61c9246845b90980e2665f5e0f8e9cdc99e4e9f382caba7bab0c36be500736b2

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/07/2026, 16:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dynamic-island-windows.exe
Size 8.7MB
Sample260727-t39emacb23
SHA256 61c9246845b90980e2665f5e0f8e9cdc99e4e9f382caba7bab0c36be500736b2
MD5 9936404e834b0f53227f966f2cf7efce
SHA1 516bd6554c137c6632158ad05347cf45b4ce36a9
SHA512 1ad34be02f146f9efa057b1fd4e57d0aa1496f3d6cc24f449a9efd76c4af2271c378e705356ad1086369584445af8682adf9e5f20047a70acb3f09ac1b9fdd1a
SSDEEP 196608:F58kTrC3QnBi8feaq9bjpv0DZKIs2dG86S:wkTrC3QnBi8feaq9bjB6g8
TLSH
T15896D6157B5F99A8D18BC47482478A62492030DB0B39B9FF4494963C2FBEBF46F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	dynamic-island-windows.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 61 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-gl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-sl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1645479197\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-de-1996.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-hr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-ka.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_634386121\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-de-ch-1901.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-gu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-mr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-af.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1645479197\crl-set	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-el.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-hi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-kn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-nb.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-tk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-sv.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-sq.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_634386121\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-cs.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-da.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-la.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-ml.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-bn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-pt.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-be.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-hu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-lv.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-und-ethi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-cy.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-mul-ethi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-uk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1645479197\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-te.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-en-gb.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-et.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-fr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-hy.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-or.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-ta.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-de-1901.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-eu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-as.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-es.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_634386121\protocols.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-it.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-lt.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-nl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-sk.hyb	msedgewebview2.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5520	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296438488011444"	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5144	msedgewebview2.exe
5144	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
5036	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	652	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	652	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4536	dynamic-island-windows.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 4536 wrote to memory of 5036	4536	dynamic-island-windows.exe	86
PID 5036 wrote to memory of 4100	5036	msedgewebview2.exe	87
PID 5036 wrote to memory of 6080	5036	msedgewebview2.exe	88
PID 5036 wrote to memory of 6080	5036	msedgewebview2.exe	88
PID 5036 wrote to memory of 6080	5036	msedgewebview2.exe	88
PID 5036 wrote to memory of 876	5036	msedgewebview2.exe	89
PID 5036 wrote to memory of 1764	5036	msedgewebview2.exe	90
PID 5036 wrote to memory of 1764	5036	msedgewebview2.exe	90
PID 5036 wrote to memory of 1256	5036	msedgewebview2.exe	91
PID 5036 wrote to memory of 1256	5036	msedgewebview2.exe	91
PID 5036 wrote to memory of 1256	5036	msedgewebview2.exe	91
PID 4712 wrote to memory of 3060	4712	msedge.exe	117
PID 3060 wrote to memory of 3728	3060	msedge.exe	118
PID 3060 wrote to memory of 5520	3060	msedge.exe	119
PID 3060 wrote to memory of 6084	3060	msedge.exe	120
PID 3060 wrote to memory of 6084	3060	msedge.exe	120
PID 3060 wrote to memory of 6084	3060	msedge.exe	120
PID 3060 wrote to memory of 5712	3060	msedge.exe	121
PID 3060 wrote to memory of 5712	3060	msedge.exe	121
PID 5036 wrote to memory of 5232	5036	msedgewebview2.exe	128
PID 5036 wrote to memory of 5232	5036	msedgewebview2.exe	128
PID 5036 wrote to memory of 640	5036	msedgewebview2.exe	129
PID 5036 wrote to memory of 640	5036	msedgewebview2.exe	129
PID 5036 wrote to memory of 5144	5036	msedgewebview2.exe	130
PID 5036 wrote to memory of 5860	5036	msedgewebview2.exe	131
PID 5036 wrote to memory of 5860	5036	msedgewebview2.exe	131

