5102ec6ed5afd7ba641d65dfab03e8aef
SHA11d0993a66d613c83203075adfc5a19143301f7aa
SHA2561c0b396bd4d054b94abae1eb6a1bd6ba47beb35525c57a217c77a862ff06d83f
SHA5122311521895d96f14e56b7f9369cfd784f221d56e343c64d3af9e3610958a0a2e2e33dbfae783413d927dd4fb5f8da285d75658abb86bd229d26ff70cca0b2db9
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\339TKJSV\friday-night-funkin[1].htm
Filesize354KB
MD57f033b8df1cf0661804febade1d6981a
SHA148d40d29514578e75d76ea8ab7f8919b753b679e
SHA25606afd619802c200fa000d9816df201cdfd9084b03dff5ad1d436fefe61d09882
SHA512d1aeabb19338d6050bef389ca1e0390ff70b5c91107e8b9b14b1f43e2d3010aeb5c565894f242b5c1eefec416412a85061b53d8bf1a776e63f5c706431746baf
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\339TKJSV\localization-form[1].js
Filesize1KB
MD5fc17b9868825c7bc4a8eff277e00d6d5
SHA137bd6434020c86b02b9a0b0f6f205ddac03b8596
SHA256c590810179dc208e1a60874cd7c7ea49c681ab7582fbc4f1fab44b6b338d033b
SHA51269ce211481fb3d1dcb40b5f7459f0392be99b697774c245524a0745b0b39867673d9dd349c1829fdc70c66282fe09cfcdc4560dbd764a53ae7b0bda2de5df0f7
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\339TKJSV\predictive-search[1].js
Filesize6KB
MD55302bf5bf8aa43b4f00c78d20979049b
SHA17b906742e38b108fd82f56f4fe7dcb956f0ba337
SHA256e5c70451311a3713008d6b91f682870fab203aedcde455a2100344ce3afbd14c
SHA51264b5143ce1df7f3aec3813df2f18046b4c073684086dbddeb2fd12dcbd3c1d7ffcca5ca3fa652560186ddfb290864e38bb6d5b2f1c47a09b1d86c403f1361bf9
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\AUOMX54H\BF_Figure_-_Box_3[1].jpg
Filesize6KB
MD53071360b7f39061e1b897a9a20736436
SHA1213d62c19c8387bdc79c9457332d0c84bef00aae
SHA25643400773b34ece795de0422c95ae551717b5586a8c0c39a9ce96ddc95f443a17
SHA512ca317253c2fbe8b0f6217a4ccb9499ab3cd6b7166ecd7dc5616e1ca1b48c555fb0a3321bcac7cdb9888386e5940ba4cf9308165fad93f6182bb8dbcfa12778bc
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\AUOMX54H\Pico1000[1].jpg
Filesize7KB
MD57b351cfe493c807e3e33237f3f838882
SHA12ad4db05480c795d493883382c072dcd556c5516
SHA256c42511c1868885d0ba5b56bc42f6a9a0dcb3e7534fe039717461d51b4bb5b0e2
SHA5124e72cfbf03b32c0118ef792e1e1a1ef4a9a34bee14648607c8d2f08f6b7a9c93cf7c3268308839451ec35fb38d36d660d0e6a7ce055de73a3b006430292931bd
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\AUOMX54H\b36000b3ew23d1e6a6p45ab3e8bm574dc08dl[1].js
Filesize242KB
MD5fae8b53d533531c430238ad38e4bc653
SHA13b8712d560f4ec745a31180589b63644e98295a2
SHA2564fabd8212339b289219739e60cd9aad21d6c05e3f126674c12e81fde0d9cc3e6
SHA512c6faff0d3bdcda9b7ce47fc452c36dea5d466e592adeddcc196cdb511064ea44c8fff510c0e498e4ca1d96028f739657e43c7f2253498255326ee15622c244ad
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\AUOMX54H\base[1].css
Filesize55KB
MD5e5fa205d727680b5f0e1cef906faca8c
SHA166b4f034a83da34307283e94b8be183d18c19cfc
SHA256b785d80bb3fdd88bb6745031180646bf77e5299e9ad9f53cb189cadc9deeae1c
