Analysis
- user interaction
yes - max time kernel
1s - max time network
143s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/08/2026, 04:26
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.oaken.win/
Resource
win10v2004-20260513-en
7 signatures
150 seconds
General
- Target https://www.oaken.win/
- Sample260809-e2h4qahl3y
Score
3/10
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 4288 msedge.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
pid Process 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe - Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe - Suspicious use of SendNotifyMessage 32 IoCs
pid Process 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe 1152 msedge.exe - Suspicious use of WriteProcessMemory 19 IoCs
description pid Process procid_target PID 1152 wrote to memory of 4272 1152 msedge.exe 85 PID 1152 wrote to memory of 4288 1152 msedge.exe 87 PID 1152 wrote to memory of 2864 1152 msedge.exe 88 PID 1152 wrote to memory of 2864 1152 msedge.exe 88 PID 1152 wrote to memory of 2864 1152 msedge.exe 88 PID 1152 wrote to memory of 3896 1152 msedge.exe 89 PID 1152 wrote to memory of 3896 1152 msedge.exe 89 PID 1152 wrote to memory of 864 1152 msedge.exe 90 PID 1152 wrote to memory of 864 1152 msedge.exe 90 PID 1152 wrote to memory of 864 1152 msedge.exe 90 PID 1152 wrote to memory of 4672 1152 msedge.exe 91 PID 1152 wrote to memory of 4672 1152 msedge.exe 91 PID 1152 wrote to memory of 4672 1152 msedge.exe 91 PID 1152 wrote to memory of 4384 1152 msedge.exe 92 PID 1152 wrote to memory of 1740 1152 msedge.exe 93 PID 1152 wrote to memory of 1740 1152 msedge.exe 93 PID 1152 wrote to memory of 1740 1152 msedge.exe 93 PID 1152 wrote to memory of 4384 1152 msedge.exe 92 PID 1152 wrote to memory of 4384 1152 msedge.exe 92
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.oaken.win/1⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1152 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffc1aaac188,0x7ffc1aaac194,0x7ffc1aaac1a02⤵PID:4272
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,7529654056883829601,5655075857574366956,524288 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=3048 /prefetch:32⤵
- System Time Discovery
PID:4288
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,3523065985186156777,10127430592126120450,262144 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:22⤵PID:2864
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,3761792301499030860,15860574072307869537,524288 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=3056 /prefetch:82⤵PID:3896
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,7469111624452447178,16687101691825826722,2097152 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:12⤵PID:864
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,1223813795764991257,1390650185442586747,2097152 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:12⤵PID:4672
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4132,i,17908402366472893577,4108138496862546909,2097152 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:12⤵PID:4384
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,7799416363898305851,1789702788160497219,2097152 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:22⤵PID:1740
