Analysis
- max time kernel
629s - max time network
621s - platform
windows10-1703_x64 - resource
win10-20240611-en - resource tags
arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system - submitted
28/07/2024, 10:51
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com/mustleek/Silviozas-Premium-Proxy-V3.85-CRACKED
Resource
win10-20240611-en
Behavioral task
behavioral2
Sample
https://github.com/mustleek/Silviozas-Premium-Proxy-V3.85-CRACKED
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
https://github.com/mustleek/Silviozas-Premium-Proxy-V3.85-CRACKED
Resource
win11-20240709-en
General
- Target https://github.com/mustleek/Silviozas-Premium-Proxy-V3.85-CRACKED
- Sample240728-mx762sshkm
Malware Config
Signatures
- Drops file in Windows directory 6 IoCs
description ioc Process File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdge.exe File opened for modification C:\Windows\Debug\ESE.TXT MicrosoftEdge.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000\Software\Microsoft\Internet Explorer\Main browser_broker.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000\Software\Microsoft\Internet Explorer\Main MicrosoftEdgeCP.exe - Modifies registry class 64 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:" MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta\generator$MediaWiki MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionHigh = "0" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Cookies\CacheLimit = "1" MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Internet Settings\Cache\Content\CachePrefix MicrosoftEdge.exe Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\History\CachePrefix = "Visited:" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\Main MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3\{A8A88C49-5EB2-4990-A1A2-087602 = 1a3761592352350c7a5f20172f1e1a190e2b017313371312141a152a MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BingPageData MicrosoftEdge.exe Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\ACGPolicyState = "8" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DummyPath\dummySetting = "1" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta\generator$vBulletin 4 MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder\SyncIEFirstTimeFullScan = "1" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-SubSysId = "0" MicrosoftEdge.exe Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Content\CachePrefix MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\VersionLow = "0" MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 5de4683cdce0da01 MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\OnlineHistory MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\trust\Certificates MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3\{AEBA21FA-782A-4A90-978D-B72164 = 1a3761592352350c7a5f20172f1e1a190e2b017313371312141a152a MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\DeviceId = "0" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\JumpListInPrivateBrowsingAllowed = "1" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\PrivacyAdvanced = "0" MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000 MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-DeviceId = "0" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-VersionLow = "0" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionLow = "0" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\Disallowed\CTLs MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\History MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Rating\Next Rating Prompt = 806e24690506db01 MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\Root\CRLs MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\ACGStatus\DynamicCodePolicy = 00000000 MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\AdapterInfo = "vendorId=\"0x10de\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"10.0.15063.0\"hypervisor=\"No Hypervisor (No SLAT)\"" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\Active MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionHigh = "0" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Cookies MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\ACGStatus MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\trust MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-VendorId = "0" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\SharedCookie_MRACMigrationDone = "1" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\MrtCache MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\CA MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\CA\CTLs MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 7edef541dce0da01 MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionLow = "395205405" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\DisallowDefaultBrowserPrompt = "0" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\JumpListFirstRun = "3" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionHigh = "268435456" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modify MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\ACGStatus\DynamicCodePolicy = 05000000 MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate\Certificates MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder\TreeView = "1" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\NextUpdateDate = "429001761" MicrosoftEdge.exe - Suspicious behavior: MapViewOfSection 6 IoCs
pid Process 5108 MicrosoftEdgeCP.exe 5108 MicrosoftEdgeCP.exe 5108 MicrosoftEdgeCP.exe 5108 MicrosoftEdgeCP.exe 5108 MicrosoftEdgeCP.exe 5108 MicrosoftEdgeCP.exe - Suspicious use of AdjustPrivilegeToken 6 IoCs
description pid Process Token: SeDebugPrivilege 4784 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 4784 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 4784 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 4784 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 1144 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 1144 MicrosoftEdgeCP.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4948 MicrosoftEdge.exe 5108 MicrosoftEdgeCP.exe 4784 MicrosoftEdgeCP.exe 5108 MicrosoftEdgeCP.exe - Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 5108 wrote to memory of 4260 5108 MicrosoftEdgeCP.exe 81 PID 5108 wrote to memory of 4260 5108 MicrosoftEdgeCP.exe 81 PID 5108 wrote to memory of 4260 5108 MicrosoftEdgeCP.exe 81 PID 5108 wrote to memory of 4260 5108 MicrosoftEdgeCP.exe 81 PID 5108 wrote to memory of 4260 5108 MicrosoftEdgeCP.exe 81 PID 5108 wrote to memory of 4260 5108 MicrosoftEdgeCP.exe 81
Processes
-
C:\Windows\system32\LaunchWinApp.exe"C:\Windows\system32\LaunchWinApp.exe" "https://github.com/mustleek/Silviozas-Premium-Proxy-V3.85-CRACKED"1⤵PID:2356
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca1⤵
- Drops file in Windows directory
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4948
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵
