hxxp://premierautomation[.]co[.]uk

Analysis

user interaction
yes
max time kernel
149s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/10/2026, 19:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://premierautomation.co.uk
Sample261012-x3dvhad191

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
212	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1846164713-4096795028-774071693-1000\{A0E95BBA-EAAC-43F4-AD1D-C2DA8FB53392}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4556	msedge.exe
4556	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1732 wrote to memory of 1996	1732	msedge.exe	88
PID 1732 wrote to memory of 212	1732	msedge.exe	89
PID 1732 wrote to memory of 3372	1732	msedge.exe	90
PID 1732 wrote to memory of 3368	1732	msedge.exe	91
PID 1732 wrote to memory of 3372	1732	msedge.exe	90
PID 1732 wrote to memory of 3372	1732	msedge.exe	90
PID 1732 wrote to memory of 3368	1732	msedge.exe	91
PID 1732 wrote to memory of 4356	1732	msedge.exe	92
PID 1732 wrote to memory of 4768	1732	msedge.exe	102
PID 1732 wrote to memory of 4356	1732	msedge.exe	92
PID 1732 wrote to memory of 4356	1732	msedge.exe	92
PID 1732 wrote to memory of 4768	1732	msedge.exe	102
PID 1732 wrote to memory of 4768	1732	msedge.exe	102
PID 1732 wrote to memory of 1976	1732	msedge.exe	95
PID 1732 wrote to memory of 1976	1732	msedge.exe	95
PID 1732 wrote to memory of 4512	1732	msedge.exe	96
PID 1732 wrote to memory of 1976	1732	msedge.exe	95
PID 1732 wrote to memory of 4512	1732	msedge.exe	96
PID 1732 wrote to memory of 4512	1732	msedge.exe	96
PID 1732 wrote to memory of 1972	1732	msedge.exe	98
PID 1732 wrote to memory of 1972	1732	msedge.exe	98
PID 1732 wrote to memory of 1972	1732	msedge.exe	98
PID 1732 wrote to memory of 4740	1732	msedge.exe	101
PID 1732 wrote to memory of 4768	1732	msedge.exe	102
PID 1732 wrote to memory of 4740	1732	msedge.exe	101
PID 1732 wrote to memory of 4768	1732	msedge.exe	102
PID 1732 wrote to memory of 4596	1732	msedge.exe	107
PID 1732 wrote to memory of 1928	1732	msedge.exe	114
PID 1732 wrote to memory of 4580	1732	msedge.exe	115
PID 1732 wrote to memory of 4488	1732	msedge.exe	116
PID 1732 wrote to memory of 3104	1732	msedge.exe	118
PID 1732 wrote to memory of 3104	1732	msedge.exe	118
PID 1732 wrote to memory of 4556	1732	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://premierautomation.co.uk
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffe3612c188,0x7ffe3612c194,0x7ffe3612c1a0
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,15016736067564620966,2827432741974402770,524288 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:3
  2⤵
  - System Time Discovery
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,2452283613200451530,15608659093233720768,262144 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2364,i,4268983080703238368,16200239959330501154,524288 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,4087481752908696400,8786443606723556864,2097152 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,14625415944220665023,769410638059103527,2097152 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,5005607339006297392,1908897438383826958,2097152 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,8495212264255012632,6396657437940221922,2097152 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3760,i,1903451871190347476,14929288621794287783,2097152 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,3424880168229941237,9975627272443167610,524288 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,225362982599780153,17765049398319774692,524288 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,1292752187092491241,2475137432030293362,524288 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,1292752187092491241,2475137432030293362,524288 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,1625702901489815033,12710100439653362181,524288 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:8
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,12230710808896924341,13968794211535788575,524288 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,2499414163147985383,622674617514294458,524288 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,12537272952361140420,9600175734273413667,524288 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:8
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,16473936733687133453,8047394066899993735,262144 --field-trial-handle=2348,i,14313164890268610697,15054565575758325023,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4556

