hxxps://tiktok[.]com/@MS4wLjABAAAAjQiaPExNlBLMs5OzkfeejP8O4Q5pce2yEYusXCg6Ejm2WCaED2XHsMHGzKRfTG7K

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 08:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://tiktok.com/@MS4wLjABAAAAjQiaPExNlBLMs5OzkfeejP8O4Q5pce2yEYusXCg6Ejm2WCaED2XHsMHGzKRfTG7K
Sample260820-kkmcpsshka

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2492	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316887937268520"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{C248B257-BE00-4877-B4A0-3B47C06F73BA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5824	msedge.exe
5824	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe
2476	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2476 wrote to memory of 4340	2476	msedge.exe	85
PID 2476 wrote to memory of 2492	2476	msedge.exe	86
PID 2476 wrote to memory of 1740	2476	msedge.exe	87
PID 2476 wrote to memory of 1740	2476	msedge.exe	87
PID 2476 wrote to memory of 1740	2476	msedge.exe	87
PID 2476 wrote to memory of 4944	2476	msedge.exe	88
PID 2476 wrote to memory of 4944	2476	msedge.exe	88
PID 2476 wrote to memory of 4092	2476	msedge.exe	89
PID 2476 wrote to memory of 1064	2476	msedge.exe	90
PID 2476 wrote to memory of 4092	2476	msedge.exe	89
PID 2476 wrote to memory of 4092	2476	msedge.exe	89
PID 2476 wrote to memory of 1064	2476	msedge.exe	90
PID 2476 wrote to memory of 1064	2476	msedge.exe	90
PID 2476 wrote to memory of 4540	2476	msedge.exe	92
PID 2476 wrote to memory of 4540	2476	msedge.exe	92
PID 2476 wrote to memory of 4540	2476	msedge.exe	92
PID 2476 wrote to memory of 1272	2476	msedge.exe	93
PID 2476 wrote to memory of 1272	2476	msedge.exe	93
PID 2476 wrote to memory of 1272	2476	msedge.exe	93
PID 2476 wrote to memory of 1392	2476	msedge.exe	97
PID 2476 wrote to memory of 4700	2476	msedge.exe	98
PID 2476 wrote to memory of 1392	2476	msedge.exe	97
PID 2476 wrote to memory of 4700	2476	msedge.exe	98
PID 2476 wrote to memory of 4344	2476	msedge.exe	101
PID 2476 wrote to memory of 5728	2476	msedge.exe	105
PID 2476 wrote to memory of 5736	2476	msedge.exe	106
PID 2476 wrote to memory of 5740	2476	msedge.exe	107
PID 2476 wrote to memory of 2832	2476	msedge.exe	115
PID 2476 wrote to memory of 2832	2476	msedge.exe	115
PID 2476 wrote to memory of 5824	2476	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://tiktok.com/@MS4wLjABAAAAjQiaPExNlBLMs5OzkfeejP8O4Q5pce2yEYusXCg6Ejm2WCaED2XHsMHGzKRfTG7K
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc705dc188,0x7ffc705dc194,0x7ffc705dc1a0
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,9368069505552120158,10966986193785007728,524288 --field-trial-handle=2252,i,14831321121248633528,677816428579137463,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,16573922501721617148,11036332604671850909,262144 --field-trial-handle=2252,i,14831321121248633528,677816428579137463,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2244,i,16288750383078285730,5210759684868118237,524288 --field-trial-handle=2252,i,14831321121248633528,677816428579137463,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3400,i,5748541782684813211,2014790575348789294,2097152 --field-trial-handle=2252,i,14831321121248633528,677816428579137463,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3396,i,5629132880284583332,3011850407841018351,2097152 --field-trial-handle=2252,i,14831321121248633528,677816428579137463,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4148,i,9105492780938837520,12101985383581883100,2097152 --field-trial-handle=2252,i,14831321121248633528,677816428579137463,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,13475298414763163331,6551341797247392345,2097152 --field-trial-handle=2252,i,14831321121248633528,677816428579137463,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:2