C:\Users\Admin\AppData\Local\Temp\dynamic-island-windows.exe
"C:\Users\Admin\AppData\Local\Temp\dynamic-island-windows.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4536
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=dynamic-island-windows.exe --webview-exe-version=1.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=4536.4752.15228265830777522694
  2⤵
  - Drops file in Program Files directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:5036
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x104,0x7ffa74b3b078,0x7ffa74b3b084,0x7ffa74b3b090
    3⤵
    PID:4100
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView" --webview-exe-name=dynamic-island-windows.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1728,i,13491828639261220906,3322975685260717417,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1692 /prefetch:2
    3⤵
    PID:6080
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView" --webview-exe-name=dynamic-island-windows.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2040,i,13491828639261220906,3322975685260717417,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2012 /prefetch:3
    3⤵
    PID:876
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView" --webview-exe-name=dynamic-island-windows.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1736,i,13491828639261220906,3322975685260717417,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:8
    3⤵
    PID:1764
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView" --webview-exe-name=dynamic-island-windows.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3592,i,13491828639261220906,3322975685260717417,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
    3⤵
    PID:1256
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView" --webview-exe-name=dynamic-island-windows.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4556,i,13491828639261220906,3322975685260717417,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
    3⤵
    PID:5232
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView" --webview-exe-name=dynamic-island-windows.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=756,i,13491828639261220906,3322975685260717417,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4680 /prefetch:8
    3⤵
    PID:640
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView" --webview-exe-name=dynamic-island-windows.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1204,i,13491828639261220906,3322975685260717417,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5144
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView" --webview-exe-name=dynamic-island-windows.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4512,i,13491828639261220906,3322975685260717417,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:8
    3⤵
    PID:5860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefaultcbd9cf89h03deh443ch9695h4bbd09f02ae7
1⤵
- Suspicious use of WriteProcessMemory
PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefaultcbd9cf89h03deh443ch9695h4bbd09f02ae7 --edge-skip-compat-layer-relaunch
  2⤵
  - Enumerates system info in registry
  - Suspicious use of WriteProcessMemory
  PID:3060
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x248,0x7ffa5eebc188,0x7ffa5eebc194,0x7ffa5eebc1a0
    3⤵
    PID:3728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,17833011753980780971,16226206001700037246,524288 --field-trial-handle=2244,i,10815106109815833985,4235169012643952109,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:3
    3⤵
    - System Time Discovery
    PID:5520
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,11451494982764152277,15030182823196359190,262144 --field-trial-handle=2244,i,10815106109815833985,4235169012643952109,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
    3⤵
    PID:6084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,14287888365859587245,6970182303991406672,524288 --field-trial-handle=2244,i,10815106109815833985,4235169012643952109,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:8
    3⤵
    PID:5712

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5744

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4ec 0x4f4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:652

