Overview
overview
7Static
static
3Dynamic.Is...up.exe
windows10-2004-x64
7Dynamic.Is...up.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3dynamic-is...ss.exe
windows10-2004-x64
6dynamic-is...ss.exe
windows11-ltsc_2024-x64
6Analysis
- max time kernel
150s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/11/2026, 22:49
Static task
static1
Behavioral task
behavioral1
Sample
Dynamic.Island_1.6.0_x64-setup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Dynamic.Island_1.6.0_x64-setup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
dynamic-island-cross.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
dynamic-island-cross.exe
Resource
win11ltsc2024-20260911-en
General
- Target dynamic-island-cross.exe
- Size 4.7MB
- Sample261104-2rx68a1t3j
- SHA256 f172e2ede3c10a37fb2a3f90f7798a0a1cbebddbae466c38d4527ab61c145b17
- MD5 34d446864f5e97647d9f572c3dcb1594
- SHA1 b0d2ec9d5cf5f5fd3fe4830b9456d493a6959070
- SHA512 0996d3336579bc400f1f4a9809f11679b0667f3242b1a05e285edd571a812afb1bcacac806e7766d5c7f093e9d4b7739794595a1ee28eb9dd7468771e83e52ee
- SSDEEP 98304:ViTOp7iFNqBrEqPMtYvs9nh8LZo/4VgJE+ZNwg:ITUwqBW6uZNwg
- TLSH T12A364943F36290FCC52AC136D34A6232FA227C494B3539EB5BE44B253E65F906B3DA54
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks whether UAC is enabled 1 TTPs 1 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA dynamic-island-cross.exe - Drops file in Windows directory 22 IoCs
description ioc Process File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1787436042\manifest.fingerprint msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1787436042\female_names.txt msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1787436042\passwords.txt msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1787436042\test.txt msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1787436042\us_tv_and_film.txt msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1964145042\manifest.json msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_697418690\protocols.json msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1468701342\manifest.json msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1787436042\english_wikipedia.txt msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1787436042\male_names.txt msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1787436042\ranked_dicts msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1964145042\crl-set msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_697418690\manifest.fingerprint msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1468701342\ct_config.pb msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1468701342\kp_pinslist.pb msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1964145042\manifest.fingerprint msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_697418690\manifest.json msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1468701342\crs.pb msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1468701342\manifest.fingerprint msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1787436042\manifest.json msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1787436042\model.markov msedgewebview2.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1787436042\surnames.txt msedgewebview2.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedgewebview2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedgewebview2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedgewebview2.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 2524 msedgewebview2.exe 2524 msedgewebview2.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
pid Process 1188 msedgewebview2.exe - Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe - Suspicious use of SendNotifyMessage 64 IoCs
pid Process 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe 5812 dynamic-island-cross.exe - Suspicious use of WriteProcessMemory 28 IoCs