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,10825773146521975502,16440584608944262845,524288 --field-trial-handle=2252,i,14831321121248633528,677816428579137463,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,11546042928759976151,3781990850856774501,524288 --field-trial-handle=2252,i,14831321121248633528,677816428579137463,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,17185486284004079113,11820846107137273895,524288 --field-trial-handle=2252,i,14831321121248633528,677816428579137463,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,17185486284004079113,11820846107137273895,524288 --field-trial-handle=2252,i,14831321121248633528,677816428579137463,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,12668966339253637442,5860355867444149985,524288 --field-trial-handle=2252,i,14831321121248633528,677816428579137463,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  PID:5728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4200,i,4398235141672435414,2437220517001261515,524288 --field-trial-handle=2252,i,14831321121248633528,677816428579137463,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:8
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4932,i,6717467299179318874,15668074351162196008,524288 --field-trial-handle=2252,i,14831321121248633528,677816428579137463,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:8
  2⤵
  PID:5740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,2410996000903494468,842405887501273056,524288 --field-trial-handle=2252,i,14831321121248633528,677816428579137463,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:8
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6412,i,7489938877635130761,13746107592286526654,262144 --field-trial-handle=2252,i,14831321121248633528,677816428579137463,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5824

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:912

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

f_0000c3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
Size 55KB
SHA256 c0b1c3c6995c24eabd1a6fcc4f00523e022b546cf1fa4fce6c30d04763244d1b
MD5 cfd886e1ca849a7f8e2600763f236d78
SHA1 c1fc2b10d20c529c01b465a1edc0ed2fe04f0bd5
SHA512 254e37e3650b2c87b524c96f517586b690094abf7c8e0539b050ecdc4c56c2593bedab7b1a830b827ddc19f1c3e05ff4096ebdf4cc969b5bc5fd33cb34e94fd8
SSDEEP 1536:WJG/KL/shmr0SyKV2i0Qz0j72A2+0G+gSRLBeFDP3:liL/8mV2i0ac6A25G+1LBehf
TLSH
T1444302EC6A22F9ADAB11E5E847349AC2F140D6DE34156293509EDB98200F24ECDCB75D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 a6042212ae8e07a8dc0b8b1ebb3e3b1af1f5f64ca45125eb27193277128d9abe
MD5 c6c1c42ade077d076bf0a401f01df512
SHA1 c3dd5aa0a2db87d6f4423db8bdffd69a9059f0a6
SHA512 8a0ba0847a92029457a8c792966768be689fc0205c7b249c9eb02cdfcc4c5cfc20eda1d3840cc72bfc2945cbff196515b9a85223c707bef0b8ec70ea5cd6401f
SSDEEP 192:lCypPBm3/5Iwk1wtSmRc0ci3ev4ts5wZPHgWdDh7ls0wgiecWuU7DT:VeCBbnA1ZDz
TLSH
T13902F063E58A3380C7A3913CE795390933788B7C36EECACAA624647F3566F446141E77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5943f5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5943f5.TMP