SHA51282baf0929cea516a64f853f14648432624b577f8929b891b0fd9f79d7a6eeb4022836881798584162351a51e33f7243f7bbe9a4758f81dabdbcb7237f4cf0906
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\AUOMX54H\component-list-social[1].css
Filesize428B
MD55899a33c160c6699ce8550d4f11fb780
SHA1977cbc364b22c1323e6a41db49aace5771bfee29
SHA256f83ce5690e47394c42ac7531691f0239359d489ba3973c8336497f031e297018
SHA512462c8f5e4f63ca02d98fb004754c356d3c222db75c5613bfae2f1a47435c2002f4d62d61bec75d177773593d70c8436b82e3fa8613e0b63370aa8b6b65e892d5
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\AUOMX54H\component-newsletter[1].css
Filesize1KB
MD5db355d4bf8db0fd689f44404e4349378
SHA1e74fed7c991cb24cd1ca9a7b0be0d62969acf1b5
SHA25649d8c152dad629a728483d4610a9034e42cac8bea71ff18ce40d311f7f53529a
SHA512178d59b17adacd9cd9b1a0ea761ccc78a671821d057124ce7fb061bef57877dd189f3ac83f25264c12f10954ec00542a33abaa408cba7b45cea5ab8650ba5801
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\AUOMX54H\load_feature-9f951eb7d8d53973c719de211f807d63af81c644e5b9a6ae72661ac408d472f6[1].js
Filesize12KB
MD5009977dcdd3cb41b031746f155f48c22
SHA12d5b2d257bce686e800a5e2d3eabaf1d2ce9ddde
SHA2569f951eb7d8d53973c719de211f807d63af81c644e5b9a6ae72661ac408d472f6
SHA512977e5c8d75b303590adc38f974794aa61f94025805afb47e67d4743628172a778f6e0eb0058512868c020d12b78156fa7d7b94d489c5e50dc5b341991d853d52
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\AUOMX54H\search-form[1].js
Filesize994B
MD56283f65ed3d4e7668bb0e1ebf5ad1dfc
SHA1054f12c03baf780ffb97c0f53af9e199576c0832
SHA2562ec0603712797f796c10361f41601adccc9a28645f9497e78312afffeb80019e
SHA5120dbf4e4ab1d13e5c249a85dd4fe7756d5cbf5752e78fdb2147a425f878ad9e83d88ff4ea958e0f870eb73522d297afdecc1b48cd1544898e9028d0afc4847c67
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\AUOMX54H\section-footer[1].css
Filesize7KB
MD5e6a4b6644e11c856da0c803aa6c3a227
SHA162a1ae59f3b8eeaefaaf94a9dee90ef4a9944065
SHA2562791d8a4eb3bc674e9943fdbfd989272c3c35f9ec45de3ce49139aa8b9c2b131
SHA5129048438f6e227476240b0095897d3f14ff075655843d1d10a5b7fa818d1603e98ea647af08aac0e36ee1ec9ce4157675abf815ab0eb0acc86a38eda45323ab53
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\AUOMX54H\shop_events_listener-61fa9e0a912c675e178777d2b27f6cbd482f8912a6b0aa31fa3515985a8cd626[1].js
Filesize8KB
MD5125c7f6c7e3f3b32ca1a15afbbc6935e
SHA17066f246643259315fb97d3e85f48f4d471ab27e
SHA25661fa9e0a912c675e178777d2b27f6cbd482f8912a6b0aa31fa3515985a8cd626
SHA51215768054fe3d5efead6dd96f73d54f3a935ddc246a8d727960371c543cff923162c7530b8f47c4757f0a1028f9c0961dee5d9d2fa983ae93434640c32f4a3020
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\AUOMX54H\trekkie.storefront.6feac1db1e2c7d84269967dcaefdee0618af51f6.min[1].js
Filesize113KB
MD5f02104a07c07f8276571e9ec720f90c8
SHA1a1c50becc05c474144ee4e217791add403d54b4d
