Overview

overview

7

Static

static

3

TSBMacro (1).exe

windows10-2004-x64

7

TSBMacro (1).exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    61s
  • max time network
    66s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    26/10/2026, 22:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    TSBMacro (1).exe
  • Size 69.1MB
  • Sample261026-2dlahacb35
  • SHA256 60b1dbe5af281d9562a8e7804c2a9faf91af8082a4bceba14ccc404ff5652cc8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoverytrojan

Malware Config

Signatures

  • Loads dropped DLL 34 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe
    "C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe"
    1⤵
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • Reads the TCP/IP host and domain name from the registry
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3284
    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="TSBMacro (1).exe" --webview-exe-version=1.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --mojo-named-platform-channel-pipe=3284.4376.12818708449349813758
      2⤵
      • Enumerates system info in registry
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:3572
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffe7e24b078,0x7ffe7e24b084,0x7ffe7e24b090
        3⤵
          PID:3128
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView" --webview-exe-name="TSBMacro (1).exe" --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1712,i,17690677915896079469,2537661488575107121,262144 --variations-seed-version --mojo-platform-channel-handle=1708 /prefetch:2
          3⤵
            PID:3768
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView" --webview-exe-name="TSBMacro (1).exe" --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2020,i,17690677915896079469,2537661488575107121,262144 --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:3
            3⤵
              PID:4472
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView" --webview-exe-name="TSBMacro (1).exe" --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2372,i,17690677915896079469,2537661488575107121,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:8
              3⤵
                PID:2064
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView" --webview-exe-name="TSBMacro (1).exe" --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3572,i,17690677915896079469,2537661488575107121,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
                3⤵
                  PID:224