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

hyph-as.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5036_1570378998\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5036_634386121\manifest.fingerprint
Size 66B
SHA256 c236a2ac7741d48e1c56980652331cb3f1f12baf937baf0b280600fbafb143e3
MD5 c28ffa45708f10e3a35143ed2708782f
SHA1 84a03f2615333c9311dbf79d6f58f56b5c009163
SHA512 beac0eacff45a152eb2a50f4d72db2933b8f8ba97e6f0a9f6811abe866fef5c7c83068151915dbdffaccaee5d0cd335d182671f44dbab6da2222266ff8a28ff0
TLSH
T169A022F3F000F02030022F8A80203C00C8A23BA80C8020808000BEE0200322A3A0C820
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5036_634386121\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 61B
SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
MD5 4df4574bfbb7e0b0bc56c2c9b12b6c47
SHA1 81efcbd3e3da8221444a21f45305af6fa4b71907
SHA512 78b14f60f2d80400fe50360cf303a961685396b7697775d078825a29b717081442d357c2039ad0984d4b622976b0314ede8f478cde320daec118da546cb0682a
TLSH
T139A00254944498FF4655836A05654463C7AA504780285E565B24115E42A25AD0450947
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6594bf317467f00223a5a33312a9c5978aaef75cfa0622c25582d78822df049e
MD5 c797d668af926d2d732be06c9bfd5602
SHA1 aafc49906435d7bcd744e270384c933f60b69410
SHA512 09debcb8fd6e21d234b804a2fc44d3859049b4239888f71c088720fdc2d435d1c2a95a6a1c46b78e0cca34b7fce641139a4f5a30ff947f832283ba45c24e26d3
SSDEEP 192:sxZ3EvRc4Qwurssz01ZdIaRuvfIrpLHW6+WNGYveVAphgi/J:sxZ3EvaTwurssz01zIKYYLHbGlRiB
TLSH
T18232D60B6E28987B5CC7E259BB59BB53E3F9102261D49E489AFC8B0C05DB6DD230741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 155fb8eb8539bbcc6de3239167a77bce9b224d048f422e0336bf92ef588efc2f
MD5 10ffa4a9f0c03894dc7ae0a989aef149
SHA1 ba389092829cc081d602f486d3f1e924b13f0118
SHA512 78643b3652bea11439c05aba2bad42fe55a5b80ae6af16eaf28fcc83b88111179ea3f6aca9ebe1de1813522b4b3b0dca27681980e34f0ea43df3abe8d7846685
SSDEEP 768:ZYsySOvF6ssi7pLuLnRhWvFvnX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVzysyN0LlG:eJSOv/HEnRhWvFvnXu1jaLtN0Lm2juZt
TLSH
T115E2FA3B780CCE7E4F804EDDED5A7F8E6EA802CB5698C94047F9845C02C76EA52160DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 b770702a40240ae90457ff8405b0ccbca919324dd4e1043e99dba78633d84d68
MD5 e4289c91b4b93005bc397dfa7079a1d6
SHA1 116ab61809a39855142a48e7f9f6cf600d1d0c65
SHA512 23e5791be48af1c2f12c008755333e552c734f42a65f80df39652ac1a68a46c34d31d778e784e5ca6c3c0aa6bbfc9ff07e0fcc56ca9721d3ac3f4c25c2c0a5e4
SSDEEP 384:npkiF9CcmyWCs3sNG8TUNTUlIm2QckCr9lyKpvBftGJXfhT9J84Gpye4KV8p0/HZ:p/Fccps3HwgbkUUkjGzT9J84ZI8p0/Z
TLSH
T114B25D36EC68DABBEDE74F89B74A7A03DEE0526785DC59E4CAD85D0D00931DD030B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 93c3372443349c45c234a7936274f4b8a8f94cdc8cebd21092cb3c5faca5d2b9
MD5 f976654e466aece437559b2d567821db