SHA2565602ac47449910a07347810f055946b17f14c11dd090c3874d494b5815feef86
SHA5121375e666c2a9c02accca2927851fa9a1bc45f635d9fb60511fbea09fc1d5aae4281e1b1ebb0edf43b68ea36b3d38c919eb4a4206a954ab10c8597dd887611414
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\R3WSIJ8A\CitrusSpectre1000[1].jpg
Filesize7KB
MD590e3d602ff325b2942e3a6674656c2aa
SHA1cd61350cf737cbb8443d4cf1dcb492512a9a14df
SHA256c3f0ec6ce1720255ab2b46daf6f2e7a091f2a0f45aa5d98d37defc208d186227
SHA512869b83a03fa0f73177377c98def9f47ccf725f2171a36ee186aa2639a726033e4251460e135401d972866bbac1e791b4eba0f6ea629b2b4846cb8b03c04ad64e
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\R3WSIJ8A\FNF-Logo.svg_1[1].png
Filesize85KB
MD50372a588288f75e7e4a0405f07d0d1f3
SHA13cbeb6ebf3d70e95ad39e2c2cf9f27df4af7e1fe
SHA256a709f9d0c3dd10dbb40be03acd2c225d3a14d870a722814196838c576b932b3d
SHA51256222d09361aeb851b7455b4da1ef4be2d08d4d63e0d315c09594d3bf0636bdbee6f952e68b5e08a8d419bcc2468e17ebd46126df4ad6a5606850c87c1b98f18
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\R3WSIJ8A\NENEShirt[1].jpg
Filesize6KB
MD5f13e5cbe4ef00007657933df3ca20f58
SHA1504042f6f7ce603262f3b297ad4fb4140e11f321
SHA2566ef4418d87a439a277af06de3df30bede373090aef27b1a84aaae5ceefc8cfcc
SHA5129ccd6081d9e94685696f257ea998d2acdedda23a2ac22e10bd5d24ee0362a67f1b5f5328df4307e6f30834de483100870cd7142a7cc9f3e319b7e453d2b3e3be
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\R3WSIJ8A\component-list-payment[1].css
Filesize362B
MD511e7704326c3fee6834e3f6d91e44699
SHA18f76127625d00b3e9f572e98cebb6c60d819a8d7
SHA25691c2889dda4223a062da9cc8e6dd536f0e043735d45d769f105ba1b2babe6e07
SHA512c0b4b6e8164b20a93f40ed9df2cb6a50f839f8cf19caf782ca65e9ddd751e62d2855b1bdd265331cb87173879a69ea1216fc8c88dc8ad353c9e93c298a550a50
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\R3WSIJ8A\component-localization-form[1].css
Filesize5KB
MD5f63518441069f0c6a89774540fdef3ba
SHA111530b07be84acc732d759f023883a57e3289966
SHA256e33df9b544518a81f1b0fd153b29b59ecb840477f07891d3ee2ffd03ab3af0c0
SHA512b54df1eee9219b58fc34811cb869f7888285908c2731654dee5e7efd45746df83c2af34dd653b9ada5838704b49dd63681ee72b2beaa905a92adb1706383cfbf
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\R3WSIJ8A\component-menu-drawer[1].css
Filesize4KB
MD5d6ecfc2b01b076f932903260fc4ecb60
SHA1a942ab38c8ff9362fb23256bb96104785be004b9
SHA256e5203b825aa75337304e2247a54175216107cec338267f6ce2a2f5421fc3f7b7
SHA5120befc686e4657d8de59beb4978a47ab4dbbc6fcb0d4cdfdc4bf87dc5e98c89ec1fbdc89af4748cd05573715f53898d19dd06c10ad3208c2130e39ae5e1d0c5e8
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\R3WSIJ8A\component-predictive-search[1].css
Filesize4KB
MD516ce7cfd614ed7ebd7a108870f2642ff
SHA1c6aed9905d490f5b57ab066cb6c2934e123979e2
SHA256c11c16e1ecd76dbb52d6d74e9d76ee5a5b797710dd2e32f69a200a8eb62acf38
