hxxps://tiktok[.]com/@MS4wLjABAAAAQJQoJC70DoAOH_CUSkgfPWUJ7nRGOPJ6P4j0Dv5iDTpdWHGV6KIy6TiEJmKcTnMG

Analysis

user interaction
yes
max time kernel
150s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/09/2026, 07:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://tiktok.com/@MS4wLjABAAAAQJQoJC70DoAOH_CUSkgfPWUJ7nRGOPJ6P4j0Dv5iDTpdWHGV6KIy6TiEJmKcTnMG
Sample260928-jsfdpayfld

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2568	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{44712278-ACE2-4B18-9C36-75ED0B8AFDCB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3188	msedge.exe
3188	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2880 wrote to memory of 2980	2880	msedge.exe	88
PID 2880 wrote to memory of 2568	2880	msedge.exe	89
PID 2880 wrote to memory of 4544	2880	msedge.exe	90
PID 2880 wrote to memory of 4544	2880	msedge.exe	90
PID 2880 wrote to memory of 4544	2880	msedge.exe	90
PID 2880 wrote to memory of 3792	2880	msedge.exe	91
PID 2880 wrote to memory of 3792	2880	msedge.exe	91
PID 2880 wrote to memory of 1744	2880	msedge.exe	92
PID 2880 wrote to memory of 1744	2880	msedge.exe	92
PID 2880 wrote to memory of 3004	2880	msedge.exe	93
PID 2880 wrote to memory of 1744	2880	msedge.exe	92
PID 2880 wrote to memory of 3004	2880	msedge.exe	93
PID 2880 wrote to memory of 3004	2880	msedge.exe	93
PID 2880 wrote to memory of 4056	2880	msedge.exe	94
PID 2880 wrote to memory of 4056	2880	msedge.exe	94
PID 2880 wrote to memory of 4056	2880	msedge.exe	94
PID 2880 wrote to memory of 4396	2880	msedge.exe	95
PID 2880 wrote to memory of 4396	2880	msedge.exe	95
PID 2880 wrote to memory of 4396	2880	msedge.exe	95
PID 2880 wrote to memory of 3148	2880	msedge.exe	99
PID 2880 wrote to memory of 1492	2880	msedge.exe	100
PID 2880 wrote to memory of 3148	2880	msedge.exe	99
PID 2880 wrote to memory of 1492	2880	msedge.exe	100
PID 2880 wrote to memory of 2192	2880	msedge.exe	105
PID 2880 wrote to memory of 6140	2880	msedge.exe	114
PID 2880 wrote to memory of 2748	2880	msedge.exe	115
PID 2880 wrote to memory of 5136	2880	msedge.exe	116
PID 2880 wrote to memory of 6020	2880	msedge.exe	124
PID 2880 wrote to memory of 6020	2880	msedge.exe	124
PID 2880 wrote to memory of 4540	2880	msedge.exe	125
PID 2880 wrote to memory of 4540	2880	msedge.exe	125
PID 2880 wrote to memory of 3188	2880	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://tiktok.com/@MS4wLjABAAAAQJQoJC70DoAOH_CUSkgfPWUJ7nRGOPJ6P4j0Dv5iDTpdWHGV6KIy6TiEJmKcTnMG
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffca948c188,0x7ffca948c194,0x7ffca948c1a0
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2020,i,1066606825830803990,10971995977082570692,524288 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,3775734506079837812,15441308063804442476,262144 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2552,i,9728390222370327541,4530704628643880848,524288 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,4543716765814945005,12447887854750104600,2097152 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,114278009808241337,13352739764311232007,2097152 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,16109371512296592775,3680449504587792673,2097152 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,12830798968808897124,3930147293142535723,2097152 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:2