SHA1 761d229500837384b0c87c8a2fcd010c8ca7d6a5
SHA512 64170f99f5756d400082371c095e1989474b5d0353526d982d10718388b99e58bdbded8fd7770632f089103b5ecac3d100a3ec4c4df1df1e8fc2f371a4fb6da8
SSDEEP 384:npyiF9CcmyWCs3sN98TUNTUlIm2QckCr91/dpvBftGJXfhT9J8dLvre4KV8p0/HZ:p5Fccps3MwgbkUtTjGzT9J8lrI8p0/Z
TLSH
T149C26C35D868CEBBECE74B99B74A7643EEE01277898C9AE4DAD85D0C00931DD170F816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f3a2247bbb4a3a27c96ee8262df47d51fb996eb4b36c892f6ee8995a14402731
MD5 c5b6a595e567ac5942e26c18f9db3d98
SHA1 8aa49050cf957e0e566a52eaecc240985cbeb77b
SHA512 699b542a1f652e387125b7d52a244d42ef1f3f85476992495ec08cc02462622d6cde61efb3b46156ee576e1a8b1f43ee10bd2831362bb03dd404b95a82b54e76
TLSH
T1304147ACA6E91148B3B77E5AABF6A86D447E79372F07D55D10110E4F0A22B40CCA2737
MD5 SHA1 SHA512 TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 2169660adc8b63aaf00bc0e06591e92ea701eaffa7d30dbe0171f1acaa2c6960
MD5 c367219e2a67c983f4671d52148e3e5e
SHA1 1f02974024656301058973c584a0ac111f85a66a
SHA512 6cad4469f3f6fc01e58d7011a4a42d3452959be28f77de2c410d2aea5596ac18774534d7f55958f1978086c1cfb54c27a7ce608f38ecd6270bd3947868553241
TLSH
T187D0122232024274C0103433040265088800D11B40894500543DC72D1A080501913846
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 f15e8f64b978ea8787892471cfbef74c19d3916173ee4284fd927dd77468eaf7
MD5 8c5f32c004d4ab7f03ae82655966de0d
SHA1 e74102805c0c9048203dad322846293d39441bda
SHA512 b7624ebfc9639aba51f7a071b54621d4fdcceab6cae45238f1ed834265f5feff69cf52763ca4778ab69654d2a57db4cd16fd0c65cd236890e41b4da3acec55ff
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 cad02b3e337da11c025eba4512539f993825cbeefea66bea997e4f52a8f2232f
MD5 a963b7fbca671fcd2a73bb4cbfa5b136
SHA1 3ee29c11d4379d9efe7075a172276cf64a2955cd
SHA512 f587e9abbac16142c74e7645dc78f363746f800f4f1882f5d689f97e4c7078d45ed0bb45a4afc8d55896a0d344ae7a5724ecc863c0bf77699172d29ce247a787
TLSH
T1FFA0025522880203CA51037924D1015CB33988245733076991B82665ADD0341C6C5000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 d964d1c9961450898bff8948370a4b17aa3abcb63e13783d8e331cd00cc37f5b
MD5 ccf6c3d1b4c8ef1353c953168f7a604c
SHA1 8c2931bef46defb5b8e0160348c2975aa32c7711
SHA512 56d968d2d740afe3079d4092292282786bc83dccc39057c81f48d3ff3eb80213403e93777af13ebf2f3cca6a473731a52cba1d743ae6649dc3248c398650a5e0
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Default\Network\Network Persistent State
Size 361B
SHA256 0b69c2fb45868074620e03b7a470793a6bc1ded5013461fe96c0af5351054f5c
MD5 71abe74cadb497a102f1dea8b0d58ec9
SHA1 ef7cb173a6ea41bbfbe5cfe2752cad0b59b4e0b5
SHA512 5ce3ba698a389099ce8e2f12b17af75dd8566c9391f9c20986b439ca30ab3628174edd2d5a312982987f4aaabfefe9594b55f3fc692e1f62e06ab2eacf568037
TLSH
T1F9E068D2C1D499BE474003A026282907C9790809D2185E27CEEDA76A42E20B9912044F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe599735.TMP