Size 3KB
SHA256 4264783c4346a2efe9d5e9d3a51b40d7ffce280589de2b77993dd819958a0a14
MD5 5ce3a3f7def31f779afc6b6b46e53def
SHA1 d304c82f153078e0b196b18433627b2e6443a539
SHA512 eb834637fb88b37ff3c6ddfbd3f294c1aa5da10aec3cbec2fc03161e2e5e3879e7ae087fe19d1ff1591bec4d44b1cb627cba4ea8a66807dd06c79dc979d1dc04
TLSH
T1CD613A7402427282E3E31530D3CA160537B208BDBBDBDE1923B0787EB536F5A856943B
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.tiktok.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 d02ac6c37ce42bdc093bae118861b034eddfa36b5a0268740edaa2d102c8b831
MD5 3e844db13a122050d2d109b6effc9e2d
SHA1 97e470abbef0a757756b1ba67fa7bffd6c55ccf4
SHA512 9ddfb3cfd4226cff939b97933476c5ba416ae475c9f27a67d435e0a71a3e2f4e5135856ffc0af880a09c105e6cd908c29655df2096c746bdeef8f84640f8c712
TLSH
T179618EF753B6C26DAA155EF8AA05AD1B8F580120432C397786D07F3AA7F3471E10175B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8bba55c36c9e292418f6d5e6aa659ff0f3278eaea0a61081a32bd829a11fd131
MD5 3cc06c22db6bcbe4dc14c028c7ee564f
SHA1 fce1578c74642d89006a543f6aa4aa834b52dee1
SHA512 e49dc367e7ec781750ed909e3b3d7cbb02f9c70226023b4c646b12255c2d3d07ac62e316fc1a60cfea7426c42d510b9e320ce689e1dbe4a5aeb52a5336fa6dd9
SSDEEP 192:sxZ7RQkk/fksNXaIdpuwHW6+WNSvM/YwPLfSIgrJ:sxZ71k/fksNXzbHb9/M9
TLSH
T1AB22C8126E38A97B4CC7E219BA25BF53E7F9503291D41E48EAFC861C04E6ADD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 62627bcac4e18ae275b385c14d5e938099217d7c2781cdb997f840716dd49397
MD5 0df35d2754f34336ab1206dd01312870
SHA1 ef95727deb886fcfe7efd0a3da3b937379188fb0
SHA512 89f3f0f8beba4942f147cbfd5dacd05e24df737fc1b80e112c8c94aaeee56f2d1087b4e8a6e62b9919e6c966d240e093eec4d4a4bd96c33d7da5c1c906f9066b
SSDEEP 192:sxZ7RQkk/fksvraIdpuwHW6+WNSX0XYw0zfSIg5NJ:sxZ71k/fksvrzbHb1XJF
TLSH
T13A22B7126E68A97B4CC6F259BA15BF43E7F9503291D51E48AAFC8A1C05E6ACD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9f90515f92cc4d84fc6f799f4eda9ede5f34d74f6f7309592e298c6a18468a15
MD5 13b250c6a60db2df1d0a2942d3d3a397
SHA1 5c56db3108fc50ef2f12c9abb004278ed8d656ce
SHA512 7047a3230d0e67cdb6e18b541fa50cd9baa55b2229d8ea7701fd7da3d2f2b5e562a732e2010591dfdf01efc90387a20a7b5ea466cd9ac21b5aacb9cf302a3330
SSDEEP 192:sxZ7RQkk/fksvXaIdpuwHW6+WNSX0XYw3LfSIg5vJ:sxZ71k/fksvXzbHb1X4T
TLSH
T1F422C8126E78A97B4CC7E219BA15BF53E7F9503291D41E48EAFC861C05E6ADD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9a9599503a1d52488caf0d3e64b2141e7fe72bc4e4ceb591c7a02747b19c6826
MD5 0727bde5e7dd4f58dba48c2ba156a32a
SHA1 42f6d331d12a0c96374da5ae85b858d9119212a8
SHA512 47320bcec6f09e3a0eb52b1f2ac1b3edea11360a0c3b9e2a0489aefc93e0274baa9b939ee24e9967d687d6396f1292a720743160e126ca662aa37d74c8a6af2c
SSDEEP 768:1HmjYDmWvmKqE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBPLlrZ+Derofdan:1HmjYDmWvmKqEu1jakPLZQD16
TLSH
T107C2F93F244CCF7E4FC01A9DDD5A6F972EA802C76A588D4047FA894C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\c71133ae-6097-4e65-af19-feb75c7631db\index-dir\the-real-index
Size 72B
SHA256 57a41f10b6ace1c9cd11a326b81c07e7e4dc501c5770b58cdd4c2ea68ba3faa3
MD5 1616c0d8ea30fa36c92a058105b67d42
SHA1 f15df7fd5cfb3def2724187b8e64a6c56917d39e
SHA512 2d416b8f2e01009fad5d4b32c29419c90ba6f9a423b93d501b8e8d8d5c20d4d778eb85462eced76ede7f1c52c38aaf5754dffe74c6509c1c6a40dd7b2e120e2f
TLSH
T185A00219034C2461D86DC7B91696015066208E610A05278184DC0965FD722445102820