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4716,i,18333637885179137939,4343168510882344735,524288 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,7611929333957531740,6195340523834435833,524288 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,8632898963826411703,7813897709000789844,524288 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,8632898963826411703,7813897709000789844,524288 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,8503214499084675955,16166024212551733767,524288 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,5174437050090538168,12778201895111488363,524288 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:8
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,11554057462164773327,12269092769230051704,524288 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:5136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2052,i,17289573364872416141,12212280059664877885,524288 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,17793615979333336320,14985678556061447422,524288 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:8
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6388,i,9412956429118535655,3372361008520163894,262144 --field-trial-handle=2232,i,4130217580852721381,4071864604035058490,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3188

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3828

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000094

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
Size 55KB
SHA256 c0b1c3c6995c24eabd1a6fcc4f00523e022b546cf1fa4fce6c30d04763244d1b
MD5 cfd886e1ca849a7f8e2600763f236d78
SHA1 c1fc2b10d20c529c01b465a1edc0ed2fe04f0bd5
SHA512 254e37e3650b2c87b524c96f517586b690094abf7c8e0539b050ecdc4c56c2593bedab7b1a830b827ddc19f1c3e05ff4096ebdf4cc969b5bc5fd33cb34e94fd8
SSDEEP 1536:WJG/KL/shmr0SyKV2i0Qz0j72A2+0G+gSRLBeFDP3:liL/8mV2i0ac6A25G+1LBehf
TLSH
T1444302EC6A22F9ADAB11E5E847349AC2F140D6DE34156293509EDB98200F24ECDCB75D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 f49a3db3ef4d11d5ba620d3f5f7caedc971bdb6b1a74389d2cc0ab0e797f3207
MD5 a0e06f4c8eb98f3ba3d7dfe44a1a9202
SHA1 fc536ed629c786b4d8c7c19344b3c146fc9cee6a
SHA512 8adf4324c37c6922b2d150fdfd5a36bd6d25725ad5269f17b487b9bb9e7947be0c86af07c40f1430e0852bc2a341a34755837e18d36d247b71ba7ce9c360fe6a
SSDEEP 96:iE2NIC9kk4zdZh0ykbXgxqFX35ZrjZi+qi2oKugr5aENcs:iCC9kPasEXpZnZi+jiHKs
TLSH
T135F19684CEE63450DF0F81F84CD3DD06B2A86B7545831A160AAAD06F3FEEB9557DD228
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 f63952f09bde8142c0573e3fc8af58d5185ecebaa0adbb0655d1f8f9bff2e460
MD5 12e36639e05937501b54d33efd28e776
SHA1 f2f69c92a17103a403f89c840a2cd5a1efee3a55