- Modifies Internet Explorer settings
PID:1224
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:5108
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4784
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
PID:5028
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
PID:3420
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1144
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
PID:4260
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\ZVQ9VIUB\edgecompatviewlist[1].xml
- Size 74KB
- SHA256 853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1
- MD5 d4fc49dc14f63895d997fa4940f24378
- SHA1 3efb1437a7c5e46034147cbbc8db017c69d02c31
- SHA512 cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a
- SSDEEP 768:gL9S+ZZR8+zAmz7B4P/jRLhOzgT6YBNxdvEFd:K9/ZJAA7B2jhT6YTxdvSd
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\GUS57FNZ\suggestions[1].en-US
- Size 17KB
- SHA256 c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad
- MD5 5a34cb996293fde2cb7a4ac89587393a
- SHA1 3c96c993500690d1a77873cd62bc639b3a10653f
- SHA512 e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee
- SSDEEP 384:K4gN8sGygaEKfWYSJUKbO7UckxtBjCdY7mO3D0C5l+piEieDSV126ry1/XSGKwG3:K4gNFXiKfWfJ1Kockxbd7mAt5Mp5ie2F
- MD5 SHA1 SHA512 SSDEEP
app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-d8f40351c6bb[1].js
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-d8f40351c6bb[1].js
- Size 8KB
- SHA256 43a3eac5881a4d9b2ef070517c54c072cc7e6d25a35f2d47164837fae6865a57
- MD5 407ff92ca4fd65e29f7ce09eddb58338
- SHA1 64058be928d79d4c05949580a282fe22c9cf6156
- SHA512 d8f40351c6bbf635d03a4d268caeb9a7f85692e0b672d394b7a270d13b34c8d8d5eb7a8f8e12ceb7359a1a457df5cec3316c8533c5474ee7d00317d5a6aea418
- SSDEEP 192:v7H8cPlteLQ0tSXdB2rQF357oK0NjbY/P1JH+:octtes0tqarQJVoK0taM
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\environment-cf5295268226[1].js
- Size 13KB
- SHA256 325baba85d930f498e3e4e3092c7b1702d5d08bb5f15694b185bd2dd278e25fa
- MD5 48b5c226b648a44eac702b5db3f1ad3b
- SHA1 e7aa971454ea23aa9d07d80a3fcef6e07729f29a
- SHA512 cf52952682264bd0ea29c94496d775c95e957f45fd376da3a4a7bf1532337fe3dc174ec2041d2f89866a75095df79eef81cdcc06a4122faf58a19f16540bace3
- SSDEEP 192:GAM+Q5lteLQ0TSX7nrzljo5ep9BzczheNrwY/Uwn7f7GDEGJYBcNt900:GVjtes0TqDrhsIp9pcleSvwn7faEGkV0
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\github-elements-f4ec49d0b0e0[1].js
- Size 36KB
- SHA256 bf809c81f461de3d3ae612de908815f2fcc9395fff63e315eb6495f5481a8be9
- MD5 b44aae39cd321d8e75ef1b7e7495b79a
- SHA1 b639e3995d360ed707d29cbba320f04e53d0cdb9
- SHA512 f4ec49d0b0e0b45b0cf8251fda33af120f0fdc2cf16aaaa7137a8022afd3c8e3f9344044170511921f01df497e943ff35ac870df3e4b43cc2a020403593c7508
- SSDEEP 768:d6OC9X7e0OzQpzuGt2SF3VHVeQDy/ij2aF9xVeAZDCLSgvwZCV9SGNzFV7xcnMjD:dDC9FOzQfFlHVeQDy5aF9xVwv7SGrcOD
- MD5 SHA1 SHA512 SSDEEP
vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_details-d-ed9a97-841122a1e9d4[1].js
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_details-d-ed9a97-841122a1e9d4[1].js
- Size 17KB
- SHA256 21c5e70f201ea5ebcaff6f1244e6a7fbfca84d1878cd41d4400696bbbe09af5a
- MD5 d50f30bd48bf15a39fb0de84d338b063
- SHA1 c974701a469b2ae91195cc57a42c3157c0210646
- SHA512 841122a1e9d49b8484e68dc82869b7835e54a9d632909ec4f0c386ba843d2eaf20416c75c19c4a250a8cf22de8ef43f1fff6d77d29630132266c6f533c487e2f
- SSDEEP 384:WQN4RiNtBVHb1vFNEG/qpDFCBzeF6Aos3e1sxbc5oblOqPsdgveiG4nTi:WQN4RQHRRvFNEG/kNx3msxb0MlOqUdgA
- MD5 SHA1 SHA512 SSDEEP
vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_clipboard-copy-element_-782ca5-54763cd55b96[1].js
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_clipboard-copy-element_-782ca5-54763cd55b96[1].js
- Size 8KB
- SHA256 10e085fffc04da9cbf0a46c8a6e120d34947c4ed859f05e26cb0abaae312e094
- MD5 80708c39dbd42e80616bc4a61b51c1bb
- SHA1 a87eb08671b07a1c2689a6caca2486727af9ae3e
- SHA512 54763cd55b96117e15652c12e9ca5e8ec71e58eabbd9537a7e6c833ec124199eae23091ef59275513f2cacf055e9ae69d7683474fc31f81ef823578118c462ba
- SSDEEP 192:29GcTXqXHLisogNtQbtWKyjXyKClvK5NswSsPAnbz0/i42QnY:29GwXqXL4gKbcKqiKClzwWbzfZQY
- MD5 SHA1 SHA512 SSDEEP
vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-15cdfa-9117dc700fdf[1].js
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-15cdfa-9117dc700fdf[1].js
- Size 132KB
- SHA256 366a489a5c67a921e192cc9ae37bb97c27751df1e90f7a42b24673c487b66c2e
- MD5 d591d22035a4349c4f72833db76c2fbd
- SHA1 ef274e23c7bce3a2c9006095ab37b6eccdfad85d
- SHA512 9117dc700fdf07705b3c0d412ec9df5a81f888a782b2547a65f452c8b0cd50fc61654ed204a23ad6c27d8bbc9c74dcca4e27a429a5784b0a1c676a932d55ca8b
- SSDEEP 3072:Zl6yk0EM9lPrZs8kh4WmBvtTgODZWYrCXIW3lR412TL:Zl6qEwPraSvtfZWhtlRIs
- MD5 SHA1 SHA512 SSDEEP
vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-2355048ff048[1].js
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-2355048ff048[1].js
- Size 18KB
- SHA256 936cc4f56aef6760208636c671f028f76a6a896b1a113df7f64b4fe10ac9cbfc
- MD5 c6175500bbb3bf8dc98aa0d4229caab6
- SHA1 59fa80835b3a054500c80573c5403dbe3b6c72dc
- SHA512 2355048ff0483d1b53126ffa8506d15da3baf9cac2570b99cf6c1d019b4702231500ec72485e529b4ab8250631e664d080818ec91cf9339770528948489f92a8
- SSDEEP 384:xHPpl2NbQT5mY/tLkOhd5D4Y3k1d+j3wVjQBeoSaUtfMiFyAI9sK8lSDejKRvhh:5POQTn9k4U1d+j3wVjQsoSamMiFyRBHh
- MD5 SHA1 SHA512 SSDEEP
vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-af795d-6b8acebb2278[1].js
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-af795d-6b8acebb2278[1].js
- Size 25KB
- SHA256 d6e059540c8e0d2c5ce758814b414ffeececa003523b3f24fc3dc973afc0107e
- MD5 80e14683f48a20d0dfd6ec5e2a5f9061
- SHA1 6bdc4222ff5868b5299fb0bc76308113d1219e6a
- SHA512 6b8acebb2278d1cb6289f583fb8479f2a77150360b995475317e88c8b698077c47f4cf0a62fc256009a973735c04cd86df29248067749c8b75b287d3576f8a94
- SSDEEP 768:ARngJRw2jP9YJ5Uh8IWkdmEFRBqLdmQgeSLAmXSLDiSRK5H:wngJe2hYJ5Uh8IWkdBFaLPDj4R
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\vendors-node_modules_github_selector-observer_dist_index_esm_js-f690fd9ae3d5[1].js
- Size 9KB
- SHA256 01f9a0ec0bb24312ae0395b6aa238f8d910dc35c08ef5a25a1e9cd8feac83c32
- MD5 e131f8c9b77918aeb94fd82199a423d6
- SHA1 71eaae086cd44a8904f39d27fb5387bb957976f0
- SHA512 f690fd9ae3d5a240e479fea97ac82940f136f3f2e0262cac840345f2b956123117ca94424dc354d90d13f1c0169c24b19526505bb2fad70c8c364899474a9495
- SSDEEP 192:TYtHD8XW+0RC1hKvjV5wb3PRzR63v6R+z5tuBUD+5mnDzc/tWuplJ6U:TiHD8XW9RQKk7RzRIv6R+z5tmUqAklWy
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\vendors-node_modules_github_text-expander-element_dist_index_js-cd48220d74d5[1].js
- Size 14KB
- SHA256 d9cdb2e9f9c648237f22c43f8f12e85d8944c75ab325352059c3e53516635167
- MD5 69f387b852329683c3f4856ccb905f60
- SHA1 a58ffa40abbb4c6f5ef0545c1ffb932c21d73cc1
- SHA512 cd48220d74d52b956312b2c59ec764d2d559e73c51789f9d649e108925f79ae3c910744161904b2840894bfcff64507971d5a19f921e5190a710bda4eceb63e2
- SSDEEP 384:0NU/wKp3nPlY1J9Ff8g/jah1eq4AqFQxf8Ee0:0NU/1FnNoJl/o1efSxfre0
