hxxps://centarpoint[.]co/ommsesxx

Analysis

user interaction
yes
max time kernel
299s
max time network
191s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 17:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://centarpoint.co/ommsesxx
Sample260930-vm9acstcnh

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4012	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{B64F84C3-E483-4BFC-901C-706C83DB5BEF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1264	msedge.exe
1264	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 6120 wrote to memory of 5256	6120	msedge.exe	84
PID 6120 wrote to memory of 5956	6120	msedge.exe	86
PID 6120 wrote to memory of 4012	6120	msedge.exe	85
PID 6120 wrote to memory of 5956	6120	msedge.exe	86
PID 6120 wrote to memory of 5956	6120	msedge.exe	86
PID 6120 wrote to memory of 2188	6120	msedge.exe	87
PID 6120 wrote to memory of 2188	6120	msedge.exe	87
PID 6120 wrote to memory of 1832	6120	msedge.exe	89
PID 6120 wrote to memory of 1832	6120	msedge.exe	89
PID 6120 wrote to memory of 1832	6120	msedge.exe	89
PID 6120 wrote to memory of 5784	6120	msedge.exe	88
PID 6120 wrote to memory of 5784	6120	msedge.exe	88
PID 6120 wrote to memory of 5784	6120	msedge.exe	88
PID 6120 wrote to memory of 3476	6120	msedge.exe	93
PID 6120 wrote to memory of 3476	6120	msedge.exe	93
PID 6120 wrote to memory of 3476	6120	msedge.exe	93
PID 6120 wrote to memory of 5792	6120	msedge.exe	102
PID 6120 wrote to memory of 5792	6120	msedge.exe	102
PID 6120 wrote to memory of 3952	6120	msedge.exe	103
PID 6120 wrote to memory of 3952	6120	msedge.exe	103
PID 6120 wrote to memory of 2504	6120	msedge.exe	105
PID 6120 wrote to memory of 1676	6120	msedge.exe	117
PID 6120 wrote to memory of 3872	6120	msedge.exe	118
PID 6120 wrote to memory of 1832	6120	msedge.exe	119
PID 6120 wrote to memory of 5900	6120	msedge.exe	122
PID 6120 wrote to memory of 5900	6120	msedge.exe	122
PID 6120 wrote to memory of 2168	6120	msedge.exe	124
PID 6120 wrote to memory of 2168	6120	msedge.exe	124
PID 6120 wrote to memory of 1264	6120	msedge.exe	128
PID 6120 wrote to memory of 4176	6120	msedge.exe	129
PID 6120 wrote to memory of 4176	6120	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://centarpoint.co/ommsesxx
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x2ac,0x7fff05d2c188,0x7fff05d2c194,0x7fff05d2c1a0
  2⤵
  PID:5256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,9229228735315445160,470786610611344250,524288 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,17030521664012312711,11100635645475793501,262144 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,16958765371381208113,7793060367167491798,524288 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=3120 /prefetch:8
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3512,i,181645606042951336,16200169805621168290,2097152 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3516,i,5761420222309915233,17121361820437602204,2097152 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4904,i,14317100344331494872,1788166829508969504,2097152 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:1
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,3339520192568976381,18044619415831484327,524288 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:8
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,1245200224711513708,15308599130581724756,524288 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:8
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5608,i,14499071099270497668,14486221555084946965,524288 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5608,i,14499071099270497668,14486221555084946965,524288 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,9024772583654531469,5564962130714710286,524288 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,3574952738301273190,16655022928954127197,524288 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5604,i,2697345938257936371,2039786373372918067,524288 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,4152537556098575,712081357639936253,524288 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:8
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,9457321690324027379,7408743935629203631,524288 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:8
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6064,i,6956501849845526644,17353103940713175450,262144 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=732 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2816,i,6603825664876793630,12450028106066761271,524288 --field-trial-handle=2332,i,4751549172907258936,18342805871437461282,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:8
  2⤵
  PID:4176