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3444

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5bcdbf80-c63e-4372-a8bc-6212ae37d961.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5bcdbf80-c63e-4372-a8bc-6212ae37d961.tmp
Size 8KB
SHA256 f030c09548e443517b1ed75fb9bce5de588757a98fa04ac25852434e5d2d4472
MD5 e62a7d3b4b0687275e67962492b9d4b0
SHA1 97e4c88f52977385e6ce17485955d1d8a669eae9
SHA512 f1e1283bead834f5ea94e0281c61a2827923ab32381d87138096c68f445abe881e334ec471516d635e7e3134037bab091df1bd669765188e6d3baac12d49c43e
SSDEEP 192:NONm6nnHQQmiUyP2PS7YcX5hQDP1wO01g8SJrHg3Qq54U6:NONm6nwy2q7NX5+DtwO01gLJrsr4U6
TLSH
T184120B35A9A4AC774EE2A585F0C731135EA55127EA897FC4D1DC3E1C01DEAAC234E822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

77e77d6d-bb13-4103-98fa-fbaed6890fcb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\77e77d6d-bb13-4103-98fa-fbaed6890fcb.tmp
Size 18KB
SHA256 8755b1af6eab14158bd8b023fc8943e409596d351405a22505729d06cf0dfb4b
MD5 3161751c27f7f227dfd8c1049fe0cf96
SHA1 672e5e5dc5515ac64100c0bfb74d14953e11d326
SHA512 9846fb719642a1d43f028b2df980c54a9f4cdc1ab5f70a32edaeeeb59a65a8d8b82b319188cbc27a6c799a90c1e29970a4bfe471a51c0a784967dcd2e02dedef
SSDEEP 384:IZcIhsND4FbQiyt+9ia5QX5+DtwO01gLJrVr4i4/uANEbEeUm:2h5EiH+kDmOfLhVr4LJCbETm
TLSH
T197827D32ACB09C375AF79586F48731179EF8A037F6846BC4D5ECAF1D01D96AC130A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

973a88f3-9d28-4395-96b4-93141824bb8d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\973a88f3-9d28-4395-96b4-93141824bb8d.tmp
Size 18KB
SHA256 c2e9afd6db600559c8739fac81af72031f0353666de20b1efc21c85ae9070165
MD5 c3b1b27bc50e40a593a027153d53ba17
SHA1 b7ad7495e73a27de7897fd97af643f1fc338cb9c
SHA512 5efbd3e07c0bc79620fd7d367fd94e41f836db9bbe06e4d9b6094227c278345ea88ec458380bd6061f8efc3ee9161a575452fd1d9bf3678a6caa6a0b58c576f6
SSDEEP 384:9ZcIhsND1FbQiyt+9ia5QX5+DtwO01gLJrVr4i4/uANEbEeUm:lhIEiH+kDmOfLhVr4LJCbETm
TLSH
T1B2827D32A8B09C275AF7E586F48731179EF8A037F6846BC4D5ECAF1D01D96AC130A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

981b5434-a774-45a1-af7e-987c862d4768.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\981b5434-a774-45a1-af7e-987c862d4768.tmp
Size 25KB
SHA256 4ee3f1a1143afb0463acb7d7564192ad660a7e1c12a7f4178f5a6dee82595fab
MD5 1e22daef2b89a468e45a9a177ebeb70a
SHA1 9a282e4bc517740c05e5c31a328829e3ac973176
SHA512 9f19fd3d0f0a77a17dc3d38ac201f3e4d0eab33c51cda36ac1020dc23d3eb9d556b2c729eae1370b5bbf4998eff9c77b5ec45bfee1cc694bd89a8ee13f075067
SSDEEP 384:viFiZcIUzsNd8TUNTUlIl1FbQiyt+9iE5QX5+DtwO01gLJrxr4i4/uANEbEeUm:6FQo0wgFEi1+kDmOfLhxr4LJCbETm
TLSH
T10EC23BF258D38837D9AE9B47A77E2D179EBCD027F540A690B398591CCC961BFC30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
MD5 7aa846396cdcfea376b8811e8e19c8ac
SHA1 ec25e76211c784e758c9892460a28903222a2b23
SHA512 4816b3d9d1883ae78008726282d2a4c42f9b30d81ff004d60af22873868f3ccc332adb8973ee5a1ed3fdec5d56a832c2ead1cfe30616125d07466daec4eaf02f
TLSH
T17DD02203FF038A2CC8C00CB2002EC22C0F8AF8000A00B2C08030328BCC28B00B02EC88
MD5 SHA1 SHA512 TLSH