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,9560881362821243491,13402436486959516294,524288 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:82⤵PID:2952
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,17125845749288508003,4034773335416800670,524288 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:82⤵PID:4256
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5520,i,12953265826738523632,489822619867559161,2097152 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:12⤵PID:2336
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5036,i,3235389497465775537,3378125580057953331,2097152 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=4112 /prefetch:12⤵PID:3808
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,14017158226256652073,11426374875039560079,524288 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:82⤵PID:4636
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,9364610094349418677,6293064816092371874,524288 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:82⤵PID:372
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5672,i,10955635241103608295,6560075340511506284,524288 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:82⤵PID:2436
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4772,i,443727116877264221,16560189231814064241,524288 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:82⤵PID:4680
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=5040,i,15677710514159484069,16664727431917493925,2097152 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:12⤵PID:5072
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4772,i,443727116877264221,16560189231814064241,524288 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:82⤵PID:2064
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6320,i,15955671891548891859,16813218380129676396,524288 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:82⤵PID:2404
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5712,i,149351322561211487,5094124146152145952,262144 --field-trial-handle=2236,i,3410388141454565260,16795806039684961448,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:82⤵PID:2092
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵PID:1904
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
- Size 105KB
- SHA256 ed54168e9bd9b049b307ad0198c8ff96fedc239690683bbbe954b5b6ccc78d1e
- MD5 e13f095bcb4b9c0f4556bd8310cd4c8b
- SHA1 6f2ae1857ed820a530bece8a02541eb1eb26db43
- SHA512 391fa95533bb7b534e5cf1ef628f7178db1ff4a768c5f98f0211d091434bef89f8aadb2e77a3b24168c58577d469227622dd559bec9b2751e416ce9e380714f1
- SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7N:fwUQC5VwBIiElEd2K57P7N
- TLSH T123B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
- MD5 77a76342e47369b91c295856d0d136ad
- SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
- SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
- TLSH T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
- MD5 6503f091cfa7258a2190ed65490b1bdd
- SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
- SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
- TLSH T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 3KB
- SHA256 33cd59b1c5f2d4862fa10a5778229505fae9bcda1590e3cb9b43848b7983d968