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\0DYPDKHG\vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-f093dd60bd4e[1].js
- Size 8KB
- SHA256 ef5e84ce63cd73038f83714c055ca03488a229f8489d8f97c29be710070f53d7
- MD5 c26bdbf39706ce9921df47d43ec0f886
- SHA1 94ffe1a24e632961c06413f1c75e24fe7b5e1100
- SHA512 f093dd60bd4ecbea092ba277804d575258ac2a1327d88c3a3f33ff4aa26f1cbe0b2fe29866283f6b18f7897981bc3c0d1d4580a5cbe80b6d1d00ca8a68ad09bd
- SSDEEP 192:5+15gJHpjeRxV0Ml1B7myBOdv/dhOYQrFG:5TH9egyBO6rFG
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\E5GC542D\Silviozas-Premium-Proxy-V3[1].htm
- Size 285KB
- SHA256 f9c543cba43c7e5cdb841dec698f4d59a35feb646cd6983d089b572cba063bae
- MD5 53e3b6205a41674bcb2ce624eeebd455
- SHA1 0eca639ae82f6381bf781f39dcd05116e0a8f67a
- SHA512 0c04b1d5bea24a118225eebb6670f9a71fb90b7b6c893af7645f05ad65cc4377169610b866521ff9eea1b7e91bc23158fd0e221a80ddcb182332d83266b747d4
- SSDEEP 6144:FpBmxTRIvSOKMQpf8j7Ley1682rmY459/vZJT3CqbMrhryf65NRPaCieMjAkvCJ+:UTRIvSOKMQpf8j7Ley1682rmY459/vZZ
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\E5GC542D\element-registry-c50abd212280[1].js
- Size 46KB
- SHA256 5a9c29672a37327dbf895c55f8a457316f19e76fad19d8fa1220d5e16f754f87
- MD5 e57d2750193b942b0f5e8e3c2268b014
- SHA1 8f9831b07095a3355a9465c37a6df8ac5c789583
- SHA512 c50abd212280fd4c20c7ba76b78ccc149b3f472b13e2f32c41c9155a6576479982bfa7b6145b0e727dba5f8e5083977d986f89bd05b2008e6f76cb026e082c76
- SSDEEP 768:hdyr2rKqwOXYJOYO0OiOWOTO1JLEmeTNUN+2aKjvkSF5aRK8:hdyr2Q42HYB
- MD5 SHA1 SHA512 SSDEEP
vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_stack-68835d-a18220f1db8d[1].js
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\E5GC542D\vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_stack-68835d-a18220f1db8d[1].js
- Size 22KB
- SHA256 f4ceffa8ba23288e7d15bdde1bb227559443380c041d0febf6bcd525946bec41
- MD5 0cb967b7b9603edacb27a261ba59bb63
- SHA1 ff39f99d51916d3bea1fd5ae853abf93ffe35b2b
- SHA512 a18220f1db8d086f2cae618e9196599eff46935aa7bcbc601276acf10bfa09b700b37122aa00d227e61c1b1257b7304ec064221d8926c330789b2ad3ca0f2824
- SSDEEP 384:W1U6EKy0AmAtIggABtc56J5itRQPqSqEpkLEDidBefnh:WmKVSdi6J5itRQPqnECLnEh
- MD5 SHA1 SHA512 SSDEEP
vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_hydro-analytics-client_-7901e7-4b84c23ea573[1].js
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\E5GC542D\vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_hydro-analytics-client_-7901e7-4b84c23ea573[1].js
- Size 15KB
- SHA256 8fcfc110252d25244107b3cce12be4181bd2b76abfbf58e3392465ffb093003d
- MD5 5567c8f1746f2e828c361e84220d1305
- SHA1 3c038f36ab737689caf12cdc832df1beb7ad782a
- SHA512 4b84c23ea57301420ede79e954cf867d2b8f95ed75d568621028f58304b6fa7987d24e5cd829988426a5fdea611b853cc67e94644f4b23e530725c266c6b74d5
- SSDEEP 384:Znoc4EvziKbkKqArf/Zx+UZq2P3MMxuQXPy:ZnooBbkKqArbZq0PuMPy
- MD5 SHA1 SHA512 SSDEEP
vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_morphdom_dist_morphdom-e-7c534c-f8a5485c982a[1].js
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\E5GC542D\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_morphdom_dist_morphdom-e-7c534c-f8a5485c982a[1].js
- Size 5KB
- SHA256 a38e79c76a05e2473cefde9829cb125563e2bb06965aa3d0a41b314816bd1097
- MD5 e87764e4b54806bd9528e9413f05201a
- SHA1 5d1c284dc8e2d047de24f8380f71ea9989d732bb
- SHA512 f8a5485c982a797682c4138b024f83ea2669b7b7458c2d9eeb2c18526260e2dde0b3bc68d98415f8513e4ce099e46783a9ef8ad08b58929ca66972630953822e
