Overview

overview

3

Static

static

1

URLScan

urlscan

https://acrobat.adob...

windows10-2004-x64

3

Analysis

  • user interaction
    yes
  • max time kernel
    0s
  • max time network
    18s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    20/10/2026, 19:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://acrobat.adobe.com/id/urn:aaid:sc:EU:934fbb62-5856-4396-be9b-b5345c605940
  • Sample261020-yahteswt6q
Score
3/10
discovery

Malware Config

Signatures

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Enumerates system info in registry 2 TTPs 2 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://acrobat.adobe.com/id/urn:aaid:sc:EU:934fbb62-5856-4396-be9b-b5345c605940
    1⤵
    • Enumerates system info in registry
    • Suspicious use of WriteProcessMemory
    PID:620
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7ffa2084c188,0x7ffa2084c194,0x7ffa2084c1a0
      2⤵
        PID:2280
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,3199502891219504325,5968487536312211552,524288 --field-trial-handle=2220,i,1026609578451666517,8163353166547304159,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:3
        2⤵
        • System Time Discovery
        PID:2812
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,5594239632745461522,910806831128525403,262144 --field-trial-handle=2220,i,1026609578451666517,8163353166547304159,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
        2⤵
          PID:4296
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,8690301516486373332,12250759484633275426,524288 --field-trial-handle=2220,i,1026609578451666517,8163353166547304159,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:8
          2⤵
            PID:4608
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,15568026892707198081,8769470439980214173,2097152 --field-trial-handle=2220,i,1026609578451666517,8163353166547304159,262144 --variations-seed-version --mojo-platform-channel-handle=3416 /prefetch:1
            2⤵
              PID:3772
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,8233651210674920473,5959617400867798621,2097152 --field-trial-handle=2220,i,1026609578451666517,8163353166547304159,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
              2⤵
                PID:2440
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,11211790158279641279,3146554597510485854,2097152 --field-trial-handle=2220,i,1026609578451666517,8163353166547304159,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
                2⤵
                  PID:888
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,13103803390577639906,1357220224934270496,2097152 --field-trial-handle=2220,i,1026609578451666517,8163353166547304159,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:2
                  2⤵
                    PID:4384
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3612,i,8766626928193325580,7705235420351548211,2097152 --field-trial-handle=2220,i,1026609578451666517,8163353166547304159,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
                    2⤵
                      PID:3004
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,15168716722172097135,9751952882350198623,524288 --field-trial-handle=2220,i,1026609578451666517,8163353166547304159,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
                      2⤵
                        PID:2468
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,11704464265969766115,7149606693134759849,524288 --field-trial-handle=2220,i,1026609578451666517,8163353166547304159,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:8
                        2⤵
                          PID:2500
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5912,i,1078737733140179889,10885401314367669648,2097152 --field-trial-handle=2220,i,1026609578451666517,8163353166547304159,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:1
                          2⤵
                            PID:820
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,7448715723934896127,15934613867746019913,524288 --field-trial-handle=2220,i,1026609578451666517,8163353166547304159,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
                            2⤵
                              PID:4396
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,15538036283684849783,2339091383445090339,524288 --field-trial-handle=2220,i,1026609578451666517,8163353166547304159,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
                              2⤵
                                PID:2028
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6508,i,3843591444660238721,17792911675341713837,524288 --field-trial-handle=2220,i,1026609578451666517,8163353166547304159,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:8
                                2⤵
                                  PID:4340
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6508,i,3843591444660238721,17792911675341713837,524288 --field-trial-handle=2220,i,1026609578451666517,8163353166547304159,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:8
                                  2⤵
                                    PID:2576
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,3042496076666273884,15117588617114317689,524288 --field-trial-handle=2220,i,1026609578451666517,8163353166547304159,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
                                    2⤵
                                      PID:2556
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                    1⤵
                                      PID:4136