SHA5125a031f007194c9d6a88a8c40b159a4d01b06d9f25df7befde0c067844a91d649a18754d86181695bd11322b47005cbbd653387524580f98f0fc973a0bdf5b912
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\R3WSIJ8A\component-search[1].css
Filesize1KB
MD5887663d2fc196a9daa1612c521807255
SHA1d005c7f9ef8f0c69f100e6cade90c69944adf303
SHA25634e906bf74150921f8933da1ec38db65d1140e1134e422bd98c63624b1b85de0
SHA51236c4af8d804c9f79c16ee2c636d26cae868ad3bafc2930774f1d1d02900df6823ce909dbce88f2384a1c622c09d475990be7b74e0feaa3e279f7b26aacdb732d
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\R3WSIJ8A\pubsub[1].js
Filesize474B
MD5793f3f8f1e554f3de4786e5f17098604
SHA1f38ceade5da8042c6c38d9abfe58899e97a827e7
SHA25615248c4d23fde4d3ea51b74578245d03d71799290d21c29f5e0a71733a14bd77
SHA512b4171ecf6a272087a2696d3a16f69f0ed216d99ab976290e0e71fbf4f09773301f3ee8c797eac6d06e1dc929870ca46b8b81db35ec1a5517921ccb277540739e
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\R3WSIJ8A\scripts[1].js
Filesize3KB
MD5e79df6956282b39105d6a17254348819
SHA1ba2d0e8af6501a0227d9be608ac36d3378e44df2
SHA256efab3f8db12d2d082c4958ccbc63b46e5b689c67a8f26498b85b964455437261
SHA5125bfb9bb367d6feafb422fdf7fc0844e29833b0ea1bfd5db612c928ca24d437af01c9f8ac2595bd2a8edca6654f37c23b89924824cd223eef0df5961d2acde59b
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\R3WSIJ8A\shopify-boomerang-1.0.0.min[1].js
Filesize61KB
MD5d6ef635e56e3ab574c7f10e9a5ab49ec
SHA13c384372e7e2d221150a14d60776d7c7feb8ade6
SHA256468e777478117be830b202b97cdf0304bee6f3d9fd4cb1ce70650ed93b7fa4a1
SHA512cefe7b68b1c25d8192f3d3bbc734d89894e23ab0b6bdbe35878255a574c53ffa1de27002b5098abb2defb5d3427b309b0f070e010967ce5cffb1669745a95a5d
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\R3WSIJ8A\storefront-80e528be853eac23af2454534897ca9536b1d3d04aa043b042f34879a3c111c8[1].js
Filesize50KB
MD5db49357f923ec899c9ef90b7def907b8
SHA1480d28152d77eab20f5992ec0ab5af15960ffc91
SHA25680e528be853eac23af2454534897ca9536b1d3d04aa043b042f34879a3c111c8
SHA51288607e0b9619fa59d47b036f0bdf571cd996701774bd7aaf075b63c38590ffd6315551cf361126d4f7e5379a6d635fe3c11283d9560419040254cd217bc544ed
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\S3ZUDIXP\BFShirt[1].jpg
Filesize5KB
MD5c6484a152480c913ed8393936becc6eb
SHA1779f6a6fb994772d207fdb6c6615966f40eb26bf
SHA256757a654bf32890168b7ca787742eced6ba12e03e57da9bfb458cae1913c43d55
SHA51285c683aa86678dfc282258275b36d684cca27c074bc8fbb81c1184bfea80eb7e763a5e83cd7c39ad980e152a0985e321e63c2a75729de6c51d9d7f2cfe6c8c5a
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\S3ZUDIXP\FNFBeachweekendposter[1].jpg
Filesize7KB
MD536652dbd5bd06309915d47f4222e096e
SHA103772df7d2684f5b10ae279124e5d166cd370b6d
SHA256e7191e4576adfc6b947774f4bd92ab4728178fc28ef56e676be7a40927226e5d
SHA512f8b40510f57ecf9044453a7f572ec51aaa25a813c34581ed25312846451dce773f9ab875afd8bbbed96523b224c2f5c4e52b61810cac25d23de5ee3ca2639a01