Submit Download

119415f9-6c77-40c7-afae-4cd670d8bdf9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\119415f9-6c77-40c7-afae-4cd670d8bdf9.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

4d708dd4-4cda-4d62-8ce5-82cd7f52aca9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4d708dd4-4cda-4d62-8ce5-82cd7f52aca9.tmp
Size 10KB
SHA256 50cbf61376edd064b55eef329235e90e857cd097d8ead7e23652d4139984704d
MD5 b65f179784f39bdfd474b76ec9c60963
SHA1 835aea44fd8a7427289ea968e4e1964683150e8f
SHA512 a326dc3d2a5a1e8cbc3493b1e9f483e47ff80ea4e6f7ab67f64e1e9f21f7bf54415d94aefe0a49c43abfd6223f9eb2f54c9b95c3d7426cfdf57ed22849d0d3bc
SSDEEP 192:sxZWpRCWx9/fRCs8iOIdpNMQHW6+WNNrrYVYYBAlR0Ig5jJ:sxZWpnx9/fRCs8ifNRHbN4Vf7T
TLSH
T12F22C8516E38A63B8CC7D209BB65BF13E5F95032A1D01E48EAFC961C05E66CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75054b2d-e7b5-4267-bdb0-366194e11a90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\75054b2d-e7b5-4267-bdb0-366194e11a90.tmp
Size 10KB
SHA256 9dd8a18a0527723b4ff2329294915cfaff74fa69567bb5ce6eca315b52eb5f20
MD5 7abec6da6c93116ee21add3fc6de9bf0
SHA1 39f5d0e836a81872a114f90ab136f268224a90a7
SHA512 7ad0b096c6c2af030702daeb2cb46469d4954534df9f2add2a7dedd3bd2a85dc8723f2379e7bc1f9ac651e4027cb77d47bc214af961447f0de5aa93abe2e0d79
SSDEEP 192:sxZWpRCWx9/fRCsiiOIdpNMQHW6+WNNrI39YYBSVR0Ig5xJ:sxZWpnx9/fRCsiifNRHbNc9f7F
TLSH
T1F722C8526E38AA7B8CC7D20DBB65BF13E5F95032A1911E48E6FCD61C05E66CE230741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9634299f-2f9a-43e0-a5b4-4ecc6dc84ed8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9634299f-2f9a-43e0-a5b4-4ecc6dc84ed8.tmp
Size 27KB
SHA256 43b89d5c0925cd412b107d98ed7f22a288021c3da62481b067cc9fec98b7993f
MD5 85f8b4ad907595e92fa52032dff7644b
SHA1 37d685f7cfa365831bda26aa880fa09596d15b76
SHA512 c72e832401eea97ef5f119114536c5d088d251838be66347d4822f71ebbbc3cbd86254ec03c6c85130ce15f4d1e5383abe175da0166d3f1f83a8def7e9c5655b
SSDEEP 768:BuyYR7jWv3NpB8F1+UoAYDCx9Tuqh0VfUC9xbog/OViCLlGcvX6roplwXG:BuyYR7jWv3NpBu1ja/CL8OXx6G
TLSH
T1C7C2E92B640DCB7E4FC01E9DDC5A6F9B7E9802C7A6548D4047FA984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003a
Size 1024KB
SHA256 dc95634b00a388cdecdcc0d5b266a6d5c5e8bd76cec546d1debd6a7dac9aad4d
MD5 dbcaa43782bc6385e9efb257efa6fc8b
SHA1 ce81e5a423d9229ac438a18df6cf22ebb64147ba
SHA512 bac6c6338f521ed25528e44ff4eaaf78ce598fb40e2797718c00aab455450191bda117a3137399b2c6c267a09cd829e8024a175c1d63ab116a29a14d37aa1b02
SSDEEP 24576:OdsgADzA/oQ/mIxWPt/AlfsAWvoGiyNj+ONbuUBg:csgAXAlmM5fsVoU910ig
TLSH
T1EA25332317FBC3917B6B1846B509DAA7093F06ECFC8E2D5EFE913608791188ECA4D459
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003b
Size 64KB
SHA256 569c4ce396404656f65a9ab8141fffaeabe74a00c43be9dc1db2b76aed8a9900
MD5 2deb23c7eef12d697acb1ab636f3c41c
SHA1 c670db98f0baac16473edd9c7ae85762eb6bd230
SHA512 ff4e4990b0c0899e494f7d41f0f1f4a6921753d2fc687c2622458d34c354eb4fda1bcdfd7d839212f729ec31c59cb7939a51fd8c31ff8368f9a5da903c4f7480
SSDEEP 1536:i697Z3+Lnjp1I7+/1rhuN/BoGhkNrKsmTdKE1aX1S5/:xO/pR/ZclPqmF121Sl
TLSH
T1285302C58BD3AD1CE36C979004CAFE05EDAD4D872495E8540B20617F20869FDCD66E9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 5fc61be4b573670ecb0a3f32f79b2d60cdcef85bee499a9b66ee91b282a6cc72
MD5 30228399d8fad3c7d15ecb96e61c622a
SHA1 ef43c4fcbd28d3a55cf75e26a60d15293edd87c3
SHA512 fdb6bfbae35311a5fef7e0a79213424dbf6dc9abff0a363a4bf6f7328e7a6579896f68c70f4a0f5388383afeca77b0588b72c6b1746e7f6f75f9efb9f4e602f5
TLSH
T1AA41BB00AE903255FFF8157BAEC51DC33AB75D9CA1430F023B6ADDB6954F79A6144C50
MD5 SHA1 SHA512 TLSH

