hxxps://getsolara[.]dev/

Resubmissions

01/09/2026, 20:48

260901-zle3caef843

01/09/2026, 20:27

260901-y8ybrsef523

Analysis

geolocation tags

asiadelhiinindia
user interaction
yes
max time kernel
148s
max time network
153s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/09/2026, 20:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://getsolara.dev/
Sample260901-zle3caef84

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4108	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134327693113672897"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1636999435-3883760687-346127294-1000\{04D7361C-2A8F-4ADF-8832-706E1D597F80}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3344	msedge.exe
3344	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe
1964	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 1964 wrote to memory of 4460	1964	msedge.exe	80
PID 1964 wrote to memory of 4728	1964	msedge.exe	82
PID 1964 wrote to memory of 4108	1964	msedge.exe	81
PID 1964 wrote to memory of 4728	1964	msedge.exe	82
PID 1964 wrote to memory of 4728	1964	msedge.exe	82
PID 1964 wrote to memory of 4448	1964	msedge.exe	84
PID 1964 wrote to memory of 4448	1964	msedge.exe	84
PID 1964 wrote to memory of 2308	1964	msedge.exe	85
PID 1964 wrote to memory of 2308	1964	msedge.exe	85
PID 1964 wrote to memory of 2308	1964	msedge.exe	85
PID 1964 wrote to memory of 4556	1964	msedge.exe	86
PID 1964 wrote to memory of 4556	1964	msedge.exe	86
PID 1964 wrote to memory of 4556	1964	msedge.exe	86
PID 1964 wrote to memory of 428	1964	msedge.exe	88
PID 1964 wrote to memory of 428	1964	msedge.exe	88
PID 1964 wrote to memory of 428	1964	msedge.exe	88
PID 1964 wrote to memory of 4940	1964	msedge.exe	89
PID 1964 wrote to memory of 3836	1964	msedge.exe	90
PID 1964 wrote to memory of 4940	1964	msedge.exe	89
PID 1964 wrote to memory of 4940	1964	msedge.exe	89
PID 1964 wrote to memory of 2660	1964	msedge.exe	91
PID 1964 wrote to memory of 3836	1964	msedge.exe	90
PID 1964 wrote to memory of 3836	1964	msedge.exe	90
PID 1964 wrote to memory of 2660	1964	msedge.exe	91
PID 1964 wrote to memory of 2660	1964	msedge.exe	91
PID 1964 wrote to memory of 3472	1964	msedge.exe	93
PID 1964 wrote to memory of 2260	1964	msedge.exe	94
PID 1964 wrote to memory of 3472	1964	msedge.exe	93
PID 1964 wrote to memory of 2260	1964	msedge.exe	94
PID 1964 wrote to memory of 3512	1964	msedge.exe	96
PID 1964 wrote to memory of 800	1964	msedge.exe	97
PID 800 wrote to memory of 4928	800	msedge.exe	98
PID 1964 wrote to memory of 2824	1964	msedge.exe	99
PID 1964 wrote to memory of 568	1964	msedge.exe	100
PID 1964 wrote to memory of 4280	1964	msedge.exe	101
PID 1964 wrote to memory of 648	1964	msedge.exe	102
PID 1964 wrote to memory of 648	1964	msedge.exe	102
PID 1964 wrote to memory of 3344	1964	msedge.exe	104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://getsolara.dev/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ff8ee1bc188,0x7ff8ee1bc194,0x7ff8ee1bc1a0
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,13211796858479451127,4503979058610472495,524288 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,689786688487628841,16183941724266967670,262144 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2440,i,17493298648723303886,1941444992318111467,524288 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=3020 /prefetch:13
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,10641115367579469644,15683550178425043528,2097152 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,2269488930441200734,5660898905424220665,2097152 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4116,i,15229110305597472641,14700207539636027945,2097152 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:1
  2⤵
  PID:428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4128,i,11143971123198872358,316287428939346270,2097152 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:9
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4160,i,9447487513889876276,1654010838500597534,2097152 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=4668 /prefetch:1
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4168,i,7315125933909843906,11729019710358593829,2097152 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=4684 /prefetch:9
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,8943129476675220621,2793004309683817227,524288 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:14
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,15364907085946856244,8706703484119895840,524288 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:14
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,18379952423432421589,5355920474941006787,524288 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,18379952423432421589,5355920474941006787,524288 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,10946483183106211216,7221921319174852772,524288 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:800
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1132
    3⤵
    PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,6023247774409641716,7178187656872477568,524288 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4680,i,5850792171966464380,13484234925240254715,524288 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:14
  2⤵
  PID:568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,1019560274750024797,11133503551021977544,524288 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:14
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,4304952063017671078,3300595980025279823,524288 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:14
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,5115143724510134050,1675240653209296179,262144 --field-trial-handle=2140,i,8761791377322863530,800012183991249621,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3344