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Default\Network\Network Persistent State~RFe599735.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Default\Preferences
Size 6KB
SHA256 4a529a6735fd8da6088f17b04cff3a5886692e66d4864528591a81775fdbd3e2
MD5 e95c6c058b907d9364efa1b43f9cf9ff
SHA1 8d8134c95ea6a7c962652ce51d2525cb1e655146
SHA512 0c776dacfc06b66f018fc9a933f65f051625af9fc196058d612b335c5c69682c2f1e063808ad02bedde3772b6d10bbe84919b74a9a60bae4dd3d079ceebcf272
SSDEEP 96:stw05l9IQb9GffcZ8i0vhEUktSm/7qx+WVHMSm+uecJQCkoMH9dQj5+gSwbh2MOB:stw072f0Z8pa3P/S+WiTHTWds8k2MC
TLSH
T14AD1A7035E28697B4CC7F6597A35FB46E6F6202262C10F98ABFC861C04E66CC230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe590e6d.TMP

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Default\Preferences~RFe590e6d.TMP
Size 6KB
SHA256 215bd63397ade7aa5acddda4c8c0250034e9c383b7ec54ac41dd2ed8f816d654
MD5 0c8ab64441a289b8f80c9414d7449282
SHA1 1b1bf1d7ad7d2124e9c307af10f418c93aa54993
SHA512 1072bd346ab0e201f8c01959850e9f6820891e27c10304034dcb265944ecbf3f7de3c0b83f608727bd1829c6f8fe10c15ffb8660b90b7e89dcaf97095f4fcb7e
SSDEEP 96:stw05l9IQb9uffcZ8i0vhEUktSm/7qx+WVHMSm+uecJ6M1idQj5+gSw42MEB:stw07ef0Z8pa3P/S+WiT6Mwds8n2M8
TLSH
T160D1A7065E28A97B4CC7E2197A35FB46D6F6602262D44F98EBFC861C04E66CC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Local State
Size 16KB
SHA256 767985538dca23abd8fed0f951968f8ea38ffb4d961662b629cd9edd8a674ab9
MD5 378cc3072670aafa559457d6dc746e3d
SHA1 05ee29cff3b190c75e3b0408d7a96264e546941e
SHA512 58f11c2613e175c398ae82939a0980174d4a413455ab6d1acde987e92b7ed273420c53358983e5d644b8ed08dcda8e5c040308017381be18e825d1d7f1a0bace
SSDEEP 384:z0o+aQikB+z/xvxjg/qhEcNbKK9cWTagW3e9zm:In/UxvxjgC+dKK13eFm
TLSH
T149728D3AE468AA2768F3E6447A066B8BDBF4556281C56FE88DED1F0C06C73DD1306C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Local State
Size 1KB
SHA256 8f2c8d0eadf76348c6ff83b2a7c54fde5d3da2d2b6cd67a3e4d5ccc6127e8046
MD5 03d0300cc71fdec5ca9c5e9b0bf90cbd
SHA1 e25dfdd376e869fa29ee746083ddc9492680cc8d
SHA512 6ec0e367cfe64db8b6356aba8b875ceb8624df055b88cb4170c0c341b694398791bfc5e157ad465dbc429d82f108e10f29433cb7e86ce2455fae0ae5c0f7c602
TLSH
T1BB3185B3E0C41B761CA2A1457251BA4B2E60503AC2518F4875ED0F2C12EA5DCE36AD33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Local State
Size 2KB
SHA256 8969b868b54ca07b90c6d7af2cbf6b9c9487542605429765547dc1376e4ec318
MD5 36a8ab5e173e9f2e9a8ce75b1d1cd96a
SHA1 bb9ecc831aecfe2c49cdd0cfe7c71a9115a0dd1b
SHA512 515c00f1bfc823e5f2a097c4aca36542f26f7dd2eec097e1511cee8dfe6eb32660f4d2b6fb861c8b39492c6508240ac922938034cb6a6e55a3df409d24dcdd1e
TLSH
T1AB51D5B3B8089A3B4CF38544BA467E176E759169CA522F54A9DD0F1C01EF29C6342C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Local State
Size 3KB
SHA256 31fc4b767b95b505ffc1236863b4fd03c5a76ca57ee28421721d002b3b4dabfb
MD5 cce8499ed8891840c46742abcd0fb254
SHA1 acd742dc11d1f008313e041b36465031af782512
SHA512 58e264a8fbc71f1b2dd80a61b5ab587972942e7091a2fc8d839737ba1675f136dd67cb6c2172e5e5d16528df912a75c24075e55b00bebf83d489d76159b20cde
TLSH
T1F671A667A464A93B0DF39944B9813B0A7AA5513BD9917F98D9EC0F1C01EB3DC2342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Local State
Size 4KB
SHA256 9dc050bffb68985248aa2061ed064cd508b72f549c42921dfa0df39d9f47aadf
MD5 366222b3aa029dff5ac79ac025e44ab7
SHA1 a7e283ca04619d1bef539afd1739aa62f355b284
SHA512 ad1c744d20e395c11fe6061359e43cb486256d0705ed335a8dcfdcbb36f7466c3e3f9e3f162ac5105683267f12f41d228bb80b598814c2cbc64cca9ac4f09445
SSDEEP 96:zuz9bNkCuf10sK+W8Frh/cInURoDoto+5tqDyBWBxaY6i9Z5NZlTk6Ja:z09bNbSlKqooDUhuSWBxaYR0
TLSH
T1BC81A526A464AA3B4CF2E544B9863F077AA55127C9917F98DAEC0F1C02EB2DC2342D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Local State
Size 14KB
SHA256 2f42ec70fc09858770a541f237dd8aa8e4e50ea237af05c3527ddd05d0da944a
MD5 5bbcf4632134519c10026ff8908207ce
SHA1 e85f3d197973c815f1625ae2dc4c033ffc46c3db
SHA512 92eca933e3b9664bb81d06b7898ba3ab09ff070a8bde289c8df4a39b3ac6bb8f86b14a5ea33d9808d1a9a926b338b3c78c11d31fe85451d30a3e32a049159a04
SSDEEP 384:z0J+aQikB+z/xvxjg/qhEwNbKKYcWTa+e9zm:I0/UxvxjgC+RKraeFm
TLSH
T1F3628D2BA4686E2759F3F5047A491B4BDAF9947280C16FB84DED1F0D06DB3D81342D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe586f6e.TMP