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\c71133ae-6097-4e65-af19-feb75c7631db\index-dir\the-real-index
Size 72B
SHA256 0ebe29eed63aca13bb739b7e46357a13720c5ff79e58a0093aac382c30a53876
MD5 57997f11f379711512da4f6640a09714
SHA1 2f076718faefe5e802df751fe9e0a66db42ad565
SHA512 6a29d48d253e238015d370726fd3ee7564909b9b4b82fffb9ce9abfa77f2f5b6b3423c45faaa0496c7feba20f0b8e8dc2a7caecf21b89058bdb424b65f8ba8e1
TLSH
T1C3A002150B441511C091877055CA265573314D1141111B2194F515B99DE6244691A198
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59139e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\c71133ae-6097-4e65-af19-feb75c7631db\index-dir\the-real-index~RFe59139e.TMP
Size 48B
SHA256 db63173e9fe9b016d557b2e040cd85edbf2034c229bc9f7ce5712e72d04eb494
MD5 53824b447a16fae2aa59d09cc29b0426
SHA1 905eebd3cf73c4767d340dcb7ba53ed240d6a65a
SHA512 c40b4e00f43fd7e9066bfc82e437401dd92216d46138557237a763757a344721c888c0870a316401ff314e4a142d6609f989189fc75b5c5ed84cdcf0d07db59c
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt
Size 159B
SHA256 bedbe3808097b9841f5f7c6cb8392f1065428dfef71cda842e682392519c4941
MD5 1f4dc059343aea9a008b9447ee7d1ed6
SHA1 0267940f0c48921a4a9710b19c4c38546296ac34
SHA512 eb4483984f73e2ed25f25e23a3e46601072e6255fae4fcd3aff979cff957b95ecbe3256be117436b7c2f8ec70fb4acf481e2d51354622db5dc8baa1a0394c146
TLSH
T1D2C08C2B916AC5109EB48EC0B0B961206E26AD92E8828AD7A84225C815208520CE2FB6
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt
Size 159B
SHA256 ffb20aef8a321431894d347f5db2422463c107ddf6ce82d77721ecbcef4bd12f
MD5 7a7ee0d0abac419ee8be9473610090ac
SHA1 1df0a5514b4696bd6f6d80a19772a9a8c6983ad9
SHA512 d4c49f221b3d79445f109930c9f09b1eeaea320c777077d7e8c28ba45d5d593d6f55bab91ca45e9eaec379e66f02b64fc736d5674594891cf7f380b55cd43e31
TLSH
T1B1C08C2B916AC110AE748EC070BA61206D26AC96E89286D7A84225C81A2081208E2FBA
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5913cc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt~RFe5913cc.TMP
Size 165B
SHA256 f8e2905037df7f6297f65e5174806ef697604521874dc014c1beafedd6453d6c
MD5 ea6d9ab4a9d7d5542be6202c8c150b19
SHA1 57c7b08086f7aa4b6a33f9e8ed7e439501bc1a7e
SHA512 cb93d9f2dc1d93b690929a89fa4bb81673c2a23d5506e1a437e6f479415bf7dc49ff5f099c5cadd3c0a5a0d44239728dcd611622bd4963e3ad3c0ab8c8fa6192
TLSH
T125C08C2B916AC2209A744DC1B0B961206D366C80EC8286DBB88235C8153081208D5FB6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 288B
SHA256 cecd259d98f80df234f131e352a7e2333bda23f8b48a917851edf2496827ee5e
MD5 f6a03d3638ef4bdfb7fc29de2e375957
SHA1 96d758178ba8a690a926f265e7847c54ba2b0197
SHA512 2f8900b5847ff143198cebd3d3d6f4f81d824cbd4cf3810652b1919fc051685679af4d6e5dbdded38626aa31b002fcb73288914d80db6ea5616ee02e021e8390
TLSH
T1B7D023154E09C744CE084631F45251E7B3346DFCF10D476F80BC305D2DE30144E52105
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5912d2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5912d2.TMP
Size 48B
SHA256 95562d32616db6710c9034b62fd8cb972b6ee83fe0dbd78c703cf3cc56d017ea
MD5 7312d95242fb1561b35bfac297c9bda2
SHA1 ab5d4ccb57837cd1f03ea24ea8c9e3296998d575
SHA512 718eedac09aa9a972a2b0c701af0e167c4adefffdc0de90564019b5a4c3d613005e5568aaf405e778cb5b29cdb367e21f36ad466dd827ea6dc7e301c0d04c312
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 5e019e1d9eb098d09bb7702bf913f7d0d0791ef6108ab348f5aa29d4e6318e99
MD5 822c875975a049961dca48ea3010851e
SHA1 be6f316bae5b1c24c57271a2c302926708cad63a