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  Microsoft.Win32.SystemEvents.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\Microsoft.Win32.SystemEvents.dll
                  • Size 93KB
                  • SHA256 b81fa3ec77812fadd37684388d330805c1ee5dc29ca77ae30334f6640d1b6158
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Collections.Concurrent.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Collections.Concurrent.dll
                  • Size 269KB
                  • SHA256 6ffcd942293576dbd3ab66ca6ef2ea0428f9e84bdacec63316bc5c069041f37c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Collections.NonGeneric.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Collections.NonGeneric.dll
                  • Size 101KB
                  • SHA256 aba7167d2e95ee23a55a03586588eb01ca3e63942ff2e1392936692bc337c194
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Collections.Specialized.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Collections.Specialized.dll
                  • Size 101KB
                  • SHA256 c4b625cf2ec04fc659e86223ca4be5421f843ecac62feb1a2e5e92e7c70eda50
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Collections.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Collections.dll
                  • Size 253KB
                  • SHA256 f0fe3fc9cecf713d5c29a2fecdf6aafc50b41efb8130a56af54b8c9330c1ffc1
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.ComponentModel.EventBasedAsync.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.ComponentModel.EventBasedAsync.dll
                  • Size 45KB
                  • SHA256 e5b203c21752934ee92e1f2f9aae98f28c0a054f5357072ec7d1a6fd036ae7cf
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.ComponentModel.Primitives.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.ComponentModel.Primitives.dll
                  • Size 77KB
                  • SHA256 3dc8bfbf3b542c45646a7057d3e945374c7b85db69c37f2a16794e88091a5b06
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.ComponentModel.TypeConverter.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.ComponentModel.TypeConverter.dll
                  • Size 729KB
                  • SHA256 534f82e18158a5bf76019b847a1f91dc8f54fb8075561d7678dfcab89c315382
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.ComponentModel.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.ComponentModel.dll
                  • Size 29KB
                  • SHA256 d912b7e2d421a49a4eee9730764047f058a8d72c9b3618dcc195d6f427b55ae8
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Diagnostics.DiagnosticSource.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Diagnostics.DiagnosticSource.dll
                  • Size 405KB
                  • SHA256 8501928426904a1b660447cb5cdeae888ec61a850395910a050fb33ba2541a14
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Diagnostics.TraceSource.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Diagnostics.TraceSource.dll
                  • Size 141KB
                  • SHA256 953bd83cfa994f088c5dd326c1746dda1db937c9311c3e58f74e030c3190bb1f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Drawing.Common.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Drawing.Common.dll
                  • Size 1.5MB
                  • SHA256 9925a0664e5ca4250a4b384e0d537354dc8c987bf8d9f59957229bd233ab7351
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Drawing.Primitives.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Drawing.Primitives.dll
                  • Size 129KB
                  • SHA256 6d056c7523d827c5dd264aea88a97342aeaa8a5e5b9a27c5c4e1886ee18c7d05
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Linq.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Linq.dll
                  • Size 529KB
                  • SHA256 1b81642c1ee4f21ebbb57213c14e50df59aabcd7bf91de2eebdf4c0d9f32845b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Memory.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Memory.dll
                  • Size 153KB
                  • SHA256 4d6fe7d23c06b4e81748d83a1314218f31bb1e4ce9b6d1ebc7ba8a78a342833c
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Net.Http.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Net.Http.dll
                  • Size 1.7MB
                  • SHA256 8a7638d615e37d1b271c526979ee36b56c1b56193a33f5929dbeb29d1fa6d6e5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Net.NameResolution.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Net.NameResolution.dll
                  • Size 109KB
                  • SHA256 53a3215b359e108f0315e81e4a1c4d9981d5bd3e1adc3891f598dcfd7e4609dc
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Net.Primitives.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Net.Primitives.dll
                  • Size 225KB
                  • SHA256 ffb439ee971575c80749639eaa2593194de95dfc18eaaaa4011df9a39fb64181
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Net.Security.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Net.Security.dll
                  • Size 653KB
                  • SHA256 4f471c45207ae53ad01cb0d16798c0cd94fb29a8253989da8c2f771e6db5e7b0
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Net.Sockets.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Net.Sockets.dll
                  • Size 533KB
                  • SHA256 096c5ca2b8868c50991f183f0cbf8b32326cbf197f9a6cebe132c5ab63513d24
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Private.CoreLib.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Private.CoreLib.dll
                  • Size 12.6MB
                  • SHA256 7f48a9493a1d9f6c64a51c3ec357cf8534874ea62240a54c2a1570a5913148a4
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Private.Uri.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Private.Uri.dll
                  • Size 253KB
                  • SHA256 7ce81174fdba93a1e12c596ea3e1ad4bcc9e798710292e1629cbe827ee34458b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Runtime.InteropServices.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Runtime.InteropServices.dll
                  • Size 93KB
                  • SHA256 74a2dd12e1c0f3d9aca3f11e160a1de7a5bd4447ed8be3071377217a516f6874
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Security.Claims.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Security.Claims.dll
                  • Size 97KB
                  • SHA256 20dbae23f8943877ef1b9890bc2d6ae3a2716fbb32e26eb124ad435e9e534737
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Security.Cryptography.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Security.Cryptography.dll
                  • Size 2.0MB
                  • SHA256 a998a46e2379d65412d54bb6f55e0eb5f16c3d856228882311f011c870c668b4
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Security.Principal.Windows.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Security.Principal.Windows.dll
                  • Size 181KB
                  • SHA256 37858ee4c9cc2d07c175d379321d86851e3e89f2278593153cd12f5e33c6655b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Text.Encodings.Web.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Text.Encodings.Web.dll
                  • Size 129KB
                  • SHA256 a6bc1ad954c3213bba9b0e27a3aaae8321adfa0642ec679bf4452f7819c8ad54
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Text.Json.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Text.Json.dll
                  • Size 1.4MB
                  • SHA256 a5deaf26b38846d1f6e904faf4fc6ce50958b1ffb6369f4505e9f6dfc2b37fe2
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Threading.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Threading.dll
                  • Size 81KB
                  • SHA256 76900e5c96b72e6e74477a90897f86c9f8b78eb2169010298cd4aecec5466ae3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Windows.Forms.Primitives.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Windows.Forms.Primitives.dll
                  • Size 2.9MB
                  • SHA256 8a547ccc5ae404bd2c74245502bae1f3c8782dde3910d5772eaaeffb61b1df01
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  System.Windows.Forms.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\System.Windows.Forms.dll
                  • Size 12.9MB
                  • SHA256 c72f9abc14c0ff6da97808bec44eac0265e04e8f166cfe2ce3ddc36ed996f5c3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  TSBMacro.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\TSBMacro.dll
                  • Size 394KB
                  • SHA256 ce359b6e78fa4f8bbe4ccc7355a4f645df7cc70db025c6568d2288061f08dcb4
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  WebView2Loader.dll
                  • Path C:\Users\Admin\AppData\Local\Temp\.net\TSBMacro (1)\fW+cjCFMx3+3VE3pANU+PfFT7PUEQAY=\WebView2Loader.dll
                  • Size 160KB
                  • SHA256 239a9d6614a6cfade62b47cdb0be36e3069eedc438c3e0647a9e7b7c84ef6ea0
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  19e34f80-0080-4531-9a8d-bdcad6939fff.tmp
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\19e34f80-0080-4531-9a8d-bdcad6939fff.tmp
                  • Size 2KB
                  • SHA256 4328f48eff5a8626d6a1d57fd747decd0c9e02222a9d2b8d24c2c0dfbc5086a2
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  1b51b624-3b5e-4eae-8ade-7254e962e2a7.tmp
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\1b51b624-3b5e-4eae-8ade-7254e962e2a7.tmp
                  • Size 1KB
                  • SHA256 7679495defbadb16ff8f4d9fc357f4916c5681538ece7386ce544391134d62a2
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  38f73882-c55e-479b-9604-c5359df46d44.tmp
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\38f73882-c55e-479b-9604-c5359df46d44.tmp
                  • Size 16KB
                  • SHA256 3f0b3bf3e4d9c1249a9d5ec9fa22b1c9207d28f6a6923d3f80aec7855088ac35
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  settings.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\Crashpad\settings.dat
                  • Size 280B
                  • SHA256 761fbe7e5b6ad5644475264ddaf9fe8390e3d97c363217ac812ea0178ec5e45b
                  • MD5 SHA1 SHA512
                  Submit Download