Path C:\Users\Admin\AppData\Local\com.dynamicisland.desktop\EBWebView\Local State~RFe586f6e.TMP
Size 1KB
SHA256 df3f5fa52858dffbc27c029be40355f03331ef240117b171c7c6374212c34dd8
MD5 78fc06c7cfab198601f37a6fb879979d
SHA1 868aa22c42c2792065734e3c74620be184d997f3
SHA512 bad510c95ba60bfa774a5041029cb7d09b19e339b2bbd98659d2963c43528a83c82dd7557e6a3146d360e1c80966b5e272d57ccd344470e8dda7035373861944
TLSH
T1612165B3D0C46A761CA15054B251BA4F2E60913AC2509F4CB5DD1B2C22DB5ECE36AD33
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1256-122-0x00007FFA90C90000-0x00007FFA90C91000-memory.dmp

Download

memory/1256-223-0x000001E4B70D0000-0x000001E4B71FA000-memory.dmp

Download

memory/1764-62-0x00007FFA8F450000-0x00007FFA8F451000-memory.dmp

Download

memory/1764-63-0x00007FFA90B10000-0x00007FFA90B11000-memory.dmp

Download

memory/5036-205-0x0000014A08CE0000-0x0000014A09CE0000-memory.dmp

Download

memory/5144-695-0x000001ED48940000-0x000001ED48941000-memory.dmp

Download

memory/5144-693-0x000001ED48940000-0x000001ED48941000-memory.dmp

Download

memory/5144-690-0x000001ED48940000-0x000001ED48941000-memory.dmp

Download

memory/5144-685-0x000001ED48940000-0x000001ED48941000-memory.dmp

Download

memory/5144-684-0x000001ED48940000-0x000001ED48941000-memory.dmp

Download

memory/5144-683-0x000001ED48940000-0x000001ED48941000-memory.dmp

Download

memory/5144-689-0x000001ED48940000-0x000001ED48941000-memory.dmp

Download

memory/5144-691-0x000001ED48940000-0x000001ED48941000-memory.dmp

Download

memory/5144-692-0x000001ED48940000-0x000001ED48941000-memory.dmp

Download

memory/5144-694-0x000001ED48940000-0x000001ED48941000-memory.dmp

Download

memory/6080-220-0x0000013056500000-0x000001305662A000-memory.dmp

Download

memory/6080-25-0x00007FFA90C90000-0x00007FFA90C91000-memory.dmp

Download

memory/6080-240-0x0000013056500000-0x000001305662A000-memory.dmp

Download

memory/6080-718-0x0000013056500000-0x000001305662A000-memory.dmp

Download