Analysis

  • max time kernel
    629s
  • max time network
    621s
  • platform
    windows10-1703_x64
  • resource
    win10-20240611-en
  • resource tags

    arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system
  • submitted
    28/07/2024, 10:51

General

  • Target
    https://github.com/mustleek/Silviozas-Premium-Proxy-V3.85-CRACKED
  • Sample240728-mx762sshkm
Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 6 IoCs
  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: MapViewOfSection 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Windows\system32\LaunchWinApp.exe
    "C:\Windows\system32\LaunchWinApp.exe" "https://github.com/mustleek/Silviozas-Premium-Proxy-V3.85-CRACKED"
    1⤵
      PID:2356
    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
      1⤵
      • Drops file in Windows directory
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:4948
    • C:\Windows\system32\browser_broker.exe
      C:\Windows\system32\browser_broker.exe -Embedding
      1⤵
      • Modifies Internet Explorer settings
      PID:1224
    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
      1⤵
      • Modifies registry class
      • Suspicious behavior: MapViewOfSection
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:5108
    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
      1⤵
      • Drops file in Windows directory
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of SetWindowsHookEx
      PID:4784
    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
      1⤵
      • Drops file in Windows directory
      • Modifies registry class
      PID:5028
    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
      1⤵
      • Drops file in Windows directory
      • Modifies registry class
      PID:3420
    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:1144
    • C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
      "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
      1⤵
      • Drops file in Windows directory
      • Modifies registry class
      PID:4260

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          edgecompatviewlist[1].xml

          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\ZVQ9VIUB\edgecompatviewlist[1].xml
          • Size 74KB
          • SHA256 853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1
          • MD5 SHA1 SHA512 SSDEEP

          suggestions[1].en-US

          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\GUS57FNZ\suggestions[1].en-US
          • Size 17KB
          • SHA256 c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad
          • MD5 SHA1 SHA512 SSDEEP

          app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-d8f40351c6bb[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-d8f40351c6bb[1].js
          • Size 8KB
          • SHA256 43a3eac5881a4d9b2ef070517c54c072cc7e6d25a35f2d47164837fae6865a57
          • MD5 SHA1 SHA512 SSDEEP

          environment-cf5295268226[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\environment-cf5295268226[1].js
          • Size 13KB
          • SHA256 325baba85d930f498e3e4e3092c7b1702d5d08bb5f15694b185bd2dd278e25fa
          • MD5 SHA1 SHA512 SSDEEP

          github-elements-f4ec49d0b0e0[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\github-elements-f4ec49d0b0e0[1].js
          • Size 36KB
          • SHA256 bf809c81f461de3d3ae612de908815f2fcc9395fff63e315eb6495f5481a8be9
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_details-d-ed9a97-841122a1e9d4[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_details-d-ed9a97-841122a1e9d4[1].js
          • Size 17KB
          • SHA256 21c5e70f201ea5ebcaff6f1244e6a7fbfca84d1878cd41d4400696bbbe09af5a
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_clipboard-copy-element_-782ca5-54763cd55b96[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_clipboard-copy-element_-782ca5-54763cd55b96[1].js
          • Size 8KB
          • SHA256 10e085fffc04da9cbf0a46c8a6e120d34947c4ed859f05e26cb0abaae312e094
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-15cdfa-9117dc700fdf[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-15cdfa-9117dc700fdf[1].js
          • Size 132KB
          • SHA256 366a489a5c67a921e192cc9ae37bb97c27751df1e90f7a42b24673c487b66c2e
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-2355048ff048[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-2355048ff048[1].js
          • Size 18KB
          • SHA256 936cc4f56aef6760208636c671f028f76a6a896b1a113df7f64b4fe10ac9cbfc
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-af795d-6b8acebb2278[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-af795d-6b8acebb2278[1].js
          • Size 25KB
          • SHA256 d6e059540c8e0d2c5ce758814b414ffeececa003523b3f24fc3dc973afc0107e
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_github_selector-observer_dist_index_esm_js-f690fd9ae3d5[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\vendors-node_modules_github_selector-observer_dist_index_esm_js-f690fd9ae3d5[1].js
          • Size 9KB
          • SHA256 01f9a0ec0bb24312ae0395b6aa238f8d910dc35c08ef5a25a1e9cd8feac83c32
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_github_text-expander-element_dist_index_js-cd48220d74d5[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\vendors-node_modules_github_text-expander-element_dist_index_js-cd48220d74d5[1].js
          • Size 14KB
          • SHA256 d9cdb2e9f9c648237f22c43f8f12e85d8944c75ab325352059c3e53516635167
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-f093dd60bd4e[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-f093dd60bd4e[1].js
          • Size 8KB
          • SHA256 ef5e84ce63cd73038f83714c055ca03488a229f8489d8f97c29be710070f53d7
          • MD5 SHA1 SHA512 SSDEEP

