Edge.js

File has been identified by 4 AntiVirus engines on VirusTotal as malicious (4 events)

Symantec	ISB.Downloader!gen406
Avast	SNH:Script [Dropper]
Kaspersky	HEUR:Trojan-Downloader.Script.SLoad.gen
AVG	SNH:Script [Dropper]

Wscript.exe initiated network communications indicative of a script based payload download (2 events)

Time & API	Arguments	Status	Return	Repeated
InternetCrackUrlW July 29, 2021, 9:44 a.m.	url: https://fe1eaf89.office.drpease.com/pixel.png flags: 0	1	1	0
HttpOpenRequestW July 29, 2021, 9:44 a.m.	connect_handle: 0x00cc0008 http_version: flags: 81788928 http_method: POST referer: path: /pixel.png	1	13369356	0

wscript.exe-based dropper (JScript, VBS) (1 event)

Network communications indicative of a potential document or script payload download was initiated by the process wscript.exe (12 events)

Time & API	Arguments	Status	Return	Repeated
InternetCrackUrlW July 29, 2021, 9:44 a.m.	url: https://fe1eaf89.office.drpease.com/pixel.png flags: 0	1	1	0
HttpOpenRequestW July 29, 2021, 9:44 a.m.	connect_handle: 0x00cc0008 http_version: flags: 81788928 http_method: POST referer: path: /pixel.png	1	13369356	0
send July 29, 2021, 9:44 a.m.	buffer: ! socket: 840 sent: 1	1	1	0
send July 29, 2021, 9:44 a.m.	buffer:  ~ z a ùé¢åE €“Ô’CÉn+ê'‹­NDªSŠs6»/5 ÀÀÀ À 28 9ÿ fe1eaf89.office.drpease.com  socket: 976 sent: 131	1	131	0
send July 29, 2021, 9:44 a.m.	buffer: ! socket: 840 sent: 1	1	1	0
send July 29, 2021, 9:44 a.m.	buffer: ! socket: 840 sent: 1	1	1	0
send July 29, 2021, 9:44 a.m.	buffer:  ~ z a ùêÙJ ÔãØÍ×u$Æ ·2ÐÀHˆRÕIá >/5 ÀÀÀ À 28 9ÿ fe1eaf89.office.drpease.com  socket: 976 sent: 131	1	131	0
send July 29, 2021, 9:44 a.m.	buffer: ! socket: 840 sent: 1	1	1	0
send July 29, 2021, 9:44 a.m.	buffer: ! socket: 840 sent: 1	1	1	0
send July 29, 2021, 9:44 a.m.	buffer: 5 1a ùê|ǖ'aû[xÂ]d::R„àq˜hû&‚¸ðM  ÿ socket: 976 sent: 58	1	58	0
send July 29, 2021, 9:44 a.m.	buffer: ! socket: 840 sent: 1	1	1	0
send July 29, 2021, 9:44 a.m.	buffer: ! socket: 840 sent: 1	1	1	0