SHA512 650c41a62637c01f9c99db2c3d2695e6883ca5685ef3e80f4e525ea05ac0fbdc6421a4ecfef4f4a22ded5b1c169802fcc94992cd3fad593865ccb3a12a7ebf78
TLSH
T1A8816BF753B5C26DAA155EF8AA05AD1ACF980120432C397A86D07F3AABF3471E10175B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 23985bfa477ae260f994e6e651de2cb41f8e7fba60bebcef6e7953218590317e
MD5 07961876d6d50b4320b2b8665ef7d2dd
SHA1 795f1fd739c578da3a284f3e3936848388018b05
SHA512 08d34e002b718f96ebbb9a7feb4098f5e4adc6d76af39df4326b86cddc63ec1bef1e290a5fadc0035c3dd57bfc4b64959ae4ac1ac277ae35f3ed17bac2b20bfc
SSDEEP 192:sxZcYRCWo/fFs1NIdpuiHW6+WNS6w/Y36ug4IgrJ:sxZ9Ho/fFs1ulHb0/Xk9
TLSH
T12722C7516E78A97B8CC7D219FB25BF53E6F9403291D11E88A6FC861C04F66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 135c3c73bb1d8ad8a454ec162ffd1a93b5949f07bce7175c3efbf44893b27961
MD5 7cf4ffbc1435edcef16cdadfacf1f580
SHA1 e8d5cb8060ab46106beceb7e99fad3a9e71b1001
SHA512 bfd44351b4b02f6be4c4cfe43169bbdc8d9277ff05ce1a845c35e57a241c85066ede9dfabc762c968590219d7fb1ac33a555054a7c9eca972b820ea75c755ad5
SSDEEP 192:sxZcYRCWo/fFswNIdp4iHW6+WNSTAZY362g4Ig5iJ:sxZ9Ho/fFswuLHbdZX8U
TLSH
T17122E8526E786D7B8CC7D219FB55BF53E2F9503290D11E88A6FC8A1C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 85a53ac7cb19ba1671971035f36733b5cc6a6387534cced54ff4861131f21d65
MD5 d6a7424beeee0d1d10b03b99d572405a
SHA1 7beb3e5f852bfa49b8f928aaf864341236a34c0c
SHA512 af4c133f7d3a77219429ac15ab689863185179e93af7a6119ac5793647f55fb24e766b11f39281d1f0e43a24ade68905326dd770d19ba3500ce8091a3d53d659
SSDEEP 192:sxZcYRCWo/fFswNIdpuiHW6+WNSKQXY362g4Ig5wJ:sxZ9Ho/fFswulHb4XX8W
TLSH
T1C722E8126E78697B8CCBD219FB25BF53E6F9003295D01E88A6FCC61C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4f1f33240c0738cb005b0bf8663bcde767c763db0508c274ab5fa15025d2eaa0
MD5 010d31108e342187c4af6c440be2b59f
SHA1 24548b54778c77fe775aebd8e26c0fda39bc3576
SHA512 95ae4ac0e4e8309586a381f5a8f16b951d511cd12c4213aa57889b56f76c90da3c9b9f468bbdbb69a03531dd511f29d5baf23a6da323231cadb78b22015d599c
SSDEEP 192:sxZcYRCWo/fFswNIdpuiHW6+WNSTAZY36Hg4Ig5iJ:sxZ9Ho/fFswulHbdZXlU
TLSH
T17622D8516E78697B8CCBD219FB55BF53E2F9503290D11E88A6FC8A1C05E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a06a405be7a81b8706d790bba064a708d39b5f711a3288aa77b531ace6788fea
MD5 c8879aa2ea8142de952b67444af22a6d
SHA1 d510a516bbd39bc1db8c18abc4ea22587a8d94f4
SHA512 1481aba29a703d5dd4c4b64270cc384dabfcffc14c14e510aae7c283f388232f4b040f7cabdf0aa4d69308e2abc846f05fbf6032634ade6e21d4691b81b03bfc
SSDEEP 768:RdKlm7QWvUYm08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/6roa2:RdKlm7QWvUYm0u1ja8/L/E/xa2
TLSH
T1C8C20B3B640CCB7E4FC04A9DDC5A6F9B2EA802C7A6588D4047FA984C02C77EA51274DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\d07e92cc-4b29-4658-8173-86e49cee87e4\index-dir\the-real-index
Size 72B
SHA256 996d7117fd1b450f95368b74b338da5555c4ecae35670c4b7c487137769f18e9
MD5 13fa96f07132373687aa65b5ae59c671
SHA1 0063e7703cc779129c422a79b161b839c9b72069
SHA512 97d5022a1af8accc84ef48ebec039d5b4cadc0238f42fc7ef4547f55615cc3327d3fefa2c3aa291c841163bfb4089e1a5b8367c47f1288ece1a6db172dd96d4a
TLSH