- MD5 87c089b43059801fbadc93019b0a8e02
- SHA1 740e460803ce1b67258dc4ccf9844bce46a22a38
- SHA512 dc6ec6e60de5796c87b6f8ec37455fe86442ebdf866c553efcfdb1f3932d46f5c328a485c70d37644492fee09c158f96e1a82d603a6bc641986ec330c3c0634e
- TLSH T1CD71A229196E50B0F7A11B31E4D10900F57042B90EB72EDB36F8DD7EF92EF63882554A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 3KB
- SHA256 d7a92abadd570cd3dd19df1696d8153b66f2455b8b1b9c7930e5b9bdc174c85a
- MD5 1e000ba1cd341761a00d55930bbb80bc
- SHA1 648e1640d30e8cbeb09588c0e6813e36897bfed3
- SHA512 4190166bb663bb92ba3a9038b15dfca73d8e20586b0b254f3a3eb762522f0f1d43d0253b1ab603e4330666d625420fe4a427f367a8bcd09506b100cef5215a2f
- TLSH T1DD719329196E50B5F3A11B31E4D10501F57042B90EB72EDB36F8DD7EF92EF23882554A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b716.TMP
- Size 3KB
- SHA256 8ac3a415566c94162bf533a3bb7f5d5b79b9843e0f63a78c5418cdbc8074223a
- MD5 853f10fb967f7a6226fb4ead65c73e6f
- SHA1 2fa4b2883c446b0feb29403f2970914df67c2f23
- SHA512 c61deb066da5eac435cdf75cae3f92a6708f5cc2f78488570ca71e933d5240ee9f1ec0ca57ce9d19041045ef3649d8061886eedd935abb142bbb776043f43303
- TLSH T1BF618119194E14B5F7611B31E4D10600F9B042B90EB72ED736F8D97EFA2EF23802655A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
- Size 70KB
- SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
- MD5 efe54a870e0f5ff28d7e00036b861065
- SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
- SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
- SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
- TLSH T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 2KB
- SHA256 7f004f01dd0a7ed04bae7c19129260b1349e4b8e26bdf742f051d2cf6b2f8410
- MD5 b7b85389ad1d99033c80c6352ea73f1a
- SHA1 78220ed54232c26f35bd302970f6bcaebd910efa
- SHA512 3be1da89506b6393003c23a447f9742c3a3928b6d3b7ec38ee73a68f35095fcb15de5af90e2641c9311bdddd3b1366e03dc9e8ad11a9fa8c855ab88cdb80e7ad
- TLSH T150517CB7C3F9862D8C6652F06B546A2BCE5D0914831C3D3ADAD5AF0B93D3471E20175E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 2KB
- SHA256 cf683ee4e838f08af1a3b5d1ef091f7843ae6c0c125513b504680c91658b75ea
- MD5 156246bc0a5871aa869d11f3b2479363
- SHA1 1fce34d9ed5da423ba8fa0c2fbd1bd983db3602d
- SHA512 4e5894df95f26be29baf572523101033c3cf1b3df1449f67649f03c3001e9d6123822ee02300affaa37a5257ddec326712c16a892db6c778b264209c944c1d6e
- TLSH T18F417CB7C3F9862D8C5612F46B156A2BCE5D0514831C3D3ADAE9AF1B93E3471E200B5E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 13KB
- SHA256 2205999d9fa3a4d14e3efa626ae7557f842548fda310cec95ef175a0d1dc5982
- MD5 62bb74d8036df40dbe6c44c6a38b2bda
- SHA1 d5e7930c7d2550c2a3c8b45b586bfadaa3010e26
- SHA512 93f904b00681784613bfb7120dd5fd0852aafa296938ae392832a4a98cd78a84b050aa85520475f768211caaffdc69a13f81696f75de2094f816449ac535683b
- SSDEEP 192:sxZN/yM/jK1Ml8UQOk3/fisH6/qbEdpnAXHW6+WNXTYXYLdI7SPIg5MJ:sxZN5ql3/fisa/f6HbcXqly
- TLSH T11052D7116A385A77CCDBD209FA51BF53D6F54462A2900E58AAFCDA1C00E7BED221781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 12KB
- SHA256 22969e0bf31181aa59cefe8bb08613c6a70dbe8b7d8a7ae53b740405ae3fe92b
- MD5 effc624bd8f532e52536dfc696a6f801
- SHA1 d919e91a6483def66689505e1e25f1b2ccd03b98