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2280

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 cc6ab6d56f64347c3a46c15f8b6f4f2c901de88e745a4c5ae1c9cd4873826efe
MD5 d91fbd23690c2747ddbc5c2c4d57ee6d
SHA1 2d12ee50178d7b910c96bdf8423e9afe3f6766f3
SHA512 376b463fc1609a4af808a5e13961cbfa62be97fa4a71cbff5acda423ff89633b52700303352b004bc72161ee87d72739f619ad42aa0664b0ef88df6847981294
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7g:fwUQC5VwBIiElEd2K57P7g
TLSH
T106B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e8c11bffd04a845e6747271563ae4a847b510ffe734f41902fbd4b2f062eee45
MD5 9391bc4c1d157f197ee937c50a0513b1
SHA1 6876d0c906cc67e359c85730e312ab21c9022e9f
SHA512 c7624f44a5f0344859c2b10351ec030d8b7ee6532d0895f59ad3dc1f0d843ba0c30c603b9732abcbfe351222d8c06f2d73e0f439168f1a1b2222c8fd3f566136
TLSH
T10ED012663B0E7045EB1542719453C344166D606615629612B1B8955C98A55D452851C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5116dd98c2b23ba5b09db7653ab553aa29b175fa64b8b9ed64ecd21beb5831c6
MD5 5ed835b9bd8886391af7b9dc575ac02b
SHA1 9a588837530f2096248ee7dee8596bb8d3c7d137
SHA512 44cb5053e3ad196ed2b5bd8cb0f51f9c889b22c1847f07a8819b2cb32d6fd93484e30687191edae9487bff46d6c4b744ba3b7a37f2b5644f920fa810083ed0e9
TLSH
T11CD012663B0E7045EB1542719453C344166D606615629713B1B8955C88A55D452851C3
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3ee93b15f5ac13567edcbb528e732cf07c74633ef60c869d9555ff6293c769bb
MD5 b21e6a57355a3ea00618c785b2b82305
SHA1 26209eb035376d9095189155d31dc90f645f4efc
SHA512 822826149740a60fd6b5db956585a906efa20fea6b7e5a9832fb1c9c92025364e4e6c5a92882e1172b5869ab404c60d5d8ffd440cc0ec3ca5ba281ad8e24e43b
TLSH
T1D971A4CA89D60C91F3992FB170D292967B7686B43D3F4E2E01D4757C691DBE2B01B438
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588a49.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe588a49.TMP
Size 3KB
SHA256 de5c10b1984b24c70eb677a8f171e39bff333f8db1790a9f07281d6854ef073f
MD5 c7bad44299eba7fba7bf0d662eaca8d4
SHA1 9e608b6248258ab4c596898c983abac6f77577ed
SHA512 a0f32a85ca310c303da3f185dc9b8a81a5e595ac23c36cbcc0c6751a47be71f934d3b6a02e4b4a7a4186d7c1339fd7f482517abb9a5156e966f8307bef1020ff
TLSH
T14571A3CA89D60C91F3592FB170D182567B7686B43D3F4E2E05E0757C690CBE2B01B438
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ab9eec3a6a68b3eb61ccf5db1bc6381183659bfd3c307d831e342f5646000c4d
MD5 664e206a96c3b41b066a05483d46e02c
SHA1 79aee349b4c3df48aac3b50dec56645888fdbd12
SHA512 35696c34d2987bf1765f6057e8f45787aa7638a5261f41ce0bc4f8915050d233f1e3aca7249db351e1833ca33e3f945abc42076c38cf5d9b0494aa1af5b56842
TLSH
T165318CB7C3E8D56E890156F05A24AE2BDE1E051A52187C2DC9E8EF5BD3E2472E10168F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 0c5e4a985b02c659705d023195951440a79cec328029c03ca98fff3ed913ce14