                  settings.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\Crashpad\settings.dat
                  • Size 280B
                  • SHA256 309e090468210f0b076d5d75bafa51e92b69baa4e9824b0a1a7919a94cc9c995
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  throttle_store.dat
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\Crashpad\throttle_store.dat
                  • Size 20B
                  • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                  • MD5 SHA1 SHA512
                  Submit Download

                  0259b82a-2e4d-4e87-ae16-a7de58092b4e.tmp
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\Default\0259b82a-2e4d-4e87-ae16-a7de58092b4e.tmp
                  • Size 6KB
                  • SHA256 02fff6af1f9ecd7ea7ac27c3ea59d95178cb01140694e99fdc07a0c11782b8d2
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  temp-index
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\Default\Code Cache\wasm\index-dir\temp-index
                  • Size 48B
                  • SHA256 1369a05b31b3f5aa938ce498ebf2aba1bef15c59f725d2a162ea305a6c8fce46
                  • MD5 SHA1 SHA512
                  Submit Download

                  index
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\Default\DawnWebGPUCache\index
                  • Size 256KB
                  • SHA256 dba8866c4f2f6a8e7365e942956266d3d672f9463da0593fa72bab0b3686c891
                  • MD5 SHA1 SHA512 SSDEEP
                  Submit Download

                  data_0
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\Default\GPUCache\data_0
                  • Size 8KB
                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                  • MD5 SHA1 SHA512 SSDEEP
                  Submit Download

                  data_1
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\Default\GPUCache\data_1
                  • Size 264KB
                  • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                  • MD5 SHA1 SHA512 SSDEEP
                  Submit Download

                  data_2
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\Default\GPUCache\data_2
                  • Size 8KB
                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                  • MD5 SHA1 SHA512 SSDEEP
                  Submit Download

                  data_3
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\Default\GPUCache\data_3
                  • Size 8KB
                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                  • MD5 SHA1 SHA512 SSDEEP
                  Submit Download

                  SCT Auditing Pending Reports
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
                  • Size 2B
                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                  • MD5 SHA1 SHA512
                  Submit Download

                  Preferences
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\Default\Preferences
                  • Size 6KB
                  • SHA256 ef749e1b6bd0d0a60fce1058a7f85eff1590bc51fd7f8da795fbce9d8f9ed698
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  MANIFEST-000001
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
                  • Size 41B
                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                  • MD5 SHA1 SHA512
                  Submit Download

                  CURRENT
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\Default\Sync Data\LevelDB\CURRENT
                  • Size 16B
                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                  • MD5 SHA1 SHA512
                  Submit Download

                  Local State
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\Local State
                  • Size 1KB
                  • SHA256 b60122b654074cb360aced32fe6f9aff29123f0301b29d0f7ffbd12773b07142
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  bb7d3853-64cc-4563-b976-94cec21483de.tmp
                  • Path C:\Users\Admin\AppData\Local\Temp\TSBMacro (1).exe.WebView2\EBWebView\bb7d3853-64cc-4563-b976-94cec21483de.tmp
                  • Size 3KB
                  • SHA256 1e640d42d7fb3be5f93bcffec67572cb5d4ab392b86a2adfcb40f1ac73076df3
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  icon.png
                  • Path C:\Users\Admin\AppData\Local\Temp\demsMacro_ui\icon.png
                  • Size 266KB
                  • SHA256 64758301d8d67bcbd74c5eaca908bed1d05e7079a6c9a369452629cf9ee356e3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  index.html
                  • Path C:\Users\Admin\AppData\Local\Temp\demsMacro_ui\index.html
                  • Size 46KB
                  • SHA256 10587e520b7a02a3e192aa8465cefe6ab3d6077863f807f83d2113e13520bb75
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  memory/224-699-0x00007FFE9C8A0000-0x00007FFE9C8A1000-memory.dmp
                  Download

                  memory/2064-623-0x00007FFE9BE80000-0x00007FFE9BE81000-memory.dmp
                  Download

                  memory/2064-624-0x00007FFE9BF90000-0x00007FFE9BF91000-memory.dmp
                  Download

                  memory/3768-567-0x00007FFE9C8A0000-0x00007FFE9C8A1000-memory.dmp
                  Download