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1736

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 6ba627d4072ed867b1f81fbc9482d9c4be9a05b11a6305134c3c5192746339f9
MD5 8ecb84096f49071c515833f610ea33d9
SHA1 ea7d450eff90429d354d8e2e062e4e0e024ada3c
SHA512 0dcb78c5247ab5eed829c7be2c7188248471aa3b401ef9f0c30cb2317d9a19108c875c780468cff0da35fe426eb5916f35462fa1a6f241e1a93d030d8a966404
TLSH
T104E026D44BC8C3AFF6186847427C9B4DC2B03B2A92CC7E0A57088D887402894A3C6AD0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 6c621c3e92d43afe2d865555628837b07ec04e26845b01dd3221b28d1a51389f
MD5 6e457b1becaa0c4076771718ab2bdc38
SHA1 d12b3be0ae386ec58be6b543083dfd5aa22f58d2
SHA512 704e5a3d94e562ce6ef7f5204f59742945b4f6cc485d1d2521718afa86de3b02b3fc3d7bdccd08c028a1bf734c345f66b5953d9d18bf8bc6651de6c9f87f59f3
TLSH
T16DF02DB5CC25FC3B18FC5B1960545A46F75113572781888F3B3D950D8FB1A37864685C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 19047c90765a22388ecd4edb7004bbf9f6d0c7a4fbe9cd735a75401b10215d43
MD5 95c98c147020970bcd6714bd3ecd7f33
SHA1 d6d93342da62b96d5124fd45ddbecf7bc2790fbe
SHA512 6c6665f4baee8c2a72c70bfb5814e41a5fa3dff03b7a13781a9f67587090122619fb64ac102ac1db874ab584c441784e50cd089b49d6fdc62c9c1c37ed499efe
TLSH
T1D561E9894DB497AAFB9C7DBC91E11DCBB4B815D093831E0A0274ECF9D4367B12D4A540
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 11ddcf4b44cd99326905caa99b36cb9b47e1c01c872f88f5ade506fe4f969e68
MD5 af3acd0a19de2678e7c508bcfe3a10ec
SHA1 b736023f7e1098a490eac16c335bfe8afc2433b3
SHA512 e645c7ef63deb436ec28b6320e1ca7bd6ce6462c320b99c81b475c541d0e3d5b320e8b6739d3383a5a1563ed5a6388fc445c4b66987218e476f27f0e00b35e26
TLSH
T19B61FA8D0DB497AAFB9C7DBC91E50DCBB4B815D093831D0E0264ECF9D8367B12E4A580
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 899531a4323fbd9036203d814f53565f1d9b9c1a6c2c6ee71f43cdbf03148b29
MD5 4812a9b0872786533ed2d34aa3a686fd
SHA1 22ccef8aaeff0b89d08244009def99b22f68951b
SHA512 4adc04df8e9449098be81e9311b7462faab69b92df68b370fedbf97ccc3bb08fcc617974ac60eebe8eb136c07b87613e6ae5beae508452a7c3dd1f5792a11b9a
TLSH
T18F519FF3C3E5866DCA0156F0AA14AE2BCF1D0559432C3D5AC9E4AF5B93E3472E14164F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 5e26715013488f086ea97a699a078ec3a8b82cb9f3a13e4995f5eb908ca21288
MD5 f9d2ae3b3a0254c55dd50308e49f6022
SHA1 f2c5b05eb5a4d0d2360f56e190318ca09be04618
SHA512 174f63a8c818511407e635affc1e676e411cafe5257beac5c2af80d96b700eb7a3c68a8945fdc340e09e3b5491e794de7f0a7ef476778499d0d9a706b0f42200
SSDEEP 192:sxZQTRwkT/fgsTpQZZmgzodpGlxhqHW6+WNl5rg/YbIxfY3+yIg5uEJ:sxZUpT/fgstOZmDHHbU/FtYHAI
TLSH
T19342D8556D38A97B9CC7D219FA55BF53D3F95032A0911E48A6FCCA1C04E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 3d7950abe6666ecdd0fa3892337cd225442b49f114b429548b5d5aae30f5dc97
MD5 63d542519afe7598c63bfaa4fa9c9d4b
SHA1 89be3f1c318a59c6a02fbe28e2d8122daba5fe49
SHA512 f1b22a37ba8f2af2829ef80c4df631d33e6db171bd4031dc8ecc16069c9d536e767b80d2a7fe5ad8b24429e879b6b2ac60d01edce26c6e236760a80f99c020ba
SSDEEP 192:sxZQTRwkT/fgsTqQZZmgzodpGlxhqHW6+WNl5rg/YbIEfY3+yIg5uEJ:sxZUpT/fgseOZmDHHbU/FiYHAI
TLSH
T14642C8556D38A97B9CC7D219FA55BF53D3F96032A0911E48A6FCCA1C04E7ADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e6eed10799136b0ce679e6837b1f3bba278aead4a564b4f7c25ebd7c36353669
MD5 09acae3ca361e840985360726e94126a
SHA1 0c8bb37fd72c0f3f0c480988f15ff8bb01e88874
SHA512 2eb5353707bad6853dd0a8560943464fbbf82aa35fdc8a8f1bdf3996f9ea2b4f400c6c156820cd3e4f495d867fb17c97b969c9461d600963f15d0bf8c1206bb0
SSDEEP 192:sxZQTRwkT/fgsnpQZZmgzodpGlxhqHW6+WNl5rg/YbIxfY3+yIgjEJ:sxZUpT/fgspOZmDHHbU/FtYHjI