MD5 d71c1ce72f641436f62aa5f8d66d885d
SHA1 6877a3db338ba4c185b53484c8affa1b74760a05
SHA512 85c0edf695d28691ba00e8d47682f3587a12a23ce0d9bfe73a6dd0b06d271d485942bcb5514074214e22dbb2e3cf1c81f8ceef97274c00c22a383cdb5aa303db
SSDEEP 192:sxZmRUyM/jK1Ml8UQdFz/fWXs2AVIdp3Z/W6+WNZX0ZY0sOyOfIg5UJ:sxZmWq7z/fAs2AmJ/bmZ5dy
TLSH
T1AA52F911AA34A977CCDBE20AF955BF53D6F5147291900E44AAFCCA1C04E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9e190bd0f56080fe277afd824de0d0e6b4cc69275e815981b844def45e24b745
MD5 9ef2f461645b69d0067ab933c5552bb8
SHA1 44323f05c872568ffc8ab6862622dd3c5110a558
SHA512 90197d4cf4382f5081d2dfd7c7c4bfec38502143db5c8b7d8f675c3507a299b0e711d83b9e877de6a8608bffb8d70ccbd821f73796782e3632e72bd8ed8a01bc
SSDEEP 192:sxZmRUyM/jK1Ml8MFz/fWXszsVIdp5Z/W6+WNZxm/Y0sLlofIgrJ:sxZmWdz/fAszsmD/bG/5z9
TLSH
T1F952F8116A34A97BCCDBD209F915BF53D6F51462A2904D48AAFCCA1C04E7BED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 31KB
SHA256 8b9e6471b0d3e30342de2a12ac9de3f4275d52557cf2a7210f5bc6e7e0ddb620
MD5 cb873a28b667a0eae79738d7b2072f1c
SHA1 7be0e9917dab7c9e4d70986fbecba5a609c71695
SHA512 760b15104dc01077507b628c6fa2d65c015f4375f8d43bf93d7966252505245ebaea4f811065b6584720cdb8b3778b5e5d2c9a8656e419d1f791fcf6bddea1a7
SSDEEP 768:Vk/Xh8dF27kWRmwcQDw8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3mjLl/k60119rotj:Vk/Xh8dF27kWRmwcQDwu1jaKmjLpkD1Q
TLSH
T16EE22A3F280CC77E4F844E5DEC26AF966EE801CBA6584D5447FA894C03C77EB511A49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 011d09a4435b7a655c5d1f91867684fb113d54cb387b35a548fa0faec904e84b
MD5 a9c75e79063f8a6f87b6b9f4ad831d10
SHA1 4d0331a1af58965488667dc3f4a1de2a44091af1
SHA512 e6045082d18db792b6e9501b48513b189d5fe4446c1005d26e8f54c6d7ecb5586689a5e684f92946707a1143f46863afe4b6efecf9230389105d8eb9e734e953
SSDEEP 24:Kd5Rf5c5H5ua5Ld5z5f5n4535b+5+Ij575nKi5wha5F5n1E5R53Sm5JM5885P5s6:KcAIjKpiUny9bI9KQ0onydnIRKogE+
TLSH
T1EE9165D272BA02333D7D29088A99D727064277A33259E53B3BA854B54E66E334CFD4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d63881f5-dba2-4b43-943f-011ab39fd73b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d63881f5-dba2-4b43-943f-011ab39fd73b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 56ecd959dd29df55ebb80952f57f37f6756843b600c3d7f4907d3c4ecf6c1435
MD5 914ec711de707299c6c02f123929d144
SHA1 b9dd1fcc1849af7198d19c84f1d37b4049643835
SHA512 ca06faf75e766c0b8cd527e7a4ed6f00e05fad30528f6a7758347d1220a1fda313a6d130aadbcfdd59a71c7e1d11371ae88b31f3ddcc97f72374e146ac624006
SSDEEP 384:yZcIK8Nt52XiAGsr/E5KSzoY9VLoI74Ht:AKM2/E/oY9VN74Ht
TLSH