- SHA512 34900f0d3292d9ac90c918599ebfac12b467eeb3210a0b44cfa28851f31a098bac7d80d14c04e45f59f8ea93610e64c48182163b4579433ae89d37abf39e7444
- SSDEEP 192:sxZN/yM/jK1Ml8Mk3/fisH6VqbEdphAXHW6+WNXZF/YLcSPIg5AJ:sxZN5M3/fisaVfsHbH/8C
- TLSH T17242E9116B386D77CCDBD209FA51BF53D6F9046292900E58AAFC9A1C04E7BED221781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
- Size 30KB
- SHA256 c61cb342e8ce013c1654b59193f48e3c6f7c2afa90dd99581e0974ddcddbf9ca
- MD5 85c0e7d8b5e94afe7967dfa41a20dd91
- SHA1 25a1f2997de0fbd9f1fa54fa41e23b3b8ab8fb34
- SHA512 a94f208dc559dc332005a76a7d4ad5e77310e0f9423c20f03c7e6ac4b82723155a4257faa8459a42c204d9318134a15f3ea24ee2cccecc0b0014bf02717f951a
- SSDEEP 768:uos6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNproae:uos6pD1WvxzWju1jahILIsNCae
- TLSH T109D2FA3B680CCB7E4F841E5CEC2AAF967DD801CBAB98895447FA444C03C77EA512759B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
- Size 6KB
- SHA256 c5f03a491660728b78bba23848bd4f1177f46e107f71a258e490d9c705f47970
- MD5 85913179e86a98b3af28b3b8c786a833
- SHA1 5713667b7edffce24acaed1459eae1b19012b078
- SHA512 059150e78ccdad2dd78269e1d6aba0b9bec8708693d59a6a67cfb3c897021738fe7836a52b39a0179fe28b177e1b3dd38c80f175aae67dc69f47b69532f280d3
- SSDEEP 96:KUAAKteP+zWKwEfysKva+OLeK8Irs4KpSyg:iihLTdj/g
- TLSH T1C4D1311231BB12123D7E290CA799972B4B8276633414E42B77A900725EB7F350DFD8ED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 12KB
- SHA256 043216271fc31221e4d4a3ad3a9f931ff885054d40b6f4c36653947c854ba03f
- MD5 7bd234f07a4d56d155f24923161ba2f5
- SHA1 2106dbf4d728b5ecdb13405260d3f97220d07ccc
- SHA512 c75acfc4ec560dc89e278bf1bbe982a684b05eb7e1ef1228f8356ffe2f88d55eded39e7ef28f1bba1c062606c37bcb9886bb84af7b986cf2676d4cceb4b5ae86
- SSDEEP 192:ukLsN6DQ2Nvw7+3vCTFQmiU12cR4atb0RO2oSBpbMIq4LjqCc:HsN6DfNvjgjHea9sO7SB2w3c
- TLSH T162524A36A828AC735EB39144F64736139FB540A7D6866F84C6ED6F0C00CF6AC230B91B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 12KB
- SHA256 1045d60216e0b95c56061fa1d2602efece78da9c8489c9f2b97c1b6e5dc9c841
- MD5 67ba06f4db871af7eff12882e62ebb76
- SHA1 fa255fcb2e6da5a19add327c61ff6fa34aec9930
- SHA512 6a5b4ce351500ee5d7663b91baa17ea3d65e0f8b7ded7c91fc23fcb82352f85347be847b5b95cf7759fe49fdf843989c545a007d78a801c4586d291f79a174e8
- SSDEEP 192:ukLsN6PQ2Nvw7+3vCTFQmiU12cR4atb0RO2oSBpbMIq4LjqCc:HsN6PfNvjgjHea9sO7SB2w3c
- TLSH T11F423A36A828AC775EB39145F64736138FB540A7D6896F80C6ED6F0D01DF6AC230B91B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 12KB
- SHA256 2e2731befc12ecd9e2b697bab5dc2393cff58415ae966432620d507165cfe35e
- MD5 bb6941596a4e019203c7a3f5533aa351
- SHA1 78063a906e09d8117fd899f21b83d52978633e58
- SHA512 64a40ce5eddfc8d840dcbed2228ec8e9d6b6c6c27535e813c5b705db5500497c2e3a3c96e8f5ec2508a83fa6ef6e2e347eca6fe10ab2e002f85a5b06b6c2398d
- SSDEEP 192:wLsN6PQ2Nvw7+3vCTFQmiU12cR4atb0RO2oSBpLMIq4LjqCc:GsN6PfNvjgjHea9sO7SBOw3c
- TLSH T194423A36A8286C735EB39145F64736138FB540A7D68A6E80C6ED6F0D00CF6AC234B917
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 12KB
- SHA256 59617cb0417704b8417c863ce1ac067befa815954f6e293eb8a4a4050fef3acb
- MD5 862bd55e04d9330448f1726824064711
- SHA1 bb05f8f02062062abbf7b435a57aead93b37fdc9
- SHA512 04accec15dd0e38f179d937eefdd37a26c98de0d8c364fad069998502fe4107dd6aefbe0f74f8ea662f3fab0076d105ba206f5b02e3a6ead87893f94851052b5