Submit Download

8080d0f3-63a1-45bc-b64d-34a477ad0e07.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\8080d0f3-63a1-45bc-b64d-34a477ad0e07.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

58bc3d5d-a02d-4100-8b41-3f17c0a79139.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\58bc3d5d-a02d-4100-8b41-3f17c0a79139.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

66553456-bb93-487f-bedd-a4f81b76eff5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\66553456-bb93-487f-bedd-a4f81b76eff5.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

7965093f-fbe7-4bae-a47f-751fdb792443.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7965093f-fbe7-4bae-a47f-751fdb792443.tmp
Size 2KB
SHA256 04d54938928edbc46a9f67d963f9b0d8a7c1b27fd361705c226e14ee7d7ee659
MD5 114f2625d7ec1ce9effa7d057f1aff7d
SHA1 7b27e67e254f3770834ad22bad22a798436c562c
SHA512 e34dd132045461647bf7e6d8b413a523c1568ca3254d393bf9730ed73b6a1386314d58164b9fd0be91120bcfe75937afaf285a154b1c9bcb72955c7d947f3559
TLSH
T12941CEF2C2E5CA6DD8121AF196246E1BCD3D0655432C3C09CEE4AF5BA7E2171D201A4F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 12649b0b0cd96492acde04463fbc112f0963fb07585f245fe1e5fea139d2d682
MD5 7a2073c5f182b9121dd3ed115f7d6c65
SHA1 bfb38c532364661bbf737f4f448015746f3dc952
SHA512 ba7a431dd85beb59e8d804248197ca27f710b0d5ee200a92f6dc1e59fc9581b6b4243db12f3309b2d6ec1630bfb6e45d31aa6c0f0212731ec40d171768beb68c
SSDEEP 48:KglEZVnTHIbbcLq2EGqTba5iISuTK9K1oTxMDYBSqwyLdcRtfLPwbD2jISlwK9lR:Kg5T2KIUCyOgKv6AViKGA5
TLSH
T18A913192746B424138FD258C81A49A6A42513273301CE9FFBFBD45528E2FE444EFE8E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a5cc2904-9071-4617-b460-1c53b2bd1d57.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a5cc2904-9071-4617-b460-1c53b2bd1d57.tmp
Size 10KB
SHA256 419a9c557bb80a4da5ed1552ba00bfb940f0d3384c47ad71b95f7f4b742cde95
MD5 4dc01f3dfd2f9032abcccf1b5deb6f55
SHA1 c3319b33c036e35fdda3a9211e59040589d9c869
SHA512 623157094cf207980afa005e4a6a76a165537430fc596ceca3a6ccfcaf7abbbdff43803f5d43657605be7a9a801272fd8b6e6eed5eeb24ccaff55dda72166003
SSDEEP 192:sxZWpRCWx9/fRCsiiOIdpvMQHW6+WNNrxGBYYB2ia0Ig5xJ:sxZWpnx9/fRCsiifvRHbNoBftF
TLSH