T1A6828D315CB89CBE9DB3E506F48637078EB49137DBC4AF94D4EC9B1E05DA698230AD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 f0e901b553e040f6e07abb0580d86f4fe9f37789e86943c54143ccca17c5804a
MD5 b6dc3e905fbc7cbf9133943e8afa1ee3
SHA1 433dce2c70ab067d7583beee06fe833cdd528032
SHA512 b45383293ffcc444161340c748e708803360bdc0bdffcb2bc4d94340d55280262773e3fb14bbddc17c2411c104805f15bd0485472fdaf6c6a31a7938a0740f22
SSDEEP 384:ZiFPZcIZ8N38TUNTUlIla2XigKsr/E5KSzsY9VLoI74Ht:wFHZ+wgu2/E/sY9VN74Ht
TLSH
T1A5C22BF148D7887AD9AE9B47A77D2E038EBCC067B6849A50B3D8461DCC961BFD306C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1331ab245f7fb33317af02683128a7f82e4710547d2ab7abfa7ab9d4211b3539
MD5 357b37386397acee14434cb8cf3b5145
SHA1 fd240ac8c7ddbe5027d9779f2df9081bfca029fc
SHA512 1b3a33143e8381a1f1457d5703cd325309eec009ff2e4605a7176b155329cc4ee895fdbe4aa8616d1daaed93a73260bb00ecd77cea457d04a59f7c271ad15889
SSDEEP 384:AZcIK8NtN2XiAGsr/E5KSzoY9VLoI74Ht:+Ks2/E/oY9VN74Ht
TLSH
T1C8828D315CF89CBA9DB3E546F48637078EB49137DBC4AF94D4EC9B1E05DA698230AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1fb240f44ed2e82effc0ce7d27a7ee4857de87c0b2111dbf2a8b6a47c2588318
MD5 fa0bcc65d96bdb5bea25e2bc1134f967
SHA1 25fc1e57661b24a43c9149e5d761ca3e5d5f8c5d
SHA512 4b50b48c668949bc07fc7ffe200d77410ad22f6290254290ce897e3721814f09f6933bd658ed4d4cfa4021a789a562a106b639ed39367419e6e0c8d2349f7807
SSDEEP 384:xZcIK8Nta2XigGsr/E5KSzHY9VLoI74Ht:ZK52/E/HY9VN74Ht
TLSH
T103828D315CB89CBA9DB3E506F48637078FB49037DBC89F94D0EC9B1E05DA698230AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2c073eb4ab1878bf987bdd38c8b950adb58ec5a984b8b26ff6634456a6d1b5eb
MD5 4c9fb3c85daecb8bf773e0ec9d0c070a
SHA1 96f6e2d427be7e95ec20e0336bc61e6c785cba3b
SHA512 240c705bb833b1b22512d9a80cb53b945c635168c8c4983a9c5bb3fddaf61b54b5e6a5e0b1e8111aa253f706524efa1db2da9b9519f4fb444326aa3c740e8a96
SSDEEP 192:1GNy6t6H3BQmiUyOHBH32Qq/rUH5mnRf+D9MdtU6:1GNy6MXfpB2Qq/E5K5bU6
TLSH
T18702E93878ACACAB9EB3AE05B48777179F94112FE7D55F98D5E81B1C40DB29C1306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1cfe44e28497dde6e97243086088d52ab2a9dd9206b31e0a840bce0b8693e536
MD5 20569ac51143dbc765dd66d659db61bd
SHA1 115e3b554baa3aef7ccf07dc3f03db9e9c199465
SHA512 c96ff86e07ba609a01a5ff7a31c218d0162ee5f4b9a8d7bdc9b40984ffe4486904624b736900fe4cf4db813f84cfc4d4668951b6e470ac8b0691f7c75793610e
SSDEEP 192:XGNA6t6H3UQmiUyYb0328q/rUH5mnRfSz1/9nzqnU6:XGNA6MXku28q/E5KSzTYU6
TLSH
T160123C3478A8AC6F5DE3D941F44737179EA5422BEBC96F94D1DC1A2C01DF29C230A922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

085017aa-79e0-4684-b93b-ce70e1a58a5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\085017aa-79e0-4684-b93b-ce70e1a58a5f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download