- SSDEEP 96:+eshrxIteecndURGxL/NON5WUK+UzdrkSrvRYSxVE9U+cuUnZ0H0ITZ:+eshrvd6GpNszbaLE6vdnZKTZ
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\E5GC542D\vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76[1].js
- Size 75KB
- SHA256 09620d3f9286d39a8eee8f036655e3555fab6c6b6ea0abd84a466aff8ae3814f
- MD5 bc119e97d7bbac343f62984dc8d4dcfb
- SHA1 b7fe0a56ce370e54bad0aae6d96bf52cc192a03c
- SHA512 858e043fcf7611a217e05ae5a181c4addfa23f21a298036b48430fbaa153a7248777408c1238742e7f6c53cd6bb4a1d6b6f60344048fa3714df464ce44b902e6
- SSDEEP 1536:pypwJDn1NF2m8MXh3H5rWtO/C7lLlafnhr5t6XPrCnbmWyB7A3LsJXqOvW3qEApP:XJDPLaMjgwPc9oo
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\E5GC542D\vendors-node_modules_lit-html_lit-html_js-ce7225a304c5[1].js
- Size 15KB
- SHA256 c823056c4e37d95cdee809f535000bb37b9c8d956ab0410c98a6f4a8fab4f47f
- MD5 b4de96241178473d9f682dea5a92e41b
- SHA1 e274c147c9bcb636b3bf4f9df1acfbada27d8a90
- SHA512 ce7225a304c5935fa3fdab2e736d9738651ed0fa6f4503bb65deaee022bc03c3033170d53adc2c1a77c88904ea14a9603519b87990f04e47885209a53c893056
- SSDEEP 384:1O205atLCX47rjr/FaGxbHj29UzgEqGhikwYzP:1O205WLw4///Fhxbq9UzgE9gkwYzP
- MD5 SHA1 SHA512 SSDEEP
vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_github_hotkey-1a1d91-fa9f29a8514b[1].js
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\E5GC542D\vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_github_hotkey-1a1d91-fa9f29a8514b[1].js
- Size 12KB
- SHA256 05c8f1a4059c21735d401df0d102a50aba011941b6158e5b52d4773f1b829d79
- MD5 3c0abe787f5d954832b6c7e4f53980a8
- SHA1 1f9439165c4fb8e21c008ed0f1e8bfa72b85c33b
- SHA512 fa9f29a8514b6189ec5e5caa134d9b511c65b8643af85652126d52554a1c1d8464bab5400b70d8ec54319d133517bc1e9d974b31e31fcb0e6811b76f0ad7aaca
- SSDEEP 384:904OSqON424FAsm0M3FmRIbtARoT7Lxw4:ComiCWxw4
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\P52NA92I\global-0c67cda2fd21[1].css
- Size 285KB
- SHA256 6a882f73cfe04087d4d95a887a8eb83973dbfba824c5f9d9039d3048b478b9a9
- MD5 1b721257b561bf78477055f86026243e
- SHA1 45e0deb0a042829557e2a2605d1aa6f3361573d5
- SHA512 0c67cda2fd213e5753190ebcebe6b28ebe8fac365d60e9fc560fb000f274e93c4b270949f886da79519fb667bf0967351f4653cb8e1c4353aa1523caf70518e3
- SSDEEP 1536:l0mhg8ZqkolvUZjIen9VqcARMDmI3PNhalnXKbXeoYk4cEJcXa/3LY6WcsR7Vcz4:lf6+PAXKS/3LY6PBkchEm4
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\P52NA92I\light-efd2f2257c96[1].css
- Size 48KB
- SHA256 8aabc55d211fc93acb563c9cf30732577212a998196f73b067f9795c8d1ef72b
- MD5 b8473fdb0f4749de99341662aec850f2
- SHA1 f593c957a26528558217837aead34cf718d27443
- SHA512 efd2f2257c96c12eba6da741c677030ac63c34a925846080ec606e5a974706726479bd5babea6dd0ac7e8e421704263787986fb07a9c384994cf403bf8bc3dee
- SSDEEP 768:p83UycWV9BEI0c/sNBscqtIRkseV9hxgWOdnucjQhriPfC/hFS/jhy9oqnX3MO:HWV9ByeV9hR
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\P52NA92I\primer-primitives-8500c2c7ce5f[1].css
- Size 8KB
- SHA256 b08c9718118f5b814e632ac3dc0d8e009e5dc2913df183f0ed322e6817e997df
- MD5 e9c08b9ba681ad6606bd18f264e73ef6
- SHA1 04d1e96739d82e07587f10bd2d953c8e70b93d9d
- SHA512 8500c2c7ce5fdad5fa01aa92156964108335c704a127ce290d201395009914c814ac6e08a467e45d1ca0fc75b2269b7f09a6d437939d91c9513c659a80cf472e
- SSDEEP 192:beAaDT1h375UaEZIWWunHlmqEPHonHnqn3OH3aml6em:SrDT1hQZgPmH43OH3aml6em
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\code-5137b44b5cd6[1].css
- Size 31KB
- SHA256 1c12718fd77f04fb243b0cd6567739020758e2cf96043b804e34f20b1430a08f
- MD5 9992cd0dee740c0929847c9ae96212f7
- SHA1 a90774a918cfe70761a1390a2db14043d796f75d
