hxxps://pro[.]tiktok[.]com/t/ZP9hoVUC3Sak2-0L3Pp/

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 21:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://pro.tiktok.com/t/ZP9hoVUC3Sak2-0L3Pp/
Sample260810-zzy3dahn6y

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4036	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308698104686471"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{45CD9F74-68C4-4EDE-A63B-83050643FE2E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4588	msedge.exe
4588	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1760 wrote to memory of 2200	1760	msedge.exe	83
PID 1760 wrote to memory of 4036	1760	msedge.exe	85
PID 1760 wrote to memory of 3256	1760	msedge.exe	86
PID 1760 wrote to memory of 3256	1760	msedge.exe	86
PID 1760 wrote to memory of 3256	1760	msedge.exe	86
PID 1760 wrote to memory of 3164	1760	msedge.exe	87
PID 1760 wrote to memory of 3164	1760	msedge.exe	87
PID 1760 wrote to memory of 1512	1760	msedge.exe	88
PID 1760 wrote to memory of 1512	1760	msedge.exe	88
PID 1760 wrote to memory of 1512	1760	msedge.exe	88
PID 1760 wrote to memory of 4672	1760	msedge.exe	89
PID 1760 wrote to memory of 4672	1760	msedge.exe	89
PID 1760 wrote to memory of 4672	1760	msedge.exe	89
PID 1760 wrote to memory of 3964	1760	msedge.exe	90
PID 1760 wrote to memory of 1736	1760	msedge.exe	91
PID 1760 wrote to memory of 3964	1760	msedge.exe	90
PID 1760 wrote to memory of 3964	1760	msedge.exe	90
PID 1760 wrote to memory of 1736	1760	msedge.exe	91
PID 1760 wrote to memory of 1736	1760	msedge.exe	91
PID 1760 wrote to memory of 4864	1760	msedge.exe	95
PID 1760 wrote to memory of 4864	1760	msedge.exe	95
PID 1760 wrote to memory of 4864	1760	msedge.exe	95
PID 1760 wrote to memory of 3416	1760	msedge.exe	96
PID 1760 wrote to memory of 3416	1760	msedge.exe	96
PID 1760 wrote to memory of 3756	1760	msedge.exe	97
PID 1760 wrote to memory of 3756	1760	msedge.exe	97
PID 1760 wrote to memory of 768	1760	msedge.exe	102
PID 1760 wrote to memory of 5880	1760	msedge.exe	116
PID 1760 wrote to memory of 5888	1760	msedge.exe	117
PID 1760 wrote to memory of 5896	1760	msedge.exe	118
PID 1760 wrote to memory of 5420	1760	msedge.exe	123
PID 1760 wrote to memory of 5420	1760	msedge.exe	123
PID 1760 wrote to memory of 4588	1760	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://pro.tiktok.com/t/ZP9hoVUC3Sak2-0L3Pp/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffe71f3c188,0x7ffe71f3c194,0x7ffe71f3c1a0
  2⤵
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,13192416331877541477,11716165002054497105,524288 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,2979813933387559356,14947898740873393107,262144 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=2944 /prefetch:2
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2356,i,95965988337478189,14354701200889633210,524288 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=2984 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,16086220459459514737,14840548797038335321,2097152 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,7203292795341570601,578792348436201152,2097152 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,15529167991097631168,16863200350573866243,2097152 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,15637809144258424472,8531254478199419049,2097152 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:2