description pid Process procid_target PID 5812 wrote to memory of 1188 5812 dynamic-island-cross.exe 88 PID 1188 wrote to memory of 5444 1188 msedgewebview2.exe 89 PID 1188 wrote to memory of 2704 1188 msedgewebview2.exe 90 PID 1188 wrote to memory of 2704 1188 msedgewebview2.exe 90 PID 1188 wrote to memory of 2704 1188 msedgewebview2.exe 90 PID 1188 wrote to memory of 2704 1188 msedgewebview2.exe 90 PID 1188 wrote to memory of 5944 1188 msedgewebview2.exe 91 PID 1188 wrote to memory of 5316 1188 msedgewebview2.exe 92 PID 1188 wrote to memory of 5316 1188 msedgewebview2.exe 92 PID 1188 wrote to memory of 5316 1188 msedgewebview2.exe 92 PID 1188 wrote to memory of 3280 1188 msedgewebview2.exe 93 PID 1188 wrote to memory of 3280 1188 msedgewebview2.exe 93 PID 1188 wrote to memory of 3280 1188 msedgewebview2.exe 93 PID 1188 wrote to memory of 3280 1188 msedgewebview2.exe 93 PID 1188 wrote to memory of 3280 1188 msedgewebview2.exe 93 PID 1188 wrote to memory of 6044 1188 msedgewebview2.exe 98 PID 1188 wrote to memory of 6044 1188 msedgewebview2.exe 98 PID 1188 wrote to memory of 6044 1188 msedgewebview2.exe 98 PID 1188 wrote to memory of 236 1188 msedgewebview2.exe 99 PID 1188 wrote to memory of 236 1188 msedgewebview2.exe 99 PID 1188 wrote to memory of 236 1188 msedgewebview2.exe 99 PID 1188 wrote to memory of 252 1188 msedgewebview2.exe 100 PID 1188 wrote to memory of 252 1188 msedgewebview2.exe 100 PID 1188 wrote to memory of 252 1188 msedgewebview2.exe 100 PID 1188 wrote to memory of 2524 1188 msedgewebview2.exe 101 PID 1188 wrote to memory of 6008 1188 msedgewebview2.exe 102 PID 1188 wrote to memory of 6008 1188 msedgewebview2.exe 102 PID 1188 wrote to memory of 6008 1188 msedgewebview2.exe 102
Processes
-
C:\Users\Admin\AppData\Local\Temp\dynamic-island-cross.exe"C:\Users\Admin\AppData\Local\Temp\dynamic-island-cross.exe"1⤵
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5812 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=dynamic-island-cross.exe --webview-exe-version=1.6.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=5812.4264.2583782008853354036 /pfhostedapp:d795f5bd61ad06cc3620cfbe206d57735b4aa4682⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of WriteProcessMemory
PID:1188 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView /prefetch:4 /pfhostedapp:d795f5bd61ad06cc3620cfbe206d57735b4aa468 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffbb12a5fd8,0x7ffbb12a5fe4,0x7ffbb12a5ff03⤵PID:5444
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView" --webview-exe-name=dynamic-island-cross.exe --webview-exe-version=1.6.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1744 --field-trial-handle=1756,i,9609478994982423456,11935419256688863494,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:d795f5bd61ad06cc3620cfbe206d57735b4aa4683⤵PID:2704
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView" --webview-exe-name=dynamic-island-cross.exe --webview-exe-version=1.6.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2204 --field-trial-handle=1756,i,9609478994982423456,11935419256688863494,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:d795f5bd61ad06cc3620cfbe206d57735b4aa4683⤵PID:5944
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView" --webview-exe-name=dynamic-island-cross.exe --webview-exe-version=1.6.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2260 --field-trial-handle=1756,i,9609478994982423456,11935419256688863494,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d795f5bd61ad06cc3620cfbe206d57735b4aa4683⤵PID:5316
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView" --webview-exe-name=dynamic-island-cross.exe --webview-exe-version=1.6.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3320 --field-trial-handle=1756,i,9609478994982423456,11935419256688863494,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:d795f5bd61ad06cc3620cfbe206d57735b4aa468 /prefetch:13⤵PID:3280
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView" --webview-exe-name=dynamic-island-cross.exe --webview-exe-version=1.6.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4500 --field-trial-handle=1756,i,9609478994982423456,11935419256688863494,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d795f5bd61ad06cc3620cfbe206d57735b4aa4683⤵PID:6044
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView" --webview-exe-name=dynamic-island-cross.exe --webview-exe-version=1.6.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4428 --field-trial-handle=1756,i,9609478994982423456,11935419256688863494,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d795f5bd61ad06cc3620cfbe206d57735b4aa4683⤵PID:236