                                    Network

                                          MITRE ATT&CK Enterprise v16

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          02c66648-eea9-40f0-b7e7-b178de4ae964.tmp
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\02c66648-eea9-40f0-b7e7-b178de4ae964.tmp
                                          • Size 8KB
                                          • SHA256 5979316c3a9cbb5e004841a08c7699587fa053107e3c6048e473bc336e7d7ebf
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          06f452c6-b57d-4531-811d-887318735bae.tmp
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\06f452c6-b57d-4531-811d-887318735bae.tmp
                                          • Size 8KB
                                          • SHA256 ee1a6bda32d3dd49f3f775a0d8a4940683017e8ade2901841b437d120087d448
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          5b45ebae-3d08-4bf1-990c-f1c5e5d67cb0.tmp
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5b45ebae-3d08-4bf1-990c-f1c5e5d67cb0.tmp
                                          • Size 12KB
                                          • SHA256 efa44b189ef5df9b10342da422801f83150a8af81b16ab061af14bc31ddc34a0
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          settings.dat
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                          • Size 280B
                                          • SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
                                          • MD5 SHA1 SHA512 TLSH
                                          Submit Download

                                          settings.dat
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                          • Size 280B
                                          • SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
                                          • MD5 SHA1 SHA512 TLSH
                                          Submit Download

                                          0dc88fb2-7da4-4a71-a42d-e8b36517b528.tmp
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0dc88fb2-7da4-4a71-a42d-e8b36517b528.tmp
                                          • Size 70KB
                                          • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          6058ff32-458e-48fe-b942-36c96a7ed377.tmp
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6058ff32-458e-48fe-b942-36c96a7ed377.tmp
                                          • Size 10KB
                                          • SHA256 7791b6f15163d1701fd939bc9cf2e2733d810e4b5f9648be74f020ff5b1cbd73
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          f_00005e
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
                                          • Size 122KB
                                          • SHA256 7975af81c57ef6732e4a97608f2ee22d9959ba14b0be55a5d35c452328a9a53a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          f_00005f
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
                                          • Size 2.9MB
                                          • SHA256 754e92bd200f3cfdf69964d8edbdd17d5154a80d924db749a4e72cafabf20708
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          f_000063
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
                                          • Size 45KB
                                          • SHA256 e97589d00a321488bb7d09bc6fa0f3c3b8b4045c24cc36cf52293958c94e88b0
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          f_000073
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
                                          • Size 63KB
                                          • SHA256 b102be09d3f8c7e348e95281ca4a07153489d9ee899a5af7f66019a1c9bdc015
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          f_0000a8
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
                                          • Size 34KB
                                          • SHA256 ec3d4cddffdb064bcd0f719dc7392bfcf36e624af6b80ef46299fc9477d63172
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          f_0000b1
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
                                          • Size 753KB
                                          • SHA256 514165ba2c6a93f2000f0d00927b4222528bec137fae7c42a5c237f88363f5e0
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          f_0000c3
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
                                          • Size 21KB
                                          • SHA256 da8a7244ddd144def153be3c088445fc5e79574842583661f41a4b075b97ce90
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          f_0000d3
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d3
                                          • Size 1.2MB
                                          • SHA256 2eb9bd673f7bb5717de3eae9a718e274e50b096e03c50f8af07e66ee04ae59d9
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          CURRENT
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_acrobat.adobe.com_0.indexeddb.leveldb\CURRENT
                                          • Size 16B
                                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                          • MD5 SHA1 SHA512
                                          Submit Download

                                          82385ec9-2913-4d0a-8ade-9ac26b0e1d8d.tmp
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\82385ec9-2913-4d0a-8ade-9ac26b0e1d8d.tmp
                                          • Size 2B
                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                          • MD5 SHA1 SHA512
                                          Submit Download

                                          sync_diagnostic.log
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                          • Size 4KB
                                          • SHA256 22c661b338dadbcc4a3fd92604a7a99cc27f4dac2775b090674faaaa83bd9323
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          a6e7deb1-177d-4b0d-8ae1-c52a2d3bc8a1.tmp
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a6e7deb1-177d-4b0d-8ae1-c52a2d3bc8a1.tmp
                                          • Size 27KB
                                          • SHA256 1aa865770f2a1deafe022241944c758a91cbedd1af7a7a370897618f99455a27
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                          • Size 2KB
                                          • SHA256 91a202d9b9c8fa5d59b377bb1fdd1ac2a4c4418c868987f5a7ca644d49cc15af
                                          • MD5 SHA1 SHA512 TLSH
                                          Submit Download