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3652,i,17133742707986203477,14626316907641550320,2097152 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4724,i,10739092196407679460,10659093423101628831,524288 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=4692 /prefetch:8
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4712,i,3445036076824994010,774502385849873105,524288 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,15480826372063718265,16932606361700719940,524288 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,15480826372063718265,16932606361700719940,524288 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,10470840091662355319,15525112221743379362,524288 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4216,i,2954028975659483023,445911681523459300,524288 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4188,i,14249077333975134842,8760812958258906693,524288 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:8
  2⤵
  PID:5896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,8422244168344597108,9404960273352921849,524288 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:5420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=748,i,16765765374500287299,15447488116334499739,262144 --field-trial-handle=2948,i,8406937155645338605,5378318068862902185,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4588

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3272

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
MD5 038903102cb76ddedd18207430e00005
SHA1 e694b970e01eb43fddfb00d36857e2b64f8c931b
SHA512 bacb50167c8d736bccc259f2ffbffff915c7c6dc188c6c2c1476ded8cbd822ff968f690173d1b8e35c352ec62f9ace3913a556b80bc1a59211be000ee9ea7447
TLSH
T17DD092207759A6C3E24704BA94A5AB52A916C57AA0B7F7027232640CAE66089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9838112660c29784eac77bb989e281c4c444a533e6fb4635fea56e171758b037
MD5 6a39867d0571a04c74aa7aee110ea1a4
SHA1 7db83ab1f09505e0c877ebac1de699de4ae55839
SHA512 a36c67abf17a08d880aaea96247dbcf4027be51baa0d0eed286e746ee2433df4ba9ebe836418b612d3c114ddef4a32a283731804f6abb1c49272838749c825e1
TLSH
T169715FFA18E30F95EB11F2705AC10246B27081EBF617ED674D80D7FB6D137215886998
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588383.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe588383.TMP
Size 3KB
SHA256 b0945ada923e808274e838feeab9841a605e213ced5e89209d3ff6972d28475f
MD5 3bfce1ff15cedca09b8624bd9bc04e71
SHA1 f04f4e432e344044d952b44459753c368d089f41
SHA512 6ce9bbc662d44d6373ed2abb76a52a673a4d79f39780bb33d4f9804dea623e9fb99fba890a769b524dbaa9c036ac7f97e1a6e621d734d97dea44ae9b068e4ecd
TLSH
T17C716DFE18E30FA5EB22F2705AD10246B13085EBF613ED638D80C7FB6D12731899A158
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.tiktok.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 19235a509a979a2edf91486713af945cc9d3cb244ac5aa7493cb42844163d253