- SHA512 5137b44b5cd6fbba65b21cfb0abc5f3180117fe517245c3099f7d7b96cd005e86640d9b40b9220527c43cccd6c10642e802060fd03d2357da5bd747b1912b343
- SSDEEP 768:3zuitDWY8trQxCXJ+27eY+INuqfV/OjA+IZtaqDYh5F:63227eYtxOjA+IzE5F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\dark-6b1e37da2254[1].css
- Size 48KB
- SHA256 d6bc29d6a4e33c7f4da1d4b8060cce6dedf384d7334b71661c277e985ef8c156
- MD5 96ba1deb375c1c66bb092fa0a1765be1
- SHA1 03f188ec52d09882b8403ed57d7aa73a224ddd62
- SHA512 6b1e37da22544d5626c6f78691a8d8f723c49c95a782f5195f4b00b0e1b9d4408402c25d5915e097ef31273c3c8d06d81d1ba1bb08e12677941b8b1f24d92848
- SSDEEP 768:I26BIEsMZsM0maJnKb2HSG+8Ek5PF+QfoATta4B/h/V4guOkogLlQ3Aamxrj:jEsMZnH8Ek5f4
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\github-32045932c5c6[1].css
- Size 124KB
- SHA256 565086f9773367088068258977b21fb57d8f84b38c19796b10dd25db00e5c191
- MD5 ce7d10e26f7ac583f689bb2e083375fc
- SHA1 fcfa5a29f473c4202f190cf4a1032373605519e6
- SHA512 32045932c5c6788392dcb3f50a0dddf033cde86c773fafe3d571c855e5d53fbab54bf4efe4935deb41fcc31653bae52e5b01500f1812dd0ad09f490f87e077e9
- SSDEEP 1536:E46Hy3ZNbJpVBJyj/x3VSQ6XgsyLVNPSXKlXXUsoWQWfUcOeupigMtcONv+aZ:b3ZH2LXU0Opihtcq
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\primer-38e58d71ea15[1].css
- Size 333KB
- SHA256 5be84dff60d0b63e2cc4d21ba3742d1d22457187fac848569c15300b1eb412c6
- MD5 69a61dc716e08413491c664cd61c2a93
- SHA1 9d73d2222720623c57b11eaa90e296b743cb3058
- SHA512 38e58d71ea150bb7d19051dd0d47c3342c4b608f20111e501c1e572e234f9584828bf87dd9ea7c25fc4a30b58a08f77780163b54cd7d34de2665657533405075
- SSDEEP 6144:g/Igmld5czYu1wX00d4yXZKK0b33yO/7OLHAp6c5b3CSQX+UfecXYrZJWG:g/IgmH5czYu1wX00d4yXZKK0b33yO8fS
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\repository-a7f555d78ff9[1].css
- Size 29KB
- SHA256 52440dfb28add980cbe1a0281f173b8c557bd64feb90406c2d057e98340bc46d
- MD5 ba196d4c1e022d5cab19e2235db82d92
- SHA1 67dd8cc44c4162482ae7d7670a25a65326e037ff
- SHA512 a7f555d78ff9b024e16e85c155bad21d385ba1cafc68ef058baaa1e350aa4e56790991818e6e8fd93875e9bda66bef77e3289349bfb34c00c93ff945afa00251
- SSDEEP 768:1s+asoqGmFPSlucGGICsFHHbNxWalrCIauW:1SsTSOHeal/W
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\vendors-node_modules_dompurify_dist_purify_js-89a69c248502[1].js
- Size 20KB
- SHA256 cfac43b55a6b86258b9d3495eff18f26f598313a14cf76a3dbb1e3e7fd341f00
- MD5 36f04458790e19bb99bd77a1cdc16295
- SHA1 8f25cd75135fec8c088728f53d39dcc21d375fdf
- SHA512 89a69c2485029e3393d81637b2eeac776d0765835e6ffcdddb1394f4421c5236b5cfee873568736d8a233b6c9bafe6ea828d2b718133aae8f0d22f220165fb9e
- SSDEEP 384:3hAQbEJSm6v87lMOUr5kF0XB3GU8FYpVu8y6ID7hTiY4qWliwoFOxS7WxK:+czPv8xMO+5VXBWU8FYIi1riwMH
- MD5 SHA1 SHA512 SSDEEP
vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_smoothscroll-polyfill_di-75db2e-adf929d695f3[1].js
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_smoothscroll-polyfill_di-75db2e-adf929d695f3[1].js
- Size 13KB
- SHA256 a9cf8d3f90605df1ede183ce15eb836e9211fbb0014b0c5ea282942fe96866b0
- MD5 39c9822240af7e9d31ad72836ae90bf4
- SHA1 809afb6b10419a3429466a2635da80761b91106d
- SHA512 adf929d695f38240a78c0dfac2b5a59a1bd8d78aa1f3b122daa8b3eff311ba441f29d11574934d7bce7aa25bc04b15807f53f9e47aeed1ed865cfe26d3a9ac92
- SSDEEP 192:n4vJyPLWNYtcUv/1lRbLJP4nA7ecQ/bcBZezoUDGxzwIvqf2sB06:4v019PkJHu+R
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2[1].js
- Size 9KB
- SHA256 0f2cd40ad364711db1fee03cf9f6ca04fc56f5c3ba497dc476c5879e129d968b
- MD5 2eb9961e08f81bdca617ddb67c2fb708