T17CA0026817496442C47DD7F01549018166205E110503771194DD105BBA7A2844211408
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59264b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\d07e92cc-4b29-4658-8173-86e49cee87e4\index-dir\the-real-index~RFe59264b.TMP
Size 48B
SHA256 1405ebce5ebac54fbfc09b1250aca01c0f0133e48bd1fc7e7f43555c7b4970bd
MD5 ddca62c4d1083bbaa3655c0b0ed7f3d7
SHA1 e05329805c30f07fd3849d3d52e0b0ce7602ac8f
SHA512 21a6ce52ea93e95d508b73dd1bcf0f616ee0e3682e8e70bd0de6dd0b56796a589a26803241a90b7d224686bc2228d1ac363b76f87ab9a1d2021f14cabbd78ee6
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt
Size 159B
SHA256 7d7873da6c8e98270f1404f134482f56df0784d79c104cfc48a18c8251310a53
MD5 4d77ed93fb58ec997ee60eea2ee9f6fe
SHA1 eaf62fa833bc3f8eba1c5d0f38c870a301d8cdaf
SHA512 38a6677eca3d70772a2a5278f821eabc097e1fbff44435568117cd1bc7c8cb68c7f4295c20997d0cf835c23866bd0eab0dd57385f23290bdc1295e304f6e53a0
TLSH
T16EC02B6B55A5C010BE70AFC030FEF717ADA75A84EC9686C6E00223DC4650C311421FB7
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59267a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt~RFe59267a.TMP
Size 165B
SHA256 6c2279bf8654e24efced9a62215f0c91d3cf57b00f833504678ffa9db8050b65
MD5 3aa433e46c478fc02ef3048ab75b5a88
SHA1 111adc7a525e5bbbbd02a45471f190e3337b3789
SHA512 309af6a263c0f3d7e0625abece09870a05ef3bdb2d2b5fb20f080025541e06be9cdcfb82255a47e00f973ec86b156ec4b6d15cf8d552beb2ca5d55c7bb5ae379
TLSH
T101C08C6756A581109A306FC070FDAB06ADA75E80AC8246C6A042328C05309224410FB3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 288B
SHA256 7025fc51a853462cd304d7054ccad991570451c216eb78a7df5fe1fafda2ded1
MD5 a05b43cae94df4e094f11fd10e832443
SHA1 821923e518f221f89a1e7ee671df71e1c88291b5
SHA512 f2d1ea34f6eb51864d7a08713d5181362a9e0c9608bcae150068effd587b7d933545319d9143343194cbf4727a62fbb5a83983614f3d1d6c6ee90cb49c08e827
TLSH
T137D022198D04C344CD085673102220F7533DA9B8B90D576F80BC304D3EF30086F8720A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59258f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59258f.TMP
Size 48B
SHA256 38f7c268262409a961f6cdf71d0a96bef54c9e18491117350e8e8f32a16491ac
MD5 e31ac8dc2417feb7f9cdf313ea9162d0
SHA1 36a1ae5a2d9a0726dbf687ee6f50388bbe8f778b
SHA512 5ee379015b7cf9a13dec201b5e7bdd3a5ba817b640ef765fc5554110b68e73ba77696ed5b8c193a732086060e516d5491bb564be714e10a8e0842187a2308519
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b68c399e269bf8e629138b1e3193823694819ff28d90f0db041d1b5e3336b42f
MD5 168c3bf44e5a42a224cc7fcdf9a48fba
SHA1 0ca157dfdb1e73cf222e607514bbcf8bbaeec4ec
SHA512 3fd672b16418be6d6573745fcec2ecc095ff15ca4b947b842be78447578002bf22899c47d7f095740d98d185f2e24d157b46349d09d32e92926c0c8bf0770706
SSDEEP 48:K0q1YEqo4pb0TkIS8pK9g1apxS5YrMYayL2xMwuUUNb4PgISINK9s1uNxmdYHYSo:KIRyKqoy+h2KyQVLiKE82X
TLSH
T15591ED0170BB160138BD394C81718B5E925132B23459EA3ABFFD01B64EAAE180FFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59b27d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59b27d.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c3792d1274270f472e57fda68c3680f70edd2fddbe11d3c64be463eb2abfe446