MD5 e62b19ffb2387d635288744db64ea899
SHA1 d39aa5901557d512a070003085e68f8f1192d211
SHA512 8948f5624d106d4ae689367dbebaaad2c84885de8d7f1e4f0def0273ac8e7b6c2b2d51608e7ac7f18b95e245879e694166f77874fd117064e2a5740c02c5c528
TLSH
T1D251ABF783A9822E9A155AF4AA05AE2BCF5C0120431C397686D07F2BA7F3061E10175B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

ab99c439-1e99-45ab-9246-43e573a9d32a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ab99c439-1e99-45ab-9246-43e573a9d32a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e7431fb4cf5d7e4756dfb436b3649459ff2557f04fea57491a3827fd7c26d0e2
MD5 40deb70f53602e216092ef33b21284b3
SHA1 7245efddaf454fa8e1ec53aed686e68cf4d2f450
SHA512 05e736a9600828599cf807c2c2f43123ecad1f7cb97ec3cbc8552e87503d93fdc476bb59f0f71e98118637c34eb8d0bfbb4ace75595454b3c4e8440c9f7ad745
SSDEEP 192:sxZTRzkY/fdswwS3sIdpu/HW6+WNSVd8/YIh58l/Ig5qJ:sxZTiY/fdsxSFoHbV/ks
TLSH
T11322C8126E38A97B8CCBD20DBA15BF53D6FD5032A1D11E98A6FC9A1C05E76CD221740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c778781795a8e8f3fed60d3377b5675362479b8016163016a4968d188ae32128
MD5 ef25a4d5c500cd8b0597f5cc723e722e
SHA1 df93b5f2280470d872add876ae063e83035dbf18
SHA512 66a0904513dd137f47595aec8fb421c918129ff5f26fc29810acf54895a3c94ad690d02d72406dbb21e17059063aee16e92cbf67b36e25cc46db84e99bcf5566
SSDEEP 192:sxZTRzkY/fdsywS3sIdpu/HW6+WNSVd8/YIh58l/IgrJ:sxZTiY/fdsvSFoHbV/k9
TLSH
T18A22B9126E38A97B8CCBD20DBA15BF53D6F95032A1D11E58E6FC9A1C04E66DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 abda4707518ea5e9c33783999c1ed5c526e7eb855030f1ac784ec989ef81fb0b
MD5 1438c06c0870b9bbe6e6ffa6108413c4
SHA1 855048fc9a9e3a2dfaa2c2549066007120a7527b
SHA512 2fd3780d11193ba32d0ee18414cdfdbf039c77c6f8002a02a9eb9632e87009773d213001a8eca1cd400d7981af2abee2d5386a069ada78a86b6a1bb6b3c7c0af
SSDEEP 192:sxZTRzkY/fdswwbt3sIdpu/HW6+WNSVd8/YI+38l/Ig5AJ:sxZTiY/fdsxbtFoHbV/tm
TLSH
T13922C9126E3869778CCBE20DBA15BF53E2F95032A1D11E98A6FCDA1C05E76CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d782b5d0d50607761df9e186db08b06a6e66b3418071288ce0bc08cbdf6d29f5
MD5 fed4c685074f28921e16ee471186f033
SHA1 f1d860e395873e1db081d93339648a2f8fbe7db7
SHA512 3748606ce46290a69f324ed455a53504a39bcbc02a08a01df1b0fd980bfcd95c01b4502747db84d8326dcf18e855604da01b120a28c3b8c58d3b006590fcf6ec
SSDEEP 768:ZkyqbblWvJDjT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVE4Ll6AR7WroxK0:ZkyqbblWvJDjTu1jah4LAs7txn
TLSH
T17FC2F93B654CCB7E4F800A9DDD5A6FD73ED802C7A6988D4047FA994C02C77EA51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\e12181ec-547f-4619-864f-37fd11784083\index-dir\the-real-index
Size 72B
SHA256 44115a8b7d4b0cc8ce0644515b6faf32eeb02fb6dee1567b2f47fe444e4f5f5f
MD5 27e6a6b9f99809d34f506cd279ce8853
SHA1 b7be19ad6f503d0ccbcef0124796f9356d29487d
SHA512 638fb080e2324413564d8c248e2a7c3184f2700683d129519ee4d8746b701eaffa015880e3e995f9193aa2fb3c6b6457ce18814925d6dbaa5015f2276ff30e49
TLSH
T116A002600F844511C2C2877055C5128473304D61018D1B1184E40475D9F36444D07404
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\e12181ec-547f-4619-864f-37fd11784083\index-dir\the-real-index