- SHA1 15cb6d7ffe93324b38bb62bcc4ff14d1a57f94bb
- SHA512 56729c905fe263a6b7978bc67c09b8dab69592e21aa9addba78866790bdb2dbd85e41e6a6663d511e73a8edeb75933b549b3c393a465748790a6fd50b337cee9
- SSDEEP 192:FXk3OeIPiCQ26YqdjhdFPWB/r0DXPfZU5qoP94G69tPw3xMsJW3re6K:F0ZINQ26Yqdjhdk99MPEGskK
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\SDUPT9O3\wp-runtime-961af969490a[1].js
- Size 50KB
- SHA256 26b6a59c45f9d4ba24b7032f5f9a8fb204fa86938a15a861ee83bab236ecf8d5
- MD5 b0d9787fe788bd3e2b7de0a88e55a28c
- SHA1 3ec632f95485b8e18bbf4a01c06943a57b163711
- SHA512 961af969490a0b8bfdf831bda2f35b703b90d5205f90bb8074953e9515e5995fcb1bd2409ed60ccc7845b76c558e29677d7d00ff41d49762ae3f4dad5b89b5d7
- SSDEEP 768:0LXy9/mnSdyC0bkMnYXF5LD5o8Uvtq5JR6Z099Z+gM60pB83fYR208nvH://QSdyC0rq6kJR6Zg9Z+gM6IBGQn8nvH
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cookies\RBCPHCQZ.cookie
- Size 169B
- SHA256 e9ee7a5ad4dc99f871b24b968bb810e559569b160c65f11072eae68099488620
- MD5 cea5d248604bfe608cea1bf72e41bb7e
- SHA1 d018d651bc9cb433babebe4869e609c9009b1cce
- SHA512 9368aa5df536115ccf2037362dc2c68cc4e20a21871bdb7eb60f2cd52d9925a32f3d398b5582a52364897aaa98ada622eae00640b0f11da9f13b56527e889bb6
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\A66A8DB907BADC9D16AD67B2FBFFDD5C
- Size 281B
- SHA256 3ea9baadd3cccd132d5d231fc63284276a13f52ebc9d269bb21c564ae4369ac6
- MD5 15845d3ac46769451e20c9ece0c80f62
- SHA1 e57e781803d6b67a04c5d3df9360b424de669660
- SHA512 4b3c4499def3fc59d2be5bc2639cfb0a39745f87792908573ab7567383e11c49df5f6f40f7ecb75267ddf270e6b37a0d0a09b0237fe4c96df89fdb0ec80c747f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25
- Size 1KB
- SHA256 360b99030ffd8af7bc6fd964aacc04ed4cde909bf08b704144e67e82e537059c
- MD5 488d9ad1a622611f96689bf476726117
- SHA1 57202cf87e62306bdb924f1633691d05f04a8e60
- SHA512 790767504a01076f323efc2b425cf4b8687bcb19b8f1f2958a92130b66532f47db50a01c7e30ddfb7d83b07ec5ad466f59785597a9347cd75803158de79f96c8
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90
- Size 979B
- SHA256 687cff135ad9c4c6a4e979a274e2621549d4d1d3f02199acb364371a76db5615
- MD5 9df344ad5e61886ff5430d939dd1186d
- SHA1 0e9bf1292d88a59565255d5f3641694ed4966a56
- SHA512 0359969b141607aeffc4774ad67e5b60216f55f19cea42a66a380dc303688da782316529b460f2a0cdccbe9a801312f239770d7f5b40b1c0089913ad91989d72
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\A66A8DB907BADC9D16AD67B2FBFFDD5C
- Size 480B
- SHA256 dfe84e629dcdb7d8b42c70004c50bf00c7344f072cc017daf5a4826a059d7215
- MD5 c8b4150213eb8617d7b37e4faf7aa426
- SHA1 bf8fd3c5d674b2096954e709e0ef8cac607e65de
- SHA512 7aa0386684733a5d672edad9cd1a64b0ecdd01ee21556a7730726cd5df238a13cce47eba2bfa74cb05a5cb5a99f441b93dfca70af8e79c2b37ecfe510dbf990f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25
- Size 482B
- SHA256 2176d67f83a4257665a41f17842c381dcd903f3b7d33fdcb2991da9d3f961cd0
- MD5 842d4004ce74503302a002e4cde92b6b
- SHA1 447245f8e84f8287b56e99297bd48394a8bb686f
- SHA512 338516bd0a8d4470a4a8d71c63bb88baf5f81a1a7663902fc7b61df51c33270e39a3d2ec8ca866bbd53f237af07cb3e6f8178ea1c38f55294a23b7e1228418f5
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90
- Size 480B
- SHA256 0aec3412db42fe7ec0bf23925c9f7df8fca76519c438b9a498224cceddf86427
- MD5 25fef1b340f9d141045ff14cf367fe8f
- SHA1 ccec5af87cb5e6d9c0514c8a6fe60129bf782c41
- SHA512 7970ee2ed6a0d262c8b0d22eeff78a4ff348c753f897ebf23b4e9ae304b084af0a82a13eb7b26972b859a7ad58b0a9022b034182d755abd6dd727dd29d18afac
- MD5 SHA1 SHA512