SHA512 03fbd6903c7ad33ea9b710243719eb812373b86d6188dab2e42113580002c06dca525333f7141023067a030dbc8a9d1e6cfa2f97394367a04665aff81c55ec4c
TLSH
T13C214C1162FE22103C7E353C815AA4F69A923572B11CE46A7EEC00790AA6E41DEFD9C9
MD5 SHA1 SHA512 TLSH

Submit Download

43b374db-a083-41a7-9727-167e35bfcedb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\43b374db-a083-41a7-9727-167e35bfcedb.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 0a4ba411aa0ffdccc1e870b829b88257faf37327a89b43497a512bf335e2880a
MD5 19d049fa26f2fd9930cf9465ed06a531
SHA1 306f2f2a56c14633d3b239747d4f09ca50b7d6c1
SHA512 4a8076a7fa922dc9d103ceed90b5b11dac537d149a8f32c5b080248efd5f25b76932cecf39f173d82fef4b41fc894347f17e5b8a510c9901394e08b4f998f225
SSDEEP 384:SiFiZcIpsN58TUNTUlIlF1xZ1uXfXf+W86nX6mFwiv8Hol:ZFQp0wgpxYH3X6Ywise
TLSH
T113C229F20CD79836D9AD9787E77D2D028FBCC067B585AA40B7985A1CCC991BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 bd7381faaf77266ed9a6c05ab95ae45e758b34ee7ef921826488b48fc848dc80
MD5 184fc4bb96dc7b74e83da5c9c1a62f50
SHA1 d869e098d1b0d73449557c9f18253e6fe618387b
SHA512 d95af6cef4c0a4f778eac8dd8b321517fa3a673432fbc35a8dd3d0715fe7899b039a03aa2389d3f2364de15fe58ecb0bec7dc2e7696b9bfc3511be7b2f4818e6
SSDEEP 384:PZcIhsNnd51xZ1uXfXf+W86nX6cFwiv8Hol:HhM7xoH3X6awise
TLSH
T13B827D315C38AC775CE6B285F88626138FFC90279AC96F84D5EC6B2D00DDAE91317826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a2d8179af57f2adb0359fabf2c174cce16f308d47ae62fcdc5359b4da5248f25
MD5 580901279013043adbc879ec63cc04ae
SHA1 372a524e6df13053e3145f815e858b86ca5ecc72
SHA512 47b903d306121fe547a9f98a95c8cbb286da0a4669165ee3e98aa45a25da38b615c6e4be10f7f5a146c87fa505370a4052e20a8a35552fff7b29a8df0be91d2a
SSDEEP 384:hZcIhsNnK51xZ1uXfXf+W86nX6cFwiv8Hol:phV7xoH3X6awise
TLSH
T119827D715C38AC7718E6F185F98626138FFC90279AC96F84D5EC6B2D00DDAE91317826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ee4ec20c40de478c66a8ceaa29ad69b8a48408428a811602c5316fc82c8ebb49
MD5 8314b6dfe6d2819e61428e7e8120bcbe
SHA1 9eb84aed0550185d0e04b23664d51e6f9a50ff51
SHA512 c77555664b3a3aa9b7515b6cc4bb4cbca341a9bf1c8d8527e16c224d9fdecbf8ae1315c881478ad519b92536999eb7bb0dba442a691968e0753e519596c46e84
SSDEEP 192:EONz6hZ0QmiUyIbpc/+jV8jzorxoE5wOZobtU6:EONz6oHpu+W8672eU6
TLSH
T10102D8356C787C778EE26E45F48727239FE8116BEE956B84E6E81B1D00C769C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c3b266492a6089e247fb3c741ab76bc2f4fc6bc89df6f8f817c87b3c15202a74
MD5 9c80b0856882d7fe71a65dcf1ed09b19
SHA1 131f7551f17caefb0664d310fc98e8df89e6c34f
SHA512 c53d6fa9d5d030e3f03371299dadb0794b84eb0bdacd9b4720da9ce20c6e89c7304c0507e1607628fdba1cc06808b6920b06f31ad11bceacd624eec7fe733a44
SSDEEP 192:jONy6hZZQmiUyBLbflc/+jV8jzorxonX6dT5cOqokqVU6:jONy6rMflu+W86nX6I9wU6
TLSH
T15112EA366C68BC675DD27595F48732138FD85127EE85BF84D6EC2B1C00DE6AC230A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90a38a48-bac2-4ff4-8745-e5e507b49967.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\90a38a48-bac2-4ff4-8745-e5e507b49967.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7328b1ec897f207afbf7442752bd8fa3fd697263b9a5f00523e98c5d9a0cdee4
MD5 67f0a385505b5ed0dbe52dad7607d2fb
SHA1 d3629e714a2f389d89c86487ed08a3431fee557a
SHA512 5f2e81eadf255ac901c96c02181fec9486cbb04c59e59f5ee0143cdd775c2667987e28e767487ce4cdf1f5a9b9b199b4c2f8b0f483dd9c43d67766caf66b6df3
TLSH
T170411958B6EA1158B373AF5AABF7657D447EB8331E07C45D00020E8F0A67A40C961B37
MD5 SHA1 SHA512 TLSH

Submit Download