Size 72B
SHA256 b7359f20992c33dc1368ac177aef2f0f9895e03d1d369ef3e0803499f5f24420
MD5 40abedd78d591ec08768f5be18492c65
SHA1 3a6c0d1497dd69ba439436f1c6ee86245175e356
SHA512 2b80d417c64856439e4c8d2c9fd0fa131c595900384e511aea9385c5d7d178559aed94db6ecfae71719bb6e2323ef903a3314c945c5cdde1461271d0e5c8b593
TLSH
T1D0A00218434CE511E06E8B7014CF214063604D110101A72146DB109A9D63248C202869
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5871b0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\e12181ec-547f-4619-864f-37fd11784083\index-dir\the-real-index~RFe5871b0.TMP
Size 48B
SHA256 bdf53be79cc07d2b6a4cb01674b258729edcd940c9ccc1b7c0635a4bfc709b67
MD5 3852c09f55604465b391473132619e5d
SHA1 4bb3c2fb3587660a3856cb6d41ce4f7d6ae0cea0
SHA512 32f257f2fe0c68eceb24c9653d6d04753bcf5bc6704fba8cf56cc53037d2ab24ae61bfaad83c6c71ed9af2c5936d7dc1927670e76bc51e6786f26c66a7c68762
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt
Size 159B
SHA256 d207f60364539fc0bf263f336df26ba4a03b1049d8b88d0378d1f9dfcab64a0a
MD5 62d287f93be2e2b5998b69ed24d68397
SHA1 e2c129b3fc1cec03050e112e52644a953d135ae3
SHA512 69d5d2dfbc054e35076ff919990d7b3fc5fac7acebfdafcbcabb608cc436a69a7cab51ca49320ccffaee4df3153365730f8697360396876bdf0c5651b0933da2
TLSH
T10BC08CB385AA9410A9B89FD074B972248E662E84E8D28ACEA041218C0221E611476FF3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt
Size 159B
SHA256 33468410662248e0c7d5f9c8eb63ceb262bffbc599001333f0b6e8a72f66501a
MD5 3909d675e1c4e79916e525e80b049a5d
SHA1 e4472a9acba4a4ad570a3393760979ad75434cf6
SHA512 5cb6eba56dd1ad9a4ed438cdcb9723441f794602fa8533338645e914c65942c9d3baf671468d0e7b00300a50d3b8269a5cc7934d88b5993f0eff4773c2597cab
TLSH
T15AC08073455A900069749FD034B972104D661D84D4D1C5CDA041218C0711D211465FF7
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5871df.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt~RFe5871df.TMP
Size 165B
SHA256 44eabbf2d8d00816ec36bd3ef8ae4314c6c499d836eea23e12a7671e52582059
MD5 7aca517c980e10e7986124ded2353a49
SHA1 788cea4ed41529c6865ea479181c348de33ff8b6
SHA512 93861949b5c7dada7723cd0dba16453d0ee0162abead22e4e603778fce3f10a27a68bd896f9d0fa6faa05f3fa837faba62206242f5dffa09afb6796ccec29895
TLSH
T143C08CB385AE9000AA789FD074B962508E7B1E84E8C685CEE082318C0231E224469FF3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 288B
SHA256 1af208e658e424741008817a90d80d935c2804639f0dea2596bb3e814c09f86d
MD5 d19d7a32caf799578537bdcc5d8dda57
SHA1 4b2c4c3f0d8cac1c3a6633ac0245d406ab5696ff
SHA512 2715473ca3877e285976faadee54ff9917e309deb8226fcc6b4de22db2a6f15113cd9788bab8fc1cbe1267d0d1faf147405262296d1cb5933a2af7a7cda33439
TLSH
T159D02241CD008204C4244674216351E72331A4EA8908B3AB006D30093DF20A20EABC06
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587153.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe587153.TMP
Size 48B
SHA256 4a0ccac1d43a0f469b1d6e933f6a4d52f942e898ccdcb5b54507060af05f5966
MD5 db09a5265634798805013591b9fbf06d
SHA1 eb10b82de2059030eba60907d7a24c2626378d39
SHA512 b0052e5c6cf3885b6512833732be26b78aca749cb251c1b76a913ae8974b98b28ad86d5e77649c08f54fc7b0ca05438a28ce2bbf35e76433f7d5d757087ec515