          Silviozas-Premium-Proxy-V3[1].htm

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\E5GC542D\Silviozas-Premium-Proxy-V3[1].htm
          • Size 285KB
          • SHA256 f9c543cba43c7e5cdb841dec698f4d59a35feb646cd6983d089b572cba063bae
          • MD5 SHA1 SHA512 SSDEEP

          element-registry-c50abd212280[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\E5GC542D\element-registry-c50abd212280[1].js
          • Size 46KB
          • SHA256 5a9c29672a37327dbf895c55f8a457316f19e76fad19d8fa1220d5e16f754f87
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_stack-68835d-a18220f1db8d[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\E5GC542D\vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_stack-68835d-a18220f1db8d[1].js
          • Size 22KB
          • SHA256 f4ceffa8ba23288e7d15bdde1bb227559443380c041d0febf6bcd525946bec41
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_hydro-analytics-client_-7901e7-4b84c23ea573[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\E5GC542D\vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_hydro-analytics-client_-7901e7-4b84c23ea573[1].js
          • Size 15KB
          • SHA256 8fcfc110252d25244107b3cce12be4181bd2b76abfbf58e3392465ffb093003d
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_morphdom_dist_morphdom-e-7c534c-f8a5485c982a[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\E5GC542D\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_morphdom_dist_morphdom-e-7c534c-f8a5485c982a[1].js
          • Size 5KB
          • SHA256 a38e79c76a05e2473cefde9829cb125563e2bb06965aa3d0a41b314816bd1097
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\E5GC542D\vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76[1].js
          • Size 75KB
          • SHA256 09620d3f9286d39a8eee8f036655e3555fab6c6b6ea0abd84a466aff8ae3814f
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_lit-html_lit-html_js-ce7225a304c5[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\E5GC542D\vendors-node_modules_lit-html_lit-html_js-ce7225a304c5[1].js
          • Size 15KB
          • SHA256 c823056c4e37d95cdee809f535000bb37b9c8d956ab0410c98a6f4a8fab4f47f
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_github_hotkey-1a1d91-fa9f29a8514b[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\E5GC542D\vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_github_hotkey-1a1d91-fa9f29a8514b[1].js
          • Size 12KB
          • SHA256 05c8f1a4059c21735d401df0d102a50aba011941b6158e5b52d4773f1b829d79
          • MD5 SHA1 SHA512 SSDEEP

          global-0c67cda2fd21[1].css

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\P52NA92I\global-0c67cda2fd21[1].css
          • Size 285KB
          • SHA256 6a882f73cfe04087d4d95a887a8eb83973dbfba824c5f9d9039d3048b478b9a9
          • MD5 SHA1 SHA512 SSDEEP

          light-efd2f2257c96[1].css

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\P52NA92I\light-efd2f2257c96[1].css
          • Size 48KB
          • SHA256 8aabc55d211fc93acb563c9cf30732577212a998196f73b067f9795c8d1ef72b
          • MD5 SHA1 SHA512 SSDEEP

          primer-primitives-8500c2c7ce5f[1].css

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\P52NA92I\primer-primitives-8500c2c7ce5f[1].css
          • Size 8KB
          • SHA256 b08c9718118f5b814e632ac3dc0d8e009e5dc2913df183f0ed322e6817e997df
          • MD5 SHA1 SHA512 SSDEEP

          code-5137b44b5cd6[1].css

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\code-5137b44b5cd6[1].css
          • Size 31KB
          • SHA256 1c12718fd77f04fb243b0cd6567739020758e2cf96043b804e34f20b1430a08f
          • MD5 SHA1 SHA512 SSDEEP

          dark-6b1e37da2254[1].css

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\dark-6b1e37da2254[1].css
          • Size 48KB
          • SHA256 d6bc29d6a4e33c7f4da1d4b8060cce6dedf384d7334b71661c277e985ef8c156
          • MD5 SHA1 SHA512 SSDEEP

          github-32045932c5c6[1].css

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\github-32045932c5c6[1].css
          • Size 124KB
          • SHA256 565086f9773367088068258977b21fb57d8f84b38c19796b10dd25db00e5c191
          • MD5 SHA1 SHA512 SSDEEP

          primer-38e58d71ea15[1].css

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\primer-38e58d71ea15[1].css
          • Size 333KB
          • SHA256 5be84dff60d0b63e2cc4d21ba3742d1d22457187fac848569c15300b1eb412c6
          • MD5 SHA1 SHA512 SSDEEP