MD5 539bb1effa8cb2e3fb91eabd9414b52b
SHA1 c109dec3656d2278f1461454b8d3b5ec960c4d43
SHA512 5da2c339078c8093efd6cd3e9e3208ea42a9f8ba6a8e9877b5fde5cbeae867aae48ecec26de5ffebc70faaaaf13df00e8ca4481da3fbecf8e208f201ac75b39a
SSDEEP 96:KqONk1QsjpfbUmjH5ih/cIPURHl8h4otop5HaDJBKP4v+Y1xf//ojdoxyqsoeQBK:BONl6JUm0QmiUy8Pso//TeQBC/VU6
TLSH
T1C502D839BC786CBB9EB3AE45F08777239FA4106BA6911F84D6D85A1D01D725C2303D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 043e534281ecd9587cb0b5d2035453f2a21bdfb11ddf5d4e212e3c119dc6d628
MD5 00397dea6cc527f22ad918c4c90b7461
SHA1 df61dafcab4fa9a2322b9c674e1c2d1243f13139
SHA512 b9e5a5fbe3151505d8c23fee8b748046bea20bf724c3e3fc1a006e59798411dc8e3e6993ac6828afea87892f03686066e70110e937936ed10b1139760b2b108a
SSDEEP 384:wiFiZcIZzsNq8TUNTUlIlJDVQb4Yuh//TyG9tgOIwZOyhLDoK:LFQZzwg0O/bf9XsuXF
TLSH
T12DC218F248E7887AD9AE8743B37E2E038EBCC067B5819654B3D8561DCC961BFC306911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 de6bffe202ae6458db4d02d9871a690947a095230909c3f114533f925a84e9dd
MD5 49e906c80cc76fff9a95ca91bf7176e7
SHA1 c682b187481fc4cbc0b958b411104820cf649f7d
SHA512 56c1f0da46d277ffd75251fea8a47dd0c98f54ebaeec6775e914559cf140bfc765d64d84403b595a65574b57c8d62c23303bdbd72bbbad9aa5f02657b537b58a
SSDEEP 384:HZcIhsNSKDVQb4Ruh//Tyq9tgOIwZOyhLDoK:vhmO/bx9XsuXF
TLSH
T1FE828D32A8789CB7ADFB9184F18776038FB48077E7C55B9485EDAB1D04D62A8030BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 75f71a7a938d8092db894a917de3ae7ae40fed01d19f8e7b7b65c9e66a6d532f
MD5 36170405cfa7428095f284aa2ba103e8
SHA1 7dbd5a8022450dd6b7581ec1bb607ebaa9bb7839
SHA512 5db803b95ccba920b1b455bff195444d02927372c40c3ea3e85683cdd0aebc937020d64a9e4ff68b87dfdb5209054b8b6be158c48eff442b6fa1a2b5f8d767d4
SSDEEP 96:KqONkzQsjpfbUZH5ih/cIPURHl8h4otop5H+DJB4P4v+Y1xf//ojdoxyqsoe8x2G:BON76JUqQmiUy4PKo//TetMNxOqpU6
TLSH
T1D7120A35B878ACBB5E939994F08736138EA44127EBC56F94D6DC2A1C05DB26C6307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4ca207aba206e3db7b6050dcfbe52a2e1e5e181913cb5e19112eb7554ed24a82
MD5 c077f0f6458fbc2786ddd5630e69be52
SHA1 473268e4addcc6d4325a35a6f63af55d8b9c557d
SHA512 c32153e9096b1841e5a764c349ca8ccf39c2dc5bbe8ff761cbefdb952a4d1fbfd262ebbf74b98878e472b5574f75a9f3ceeb25e3caa7014b52ce31949614851b
SSDEEP 384:ZZcIhsNSJDVQb4Ruh//Tyq9tgOIwZOyhLDoK:xhhO/bx9XsuXF
TLSH
T1CE828D32A8789CB7ADFB9184F18776038FB4807BE7C55B9495EDAB1D04D62A8130BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d3369a7-cbc8-442a-8471-8a7728ed2438.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9d3369a7-cbc8-442a-8471-8a7728ed2438.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 40fe66c64fd2571a0cb5392d2cd6d0d62bbccfd4baa91a5c84b2d5d4e065bca2
MD5 579368214da5f147a3110f97f8b4cf04
SHA1 70d14dee1a2a029e941fd943593dd88e83d78687
SHA512 6ccc47fb026ba62949309234870a46c5bb01bbf18c016f5ed11ca672f4bc9e26586499febb5de1c209787e8932c8f34dc470aad48addf0bc019a87506709a12b
TLSH
T1D041296CBAE91058B3777E5AABF6A46D487B78371F06D55D00110E4E0A67B00C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download