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView" --webview-exe-name=dynamic-island-cross.exe --webview-exe-version=1.6.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4504 --field-trial-handle=1756,i,9609478994982423456,11935419256688863494,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d795f5bd61ad06cc3620cfbe206d57735b4aa4683⤵PID:252
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView" --webview-exe-name=dynamic-island-cross.exe --webview-exe-version=1.6.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4664 --field-trial-handle=1756,i,9609478994982423456,11935419256688863494,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d795f5bd61ad06cc3620cfbe206d57735b4aa4683⤵
- Suspicious behavior: EnumeratesProcesses
PID:2524
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView" --webview-exe-name=dynamic-island-cross.exe --webview-exe-version=1.6.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3852 --field-trial-handle=1756,i,9609478994982423456,11935419256688863494,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d795f5bd61ad06cc3620cfbe206d57735b4aa4683⤵PID:6008
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc1⤵PID:1752
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\11b97e32-7803-4808-b4d5-f1e2d2cfc00e.tmp
- Size 3KB
- SHA256 50dd96ab49bde0f4d50602aaae435528246069120da9a5c4e5b457ec76db7f99
- MD5 8a3df3de1480af8a3d9abfa0a04ffe09
- SHA1 2514bc799296649d115b6743eaa7f8296c10ff0c
- SHA512 327a1fb9f4c57873adbd028a1e4d463c3b9d7e1006a50324ebb9949524f3a7d5b900394ad0421b30b3ade7675878ce7e25117078c42b2d37d7b47d806edc1b7a
- TLSH T1CC61B6736D35E92B8EE38A44B8862B17EAA56033D6813F94CAEC0E0C01D73DC1342C67
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\3865311d-081e-45b7-b8e0-1322ac15055d.tmp
- Size 15KB
- SHA256 aaa0fcbdc07dab653e9d3d5a6966ef1d8e296c7c0b40e3cc20e6243d02a989cd
- MD5 48f016eada835512b07dd2d722fc2f39
- SHA1 3269ff787dbdbf8e84c1d3c46c362ab040379312
- SHA512 a3a11107efba7a558e6964341fdcd00c8e9cbbde9304998df53441571a8650ff742170a40f91a31850644f1513309cdae450355e36dceed88e210402bb567c21
- SSDEEP 384:m+OBqImmJvGBLx3NaFMJFNNBSPYlypqjg6rm:TcvGtlNICyspy
- TLSH T10772AD7B2C266E276CE78549BA8A274BCB617263C1D07BD4CDECAF0F417B0841352966
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\Crashpad\settings.dat
- Size 280B
- SHA256 83c7cb963013a21c0b033fd4e4fc8eeba015ef0b3c50aca1a67beb486ec1b624
- MD5 4084685493933c423dd3946a0f2112b5
- SHA1 0a2b9039b860528c62caca3e285177707b54e01f
- SHA512 01f4ce4ac623fc7edd68c5f76367f25e0ffb8c82fcfd78cdcfb1b554c9b958a4bcd9367c3589fd2a50d9a5e9e956052a6a2dd01b3683708ac579f145e4933b48
- TLSH T17DD0121737150538CB1020330152E1480440D11B414B6000783C851D1A0445409235C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\Crashpad\settings.dat
- Size 280B
- SHA256 e961b6bdeb7410eaecd0f0a84efb74fb8be011d673cdfcab2de8dad1ea284d26
- MD5 30c2650b8e72a323597fe5ded7225344
- SHA1 ffd468a5372d37b7315d9ab46e4b46f39b3d631e
- SHA512 81039656ba7658da1543ddf28e94df47575fecb6d6b68fc63d885635a8e8e542ea1b94c545535d40fa0806626fb28c45af2e7f43787307b184f8ea7cdd8cf957
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\Crashpad\throttle_store.dat
- Size 20B
- SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
- MD5 9e4e94633b73f4a7680240a0ffd6cd2c
- SHA1 e68e02453ce22736169a56fdb59043d33668368f
- SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\Default\4ccc5d32-892d-42dc-95ef-06ec6b1f0ce8.tmp
- Size 6KB
- SHA256 476b7013004a954e875bf0eac9cfe96bff3f27d297a6678c350f2f181a4d7437
- MD5 713b13bf2750babd657dc406bd83c811
- SHA1 1c648da9f156ec9db3313c95ac44fb6bd683465d
- SHA512 74b753323d77492a5fbfe849628d47cf2ab86e55805f7964363e7272e65dbefb884d21f3ec5579d48dcb9fd490bef4cd210478120edadd530abf9e80e37cfbdf
- SSDEEP 96:stY/dNuDGMb9lkro5h16Z0ICs7/x+6MhmuecJIIB1ejeVK+gA28XM1C7K:st8PCYonICsV+FdIIBQjPKG6K
- TLSH T1DDD1B8025E28797B8CCBE158FA397B17E2F9703261D11E58E7F8851C08EA6DC230390B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\Default\Code Cache\js\index-dir\temp-index
- Size 72B
- SHA256 627b7849dcd98fca23781a1dfbc2576f27b943d3104c34f6bd3a6c850420bfa4
- MD5 45c73052e0df3b70789b69827d068c46
- SHA1 051fbbdfbd78d31b21d22bbfcf1e80284e3af2c7
- SHA512 7b069c7fd4c80c4b1151f9a757e199c31ba9461ee385a30e741e742d91ac86390e7b05e6b22fb583608c29552cad5c62acceee597a7dd40b8598d390443d36a9
- TLSH T124A0021C62489046C55013B570D3156832B5982016631B4143915664ACD53525B01008