- SSDEEP 192:ukLsN60Q2Nvw7+3vCTFQmiU12cR4atb0RO2oSBpbMIq4LjqCc:HsN60fNvjgjHea9sO7SB2w3c
- TLSH T1F1423A36A828AC735EB39145F64736138FB540A7D6896F80C6ED6F0D01DF6AC230B91B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 20KB
- SHA256 0490978f008d8edcebfe80d12358525edbf5f4164123073e1d704a73e8317662
- MD5 58446a3f5ccae149fb23fe7b1088f3fc
- SHA1 068c4ab447d7faddf35041731d5b27f7aadba9e4
- SHA512 db80000cdd37cd8b11d40b10fd9e0e8aff060d1f4fca609a63e73e6b52fdd624c575b4ce7f4a3570755a7d0d23e31a317c1c67a1e57dca359938a403fecde230
- SSDEEP 384:oZcIEzsN6DfNvjgjBea9sO7SBkwnTKwBODNZOCu53:W4Lkt/iO2OwnewBKZOx3
- TLSH T131928D716C3C6C739EE6A145FA4A32078EB880B7E6D52E54D5EDAF1C00DB69C230BD16
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 16KB
- SHA256 8877f3d8f7988bc31d5b3487950c577412b0d8015ed9f3bca2a9879967f7be7e
- MD5 45e4fec4ed4be91683ee2850c141bfba
- SHA1 7aa179b26aa661548ed84e193d250166e338ef7b
- SHA512 e52e32ca28d4b01b25a2e73ea80b351dd75a47aac52ec27a7fef6c985b81cad75a6c253b9515cfc7f4c04c6b0637e75f526ee810156110943ff9beda1b892f0f
- SSDEEP 384:6zsN6DfNvjgjHea9sO7SB2wnTKwBODNZOCu5E:SLkz/iO2MwnewBKZOxE
- TLSH T122725C35683C6C739EE3A144FA4B32079EB441A7D6862F94D6ED6F1C00DB69C234BD16
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 01bcd224432bd9e330a79a5331fb5cb405e4f21600c7922939ce344da51d2ba2
- MD5 0cae9563d40f8bd8b5236f446a249fb6
- SHA1 fbc0aad3507037098f783c7e8b6ec2d1aafddab9
- SHA512 495e301ccd4d667df04ce8e4652d7a659aa65952672c5aa6f94c9a5c1a435c218d1e56fb642a000c9397a3d9d7cb0f5fa0d441c07f4ef9fb6cd22d4869640384
- SSDEEP 192:qONp6O7+3hQmiUy79Gttb0RO2osgGffU6:qONp61KGt9sO7CnU6
- TLSH T13E020939686C6CB78EF2AD45F68727279FA5113BE9962F40D5E81F0C00D7A5C2347827
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 11KB
- SHA256 1366b4c06b65f77dd7c6aeb2124f47a1502cd22999fb21d2ecd684cbc168dba2
- MD5 5b5644691e5727b8a3992d89a5d2c87b
- SHA1 43c542632a53fccb76aba86913bfca191ee53eda
- SHA512 c679c9ba7add65d3cd7e06cf1c72667145d2f24a2f7746cfbe7712a8b8c83cd4b8bae9aee2c20edf451ada753962b54d716db5ad139640a2f7cb2f5cfc7d4311
- SSDEEP 192:RLsN6SQ2Nvw7+3vCTFQmiU12cRZatb0RO2oSBpcMIq4LU8:tsN6SfNvjgjHPa9sO7SBvwU8
- TLSH T11F322936682CAC775EB3A144FA4736139F754077DA866F84C5ED2F0C01DB6AC234A91B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 0f0f76158fc7c8f46eccc8de45d70a24be75d5ce59aa4d603c2e50fe9fe5eff2
- MD5 ea354a656953f903b08e21010bdc0787
- SHA1 055e58f2732d3da201ec08df04631f3831741877
- SHA512 2a68bdc5822ffee4e2edfb6ee99b8efad58777ae31ad068601ca5fd8b1454cf75e377f02a0e427e70796bb25882a9b983f4a28ff630ea037e6d74e59f30c7e06
- SSDEEP 192:pONz6O7+32QmiUyX9attb0RO2oSBscNIq4LU6:pONz6A0at9sO7SBFwU6
- TLSH T108121936B86CAC775EE2A545F98732179EA54137EA866F80D5DC2E0C00DF9AC234B816
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9c04a3db-369c-43e5-b318-6f0c30dfddb5.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
- Size 2KB
- SHA256 0c5879e77d1a5bfacb10511b9736700290383e2e3337be7db51a9247ba154153
- MD5 0fcedd31db205646530a77e7fdac8e3c
- SHA1 c7dc0851ff485a1336d4577ff18bfcbc563aeda7
- SHA512 5a4b7f2bfce33807ca0c4b1f8be0dd67a89c7ab3eac8ffdbabc35386725990dce9496861fc31e371e98f5ed5a7a0f4cb543a7e4daca745a33572311fdced6c38
- TLSH T1B0412658A6FA1144B3B7BE56ABF6686D487B7D772E0AD56E00010E4F0A66E00D861B33
- MD5 SHA1 SHA512 TLSH