Skip to content

Commit

Permalink
Add msedge_elf.dll (#83)
Browse files Browse the repository at this point in the history
Signed-off-by: Still Hsu <[email protected]>
  • Loading branch information
Still34 authored Jul 10, 2024
1 parent 6fd3b2a commit 81108a5
Showing 1 changed file with 23 additions and 0 deletions.
23 changes: 23 additions & 0 deletions yml/microsoft/built-in/msedge_elf.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
---
Name: msedge_elf.dll
Author: Still Hsu
Created: 2024-07-10
Vendor: Microsoft
ExpectedLocations:
- '%PROGRAMFILES%\Microsoft\Edge\Application\%VERSION%'
- '%PROGRAMFILES%\Microsoft\EdgeCore\%VERSION%'
- '%PROGRAMFILES%\Microsoft\EdgeWebView\%VERSION%'
VulnerableExecutables:
- Path: '%PROGRAMFILES%\Microsoft\Edge\Application\%VERSION%'
Type: Sideloading
ExpectedSignatureInformation:
- Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Issuer: CN=Microsoft Code Signing PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Type: Authenticode
SHA256:
- 7914d38736f3ce4f89432e15816711fffdfd9002fa50ce7205c1176af9142ab4
Resources:
- https://www.sentinelone.com/labs/chinese-entanglement-dll-hijacking-in-the-asian-gambling-sector/
Acknowledgements:
- Name: Still Hsu
Twitter: '@AzakaSekai_'

0 comments on commit 81108a5

Please sign in to comment.