TLSH
T1F242D855AD38A97B9CC7D219FA55BF53D3F96032A0911E48A6FCCA1C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
MD5 8abbcdfa7caeebcbbcd0d5105dc97b2e
SHA1 1e4dad667b45cbc987006d84369b77755c5a1f80
SHA512 a15376caaba7314be4cd64998452f0a51d18c456c02b9982c79ea9ac4e177a4abacc972d1377c7dfa3c866c68dc8676c7d2cf246bc17f9a82357457cebc4b37f
SSDEEP 768:0RyktrnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroGfk:0RyktrnWvDBltu1jaLWLywf0Gc
TLSH
T1BBC2F93F640CCB7E5FC00E9D9C6A6F972DE802CBA6945D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 816ee114544372a7faf8c8f8654552fdda2b3c70baef30fc73d1015928d19c3a
MD5 f81895dff4804e17125b2f94637c0244
SHA1 c605890b3336183b8646fe8218ecda59a807b38f
SHA512 b3f889d8c29153a8fd9c4ff3bde3c3793d1e008144ff1db448e79115a4c89914676e939bf1c3359d2790c3d402dd3366f5763ff848aa1e11a2139882c1924820
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXIzZs:OtfFvpopPxrB4RhfIls
TLSH
T191B2131571BA421038FE690C81B58B2F464232733159EA3B7FBD14A69E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 a54aa11a27ffe3ed6123e2407e55874be6226b4df3d540c02a3cdcb991b603ca
MD5 b4b2d5baf9f60f44b2d277e6afdccfbb
SHA1 a94bdc418ec895927f1cc37e56e39dc633963221
SHA512 192dfd9b106a328601b62eec8be8962201097ead3ec8eb9dcbe4e42ce40f25e9ee4b77ba7d071d0b46f9ec62d4d58c4c5e4d33c204976811211b1afd0583cc12
SSDEEP 384:n7MiFiZcI93sNB8TUNTUlI4X15mgmhUK2fMBOHLtuVnpj7tgOIwZOywLygL/7Izk:73FQ93Ewge6TNBOHLtm7XsH0g
TLSH
T1DAC24A32E8A8C9BBACEB8F95B74A7603DEE04163C6CC9AC4D9D95D5D009719D070BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 f2760a26975cb1530c40553a22e146c58da92363c7984472e3fdcff6b347f6cf
MD5 cdf6111eef922db89786fab37d42d8f2
SHA1 b2f3bb0982bb582d874e5fb1afe82a675e2b5e95
SHA512 7665863f098e24d71718a71eb00dc5c07e0feb99844ff5e8fc8e229e71a2f6e950f247b1eda235638b824c335adc356e263d69ec524ea12aba5e713f1f628253
SSDEEP 384:n0MiFiZcI63sNw8TUNTUlIm25mg5cnK2fMBOHLtuVnoN7O6R2FeoxgL/7IzKoG:03FQ63RwgSDQBOHLtRN7TRVl
TLSH
T17FC25B32EC94C9BBEDEB8F96A74A7A07DEF00163859C89C0DAD85D1D008759D070BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 6c31832dfe1bcd9cd31af55c238648de3215e60aaa412f32bc8f953891c8226c
MD5 94fef4108b3c5d3eb80f408a2f8b3bac
SHA1 2a281210a09de20aa93ed7ca58672e458b2c7495
SHA512 4435d93a031dc2daa6b7bf056115aa7b07b3a19ffd7cc96177bb6b8d8d84b04690c12d09c0ae8dc03b2af169d1cf4e1f006159023c1bb3810ec57d6752f88392
SSDEEP 384:nlMiFiZcI93sNB8TUNTUlI4X15mgKhUK2fMBOHLtuVnpj7tgOIwZOywLygL/7Izk:l3FQ93Ewge6NNBOHLtm7XsH0g
TLSH
T1B4C24A32E8A8C9BBACEB8F95B74A7603DEE04163C6CC9AC4D9D95D1D009719D070BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 3181dd0791a37daf06fcfb9357a673c55f217b951e988cdaf3b69c25e5b7d70e
MD5 0697bb4cd3a83f30ac8a307d6b403446
SHA1 db706711b103cd40312449ae01012ad3e15e3d23
SHA512 e6d5a57c19523e3c979dc651fcadae901bf99b9d142a595696b675c806571136f2c4c658523ab566f4f71120bde7125b488a0aa0f170649e794c4a829e819ee0
SSDEEP 384:nxiFiZcIvqz3sNB8TUNTUlI4X15mgKIUK2fMBOHLtuVnp67tgOIwZOywLygL/7Ig:YFQ83Ewge6cNBOHLtV7XsH0g
TLSH
T17CE2A3F198D789B7E8AE4B97637E6D0299FCC113B5888584B7D81D1CCC961BFC30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a8d73999ede429bbb3863c5daaa2e1e147d1a7eead76a58b3d095d55fbb3c5fc
MD5 772911de26f0d7d4fb16fe38f7052b87
SHA1 f8a5ee2e14471515b22965d5911f804691ed65c8
SHA512 f66584c80bb8bb33d61679161353790cde47551995c2fae0407e5bcfeb2c87c1d769f0947458e12d10ee23ae4f971ee2498c59815cdef456b43f88083e9cac3b
TLSH
T1D6412758AAFE1108F3B76E5A9BF7A86E487E79772F06C49D00110D4E0663A40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download