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\Default\Code Cache\wasm\index-dir\temp-index
- Size 48B
- SHA256 d4ff7355a1bcc0164c13b481f59a862dcf929d3dc2ca05a4fddf64a695db74ad
- MD5 efeb97085f5d8f9023a62f76222798f7
- SHA1 d301b5f2b61646565a0d834882c459ce660c5d02
- SHA512 acb034d1f99563bd3a0a2f5ddb9959f18c577bd35c22886aa69427189b37c67b1a3da455bb27f3558931b226074b34c919e06a0391cc851fd2ab3e5d4fc0246e
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\Default\Network\1e06145e-483a-4dce-b661-c3805937a811.tmp
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\Default\Network\Network Persistent State
- Size 59B
- SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
- MD5 2800881c775077e1c4b6e06bf4676de4
- SHA1 2873631068c8b3b9495638c865915be822442c8b
- SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
- TLSH T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\Default\Site Characteristics Database\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\Default\a00a7043-8bd3-4dce-862d-ff441bcebe7a.tmp
- Size 6KB
- SHA256 d11c10cb0392b5fe8e79b8950f7e32e490fe8c65947e68654063b1990fbcb442
- MD5 1a4345f6aa496eb4c6d8d406789ddc20
- SHA1 75ec23dfe28ff47a06e78686a8a2776d740a22cd
- SHA512 a5b2cab2fdda3de98ff097fa7f7dea8b4d90ca413696cb869b8f3bb0865db20f3cd999ff41599541eacc85a44e91c83d37d0de6e00a92319255ca9d0a2e071f8
- SSDEEP 96:stY/dNuMMb9lkro5h16Z0ICs7/x+6MhmuecJIIB1ejeVK+gC28XM1C7K:st8PgYonICsV+FdIIBQjPgG6K
- TLSH T1A6D1B7015E28797F4CCBE149BA397A07E2F9703275D11E58E7F8862C08EA6DC630790B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\GrShaderCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\GrShaderCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\GrShaderCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\GrShaderCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\Local State
- Size 1KB
- SHA256 43c526734aef7c7af03e0a4927554754c886501688eb487ace28fd4420a0715b
- MD5 090a7eb36490886d4837093a5c264916
- SHA1 064d2b36555362a3b042cbbae5f2048a3000df15
- SHA512 89f873867b5cd89cc08c0dcc186269808d600819d1829a8a7cb422fb5da96b961fbb8a6eb1bc595192c4a567d8f39fe18eb02cc2c40d5d787709ae400a17200a
- TLSH T1A72162B2EC266B37A94252892102AAA78D703077C3104F80D6DF4A0907E71ADA66EC77
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\com.dynamicisland.cross\EBWebView\e25bf670-ee0f-447e-9e7a-2bd6b1de6047.tmp
- Size 2KB
- SHA256 12aee1164691d6460d66807837ce31526514b5a98ffb03532313b085928e8827
- MD5 28aecd13dcfc3b705f03a1f7e967f8ca
- SHA1 6ae541c29fc37f981fe5aa3a0506b8474cd3b632
- SHA512 6d2089193f5f86583582d62f45ac9b812ff18ce909bdb609d9244f6af2a6a0837cd2459ad69fc925af4c9ee97caf2b193329882748a027d0ed1c2781b3f7068e
- TLSH T11851A5736C26AA3B96A34648B9463F73CE7570A1DB512F90CADD1B0801E72AC2346C77
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1468701342\manifest.json
- Size 102B
- SHA256 0ed889bea99f74fede865222f4cacca4277c63023db98efa666d42ba1f7f9502
- MD5 329ad25b265a82c711c72c02a553a353
- SHA1 a9a666d4182caad82edd399fdab141473670c5a7
- SHA512 b81005847e76dc513b255b36704dec0ae84c922d23dc152cc42bb3eec9e18cb083e601bb90562b3f3c9b2ac540e801866f59277b9c43c0b97fd3e90b688f26c5
- TLSH T178B01220EC10B4B3000403AC0C6CC3C063372F032C4079180DE59F84E80D9DBE071E29
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1787436042\manifest.json
- Size 69B
- SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
- MD5 fb0d9796a86299d3689982f7a949dc6e
- SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
- SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
- TLSH T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_1964145042\manifest.json
- Size 118B
- SHA256 cc33e26f3b2efe862336389207db045cc7a916940213b9d33d845c82c12c8712
- MD5 acb0c12cc7e5345764763e37bcebbec8
- SHA1 4147b2615955c51a6054c807c2397e4d7d10ee03
- SHA512 6777da8af66a77c28049eaf1b49ba7cdfaa08a8f381c27dad4af0e980e8d5a7ea0df0c3f1fd0cbc0cbe93a83a07d130ae24dc4057471de830fac60036b1c2f3a
- TLSH T10EB09222DC80D832697693A84E2246D0F238234B2568AA493630048C0B2E2F182A2721
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1188_697418690\manifest.json
- Size 135B
- SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
- MD5 616eb6b585f16811dc5db5063e088cd7
- SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
- SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
- TLSH T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
- MD5 SHA1 SHA512 TLSH