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\S3ZUDIXP\assistant_n4.bcd3d09dcb631dec5544b8fb7b154ff234a44630[1].woff2
Filesize16KB
MD542dcf33cba850f37c21ae74ab12d35be
SHA1bcd3d09dcb631dec5544b8fb7b154ff234a44630
SHA256d965e0b23881c7da8bd6fdce92c9956d0e3f78aadddb3672da59ded69d1c7ebb
SHA5129c497e7b7ee0f557175c6dd6587e1e69e7477cac66e0fbd7f0eb9c7aad9f839f4f2759690a58f36e789f95e44ac5c0c7893793e847492ca11c6a5d5d8fb72cdf
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\S3ZUDIXP\cart-notification[1].js
Filesize1KB
MD586763f7e2cba8e2d9f44ff1ba12aae46
SHA1d007a19d18e8278ce50d9ad48a55116d8dc14393
SHA25630b8140eba745ef2430714f318c3ef642d3e69b7b425110d1e0ada67b22e01bc
SHA5124cda52d889277fc7333a569332e2c84e5a5c6da835643b27b7d2449ee177409fe46d2c7d09ed838dfe1fa506cdb7342483893ae41e5da093f488b22f8683e2fc
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\S3ZUDIXP\component-card[1].css
Filesize6KB
MD5daa37744b7e8012fce0cd7b6176e33a9
SHA14a6ed7d5f2710c88872332ef40a469b5b0b7d17b
SHA256c428856416db2a8d53cc212b49b750474f88485e2a4ebec5dc58424b2953a797
SHA5126c68a5c6a613aa996f03b3d46ad3d3fc79438baf78c278d90c204be00a86487d9a9fc6486127019a51a1119deb2823da3e7264188386a2b8c20a4f93e0735a59
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\S3ZUDIXP\component-cart-notification[1].css
Filesize2KB
MD5567c1ba2b0da927757c21e4b6cc4eae8
SHA1efa9e463de60ef3c7cf6219116a513f98a9d40a0
SHA256150f84f848c9a865fe5a97a5efd445fce2ddaf23b2e57fd7e8607b42196b1fbb
SHA5123f4b278a9aee340c5d57e494ac6e7bb3f2751d2c41e15b60d3b7e69e029f4dd0a8c93ad9d9ca39c13853d2b4098938b1fcc7e2ad8127e5ebb43bfde192bbd2a7
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\S3ZUDIXP\component-image-with-text[1].css
Filesize8KB
MD5859911c248289eed13b6d85396127ec0
SHA1c55ac62b59f91ba49f5cd8cc0bc250b4ab7f6eae
SHA2568094f884723cc32ffc4eca4f26161c60835c9ebf13c9c00ead97f757bb9ccf60
SHA512ca10d393f9efc3c205ffef50fcb4122b925d98dd2baa318fc60579b66e8c75b5828f397fb836f0e417c4bd7ceddfef016a65ab6db09ef8970e6fa033f22a69ad
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\S3ZUDIXP\component-loading-overlay[1].css
Filesize1KB
MD53aadea54adfae354aa809115405d96bd
SHA1261913498a8349271af1fc3790f425dc9d76e061
SHA256f1005ff27b59dbbefde302e177738a1139c3447b047f23e1eb83e1a936dc84cf
SHA51288c1deb84be182cb9dcc2e8f07bd4519131835071961998324082f87a8b5460200b8f4905e66f9a0e01adbd7e2485290c052805c7e2c403b26b5d32a3a2f905e
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\S3ZUDIXP\component-slider[1].css
Filesize7KB
MD531f93997418af43fe005d20b493b23db
SHA1f14def3b458679d3cb3078fc0400791e3eb9cc20
SHA2561721e516e8b8f60a09bd5e93c1bd3ed373b4bc23ffa6ee8858e2fe57db47a1c2
SHA51210e9f80aecd8712c66752a75b9b29256a909ce20a91ff2d9e2a951ed8395f7fc8cc941a6a96d75a79f867f150316a64baa97a38a72f4012b64510d55369fc00d