          repository-a7f555d78ff9[1].css

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\repository-a7f555d78ff9[1].css
          • Size 29KB
          • SHA256 52440dfb28add980cbe1a0281f173b8c557bd64feb90406c2d057e98340bc46d
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_dompurify_dist_purify_js-89a69c248502[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\vendors-node_modules_dompurify_dist_purify_js-89a69c248502[1].js
          • Size 20KB
          • SHA256 cfac43b55a6b86258b9d3495eff18f26f598313a14cf76a3dbb1e3e7fd341f00
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_smoothscroll-polyfill_di-75db2e-adf929d695f3[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_smoothscroll-polyfill_di-75db2e-adf929d695f3[1].js
          • Size 13KB
          • SHA256 a9cf8d3f90605df1ede183ce15eb836e9211fbb0014b0c5ea282942fe96866b0
          • MD5 SHA1 SHA512 SSDEEP

          vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2[1].js
          • Size 9KB
          • SHA256 0f2cd40ad364711db1fee03cf9f6ca04fc56f5c3ba497dc476c5879e129d968b
          • MD5 SHA1 SHA512 SSDEEP

          wp-runtime-961af969490a[1].js

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\wp-runtime-961af969490a[1].js
          • Size 50KB
          • SHA256 26b6a59c45f9d4ba24b7032f5f9a8fb204fa86938a15a861ee83bab236ecf8d5
          • MD5 SHA1 SHA512 SSDEEP

          RBCPHCQZ.cookie

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\RBCPHCQZ.cookie
          • Size 169B
          • SHA256 e9ee7a5ad4dc99f871b24b968bb810e559569b160c65f11072eae68099488620
          • MD5 SHA1 SHA512

          A66A8DB907BADC9D16AD67B2FBFFDD5C

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\A66A8DB907BADC9D16AD67B2FBFFDD5C
          • Size 281B
          • SHA256 3ea9baadd3cccd132d5d231fc63284276a13f52ebc9d269bb21c564ae4369ac6
          • MD5 SHA1 SHA512

          B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25
          • Size 1KB
          • SHA256 360b99030ffd8af7bc6fd964aacc04ed4cde909bf08b704144e67e82e537059c
          • MD5 SHA1 SHA512

          D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90
          • Size 979B
          • SHA256 687cff135ad9c4c6a4e979a274e2621549d4d1d3f02199acb364371a76db5615
          • MD5 SHA1 SHA512

          A66A8DB907BADC9D16AD67B2FBFFDD5C

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\A66A8DB907BADC9D16AD67B2FBFFDD5C
          • Size 480B
          • SHA256 dfe84e629dcdb7d8b42c70004c50bf00c7344f072cc017daf5a4826a059d7215
          • MD5 SHA1 SHA512

          B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25
          • Size 482B
          • SHA256 2176d67f83a4257665a41f17842c381dcd903f3b7d33fdcb2991da9d3f961cd0
          • MD5 SHA1 SHA512

          D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

          • Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90
          • Size 480B
          • SHA256 0aec3412db42fe7ec0bf23925c9f7df8fca76519c438b9a498224cceddf86427
          • MD5 SHA1 SHA512

          memory/3420-215-0x0000028713600000-0x0000028713700000-memory.dmp

          memory/4260-240-0x0000020FEAA20000-0x0000020FEAA22000-memory.dmp

          memory/4260-227-0x0000020FD9E00000-0x0000020FD9F00000-memory.dmp

          memory/4260-236-0x0000020FEA440000-0x0000020FEA442000-memory.dmp

          memory/4260-242-0x0000020FEAA40000-0x0000020FEAA42000-memory.dmp

          memory/4260-234-0x0000020FEA380000-0x0000020FEA382000-memory.dmp

          memory/4260-230-0x0000020FEA330000-0x0000020FEA332000-memory.dmp

          memory/4260-228-0x0000020FD9E00000-0x0000020FD9F00000-memory.dmp

          memory/4260-238-0x0000020FEAA00000-0x0000020FEAA02000-memory.dmp

          memory/4948-16-0x000001A804B20000-0x000001A804B30000-memory.dmp

          memory/4948-35-0x000001A801CF0000-0x000001A801CF2000-memory.dmp

          memory/4948-258-0x000001A80CE50000-0x000001A80CE51000-memory.dmp

          memory/4948-259-0x000001A80CE60000-0x000001A80CE61000-memory.dmp

          memory/4948-0-0x000001A804A20000-0x000001A804A30000-memory.dmp