bc880a89e4e706de60caf9f90d0fb2a1a6b1c0d74ee471422bd877c9fa5bd03b

Resubmissions

24/04/2026, 15:24

24/04/2026, 15:23

user interaction
yes
max time kernel
62s
max time network
63s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/04/2026, 15:24

Target
msedge.exe
Size 1.6MB
Sample260424-stblkaew2k
SHA256 bc880a89e4e706de60caf9f90d0fb2a1a6b1c0d74ee471422bd877c9fa5bd03b
MD5 89abae4065c59689dac344a7281a3412
SHA1 78ba909b8f618f3c57cf5952441cfb7c526d09a2
SHA512 ef7cb626aeb6520a06fcd4a09d65d895e79c95000df5b503206ff834e9e61549dc598b5324d5e012a945c18041710fb71ae0b8185cda2cab54dd2330955e4f34
SSDEEP 24576:dIzMnKsVG/ug4O9jNUAhfmG2MLZ9/ZAh0lhSMXlAPn+M1mL19:d7KwYRHf32mrLwtmL
TLSH
T125858D52E7CEC299C92D94BC9A12D703E33470022F1587CF6BAA1D559E17EE05EBEB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
436	msedge.exe
436	msedge.exe

C:\Users\Admin\AppData\Local\Temp\msedge.exe
"C:\Users\Admin\AppData\Local\Temp\msedge.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:436

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:3240

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
1⤵
PID:1272

SearchHoverUnifiedTileModelCache.dat

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
Size 22KB
SHA256 9996ae9e60a00489fd1ce2cf8a78cc2084e79631777c76ef84e40250141a1a44
MD5 cabd1b6884a16b55ad53f849c04341a8
SHA1 d38457f315dd2899883048bb0a5f79fc93835a05
SHA512 8fc7468b40673038e9bd5ffe9905b7cf6f93c98ed68254ebcef7780aa24599e1cabeed8e96c0db2bfc2d297fd88f0e08a16cac606b58a94f43e4cd06560bea5a
SSDEEP 384:TJWJRVca12krtuJVpmXmlJVjeQ8RJoSHghYjUhUWK5PEm5k+GDa500VGYAV7cg3A:l+RVcWrml8RJdHg2jUhUn1k+GDa500Vr
TLSH
T1ECA25C743AF41719F3F69F759AF1A95A643AB8669C00DB4D0122028D0937D92CEB0F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchHoverUnifiedTileModelCache.dat

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
Size 22KB
SHA256 df2f819514bcbeddddac89d17cf015adcd2e81d5a5f078411d04a910b845576a
MD5 ba1ee3829d278959a3e31678e4fd6e31
SHA1 3b586669754beb72677e37232c33662b9d8c7d60
SHA512 0cce0ba01d12e0155e84ec065d4fe76849c2fd29a3690458fef33b1006e4afa8a71977b299e849dff5f7d4ad90586bf6e69e7a8e002a5eca28e37d1ed6df3f53
SSDEEP 384:mJWJRVca12krtuJVpmXmlJVjeQ8RJogHghYjUhUWK5PEm5k+GDa500VGYAV7cg3A:O+RVcWrml8RJzHg2jUhUn1k+GDa500Vr
TLSH
T13AA25C743AF41719F3F69F759AF1A95A643AB8669C00DB4D0122028D0977D92CEB0F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/436-0-0x0000022A13AF0000-0x0000022A13AFC000-memory.dmp

Download