MD5 SHA1 SHA512

Submit Download

27dd308c-17d5-43ef-9b2c-c4db8fe019e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\27dd308c-17d5-43ef-9b2c-c4db8fe019e9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 8d4e4aa71eb0b2f5985d80cf18aab9d6ef014932db1306a355357c35b11f696e
MD5 23327192f934a5f193a2f11460eb4e3a
SHA1 744ebc5442473e61a7f2919a7b01dc58b67d5db0
SHA512 a38d02ad9e780938ac41e2fdad62c2550bd80101ee8bc9bb514960741f107fcc2261660b31163dc85e914d774e8f288324e221c6a77e59dbe300f6779a80314f
SSDEEP 384:biFiZcImzsNC8TUNTUlIl5NUS8SbDKJVRN3OKZ9QG0n6HlytEDq1a:2FQWbwg9UxpvH3Om9L0noy6Dqg
TLSH
T10FD22AF258E74836D9AE5743E77E2D038EBCC067B5846A94B3D85A1CCC861BFD30A814
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 e125f06ba16cd5542b248bff35d4f2cd641e9f66bd320445031b1b746ff5844f
MD5 106300938cce4395c18bda9b9f6ec16d
SHA1 a555af1eb75fa8bafed13026e77fc2d7035a8e18
SHA512 a04f5ed1a12a6495b56f1308f635c2b5e5d9b50a2e4d294f8620f29d6dbc26cf97d363244fe04e0698be4d8629804ca36bc35aa7052a00f2a7ce3cf4e8b9d8f7
SSDEEP 384:RZcIhsN65NUS8SbD+JVRN3OKZ9QF0n6HlytEDq1a:5hRUxhvH3Om920noy6Dqg
TLSH
T198927D3168341D375AFBA545F54B36178EFC9037AAD82FD891EDAF2C01DA698130BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 16fbbadc529a9b237eef3e79224c660476b55cb4786407858c53dd4e1cfab803
MD5 fab457d030bc042ccc507b57f6c58e4f
SHA1 b6a3b0526e4a822a02a5bdbb8dcf7cdadc142862
SHA512 1b906b3dc9a16cdf1ba196a333d3d3b3c0e74b31a1c63f65e53e3915c90fe14ef563afa6b10b21707ffb184b16523205d3d872b360654ac7974acdc115df4913
SSDEEP 192:urLsNF0yQ4lUS83kRbwUQmiU1E6G4VRN3OmNOmSC9QjMnSRNqpfnU8:OsN6yNUS8SbDNJVRN3OKZ9QF0nU8
TLSH
T1FB3219316C385C375EE6A545F54B36139FA8503BAAC92F98D1EC2F1C01DB69C231AD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ca5c64be4684c5e4f245dcb23b7335b43066795ee0b929dcf5ea068d17d5b1d6
MD5 54dfd84e68df15e4cfaf2a43e2b5733c
SHA1 776b12034cee5bbe63664b18443d1b78aa257740
SHA512 8956cd463713d46958785f38209958b6c18b45c4315c8a925fc7e94aa6b48a8428c1520a1305f6d131e5809198b6044682725f4f55e3667c727eaea358265522
SSDEEP 192:tONK6JkRtQmiUyLJW+RN3OmNOmFHh3mROFU6:tONK6UriW+RN3OKBpTU6
TLSH
T13902F9357C386C778EF2AD09F98B27135FA8202BE9952F84DAD81B1C01D765C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 edbd3f64988052095dd09c0c644d9f237a1c758b36713a38f7fee91e242e6329
MD5 8402c02c43bd25334d9f744c09267f67
SHA1 f80f347c3d0d1691831094e970e9aacff097f3b2
SHA512 af9eccce8fc5f2db85f95743e04b00110139d2bc497873b888703c4d266ef3ad60d4970243b303f729474995effee3aaecdd20dc9d89368201695d78081bd2b6
SSDEEP 192:KONRB6JkReQmiUy+Jr+RN3OmNOmSC9QjM3VcNqpfnU6:KONr6Uahr+RN3OKZ9Q90nU6
TLSH
T13412083278385C675EE2A845F58B36175EA95137EA893F84D5DC2F1C01DBA9C230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7ecd88b6845bc004c0d901f10113a8e100f1a1492a8f89a0a76842e97da75d5b
MD5 3db89f111b1988f1952e9ccecfc0ddc4
SHA1 ac36277f038f82e8beaf780b9ec9dbe6342e4335
SHA512 e0e5db639f8f10c69fb8ca80165c5b18bab8952f5c10a6c099ac58a7d6c5d68ba1c7fa27f302e144fdc023c0fb69ffea195a2ac883fae2555af000a0ffde571d
TLSH
T12D413B98BAEA111CB3B76F069BF6686D487BB9372E16D45D10010D0F0A23B45C971B37
MD5 SHA1 SHA512 TLSH

Submit Download