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\S3ZUDIXP\constants[1].js
Filesize194B
MD5e7acdcc204d500948514ea395e3be37e
SHA1323335a005f128d4cee31cbb6c3081121d041a8f
SHA256a8f79a2ce906213383865aa21dcc77c8c1f229da1c738ef03c4fa037df22c5e1
SHA5123a9cc825f67072ac0951e240b94f1c587baa793d42c71f758e9dd3503804e19deb89730ff9907ecd1cb7fdb739c5f68dcbba57808f67396c46f42683806b6687
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\S3ZUDIXP\global[1].js
Filesize29KB
MD569caeb63931568e7bd1fdb753a919ef5
SHA1d24d2e286062d5d23a402db72e92908b7db5e04d
SHA2563ce315a06778c5d04bae0c161add61e4d370dda8543eb839ecec541284e39c79
SHA512988ddd8e28cb1645ce0e869ba7f552f8c79fe41167eb4c5ed93ffb9112baf2638d08e0bf6da84b548e066f6fc32b34ac32606f3efb51c67dafca002a3be74966
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\S3ZUDIXP\template-collection[1].css
Filesize1KB
MD58ccef08ddf5531a9f6a690fb30782b14
SHA19f2b3d2be976cb218534c430dba5006264835c3c
SHA256a84e48461685c0b3be29a4e3b1de93698e6986c96defe631a9193f8ace63b2c3
SHA51269b9ce6f030786f7b2bf5d613c72c2c5db0ea98b5571ba8fd51ee3ccef200c3bd7b0df6810061aae7fc7ee2893317c1fb9058a6894e9848e04a9ade6b5fbb40b
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\MPOMFV3J.cookie
Filesize1KB
MD5faa8daf22511b0e1fca384d504f843d0
SHA1ff8d6d9d5e874a8c3c2f074dae988d41e929162c
SHA256723e5b7184ac010941f97aea7108a79130025d7e73afa51b5222646d79acf8f2
SHA512a4fbefa63367cb6aba7bc456651a06a8e94881c2ac9f055a3850c1574a885f860fa3d16b735686eaa98fbff9c777174da3b7f37405fe66a4c04897797c15271b
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751
Filesize717B
MD5822467b728b7a66b081c91795373789a
SHA1d8f2f02e1eef62485a9feffd59ce837511749865
SHA256af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9
SHA512bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\1B1495DD322A24490E2BF2FAABAE1C61
Filesize299B
MD55ae8478af8dd6eec7ad4edf162dd3df1
SHA155670b9fd39da59a9d7d0bb0aecb52324cbacc5a
SHA256fe42ac92eae3b2850370b73c3691ccf394c23ab6133de39f1697a6ebac4bedca
SHA512a5ed33ecec5eecf5437c14eba7c65c84b6f8b08a42df7f18c8123ee37f6743b0cf8116f4359efa82338b244b28938a6e0c8895fcd7f7563bf5777b7d8ee86296
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751
Filesize192B
MD52b18a457e158c386cfef6559290be4a7
SHA1b400e7308c204d83ab25e34ab0d76748ef8dda77
SHA2562c85d49618a5ef74b43e2a767cdf8be90c0df3b71d989875632bd313ac50c378
SHA512aba230ddc986e6a7c35ed0fc825f61b4b484db46ef6e17cf3f391e75247d24cb305aef948e14a23c22be2ede9ca98be505a6ec633a3ecf1bd4e0ca95d07f51ae
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\1B1495DD322A24490E2BF2FAABAE1C61
Filesize192B
MD5c8cde15f90ef4b7eb9cc0bbecded0357
SHA1053fcffe20300d1a089462cb467e04479f005921
SHA25675871e87502c612d8a3a8bcf63dbcbb67dc9a96e9da00a5e27083e6c7835671e
SHA51232513701ce9e4c821b3b54c66b090d1c0bc802d3e02459e27da1640a9ba24d1803cd8123b4d8212279756aa444b184ee828cfca07e8bf09d78900e6a9055cd5a