T14B32B8566E386A7B8CC7D20DBA65BF13E5F96032A1D01E48A6FC961C05E76CE230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e0d300f1-e13b-4948-8662-f9e4d5dbe7d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e0d300f1-e13b-4948-8662-f9e4d5dbe7d1.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2630050-5534-43d9-aa6b-214decfa0352.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e2630050-5534-43d9-aa6b-214decfa0352.tmp
Size 10KB
SHA256 2aa8da4c73c0f03dccaf4fffcb4485a43c7389600f206d3921ef2d77c36532f0
MD5 a1f1d575f23a77d93adae8e54f6f3f15
SHA1 4959694e949fe704b1e966907a0864455656638e
SHA512 10b71b87c3ca49c85c321ffe1745a5dcab383486d9e67256bc266f03ed29de1c2ab31eea995742e6371abc2134f212bf732fde2f17de468d34e80e99ab35f82b
SSDEEP 192:sxZWpRCWx9/fRCshiOIdpNMQHW6+WNNrv0/YYBAlR0IgrJ:sxZWpnx9/fRCshifNRHbNo/f79
TLSH
T1C122B8126E38A67B8CC7D20DBA65BF53E5F95032A5D01E48EAFC951C05E66DE230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

fd7222f4-0f86-47ce-ad71-26190ed6e2b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\fd7222f4-0f86-47ce-ad71-26190ed6e2b9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d490dfa7-3888-4d38-bce3-6d96c6b69492.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d490dfa7-3888-4d38-bce3-6d96c6b69492.tmp
Size 8KB
SHA256 0b0e2d6d49eb232b18bbbac2852fadf3a23e1f5b89592ffa620fcdeae599b85e
MD5 13dfeb61b51bf8054db44b9c300f2881
SHA1 56792763a0e68c7ea8a88d28dd58e1b92af2dc86
SHA512 a0efeb10bbf616e3629aa57405a3330ef8722169037de9bfd8fa369863ef7e63eb4abbe121814851148c390243b2925d924d52ce44387dc47357618115da4632
SSDEEP 192:EONk6nnHGQmiUyPDSQYcX5hQDP1wO01KMcQ7U6:EONk6nCymQNX5+DtwO01yOU6
TLSH
T17C02EA34BD786C7B8EF3AE45B48737136F952127E5942FC4D6E81E1C01DB69C230A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

81cffd2d-7d20-4046-a0ef-1333524c34aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\81cffd2d-7d20-4046-a0ef-1333524c34aa.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 edfa7bbad2fd6198939f814662d690d8c60b6be6be867c56aa67f9f5c85e98f0
MD5 82207136da1160512f340af691d35607
SHA1 56d36c7393d366005f682382e52af012660a8a85
SHA512 7c269ccfb8e0cec28ece641b42bd2872e53db0848b3940720645f11f1cc730869319b7dce63514b28c2617eab158111a5e58ed28bcf6814fd3eb4477b4f4a572
TLSH
T1FE411C5CB6F91148B3B77E5A9BF6A86C587FB8773E06849E10010D4E0A72B408961B33
MD5 SHA1 SHA512 TLSH

Submit Download