hxxps://thepeccato[.]itch[.]io/the-choicer-voicer-051

Analysis

user interaction
yes
max time kernel
110s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 12:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://thepeccato.itch.io/the-choicer-voicer-051
Sample260808-pbcjcsdd66

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4044	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306645449223614"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{F3727612-B1D4-4625-96D7-12ED228C139A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings	TheChoicerVoicer_0-5-1 stable.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe

Suspicious use of FindShellTrayWindow 52 IoCs

pid	Process
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
5680	TheChoicerVoicer_0-5-1 stable.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5680	TheChoicerVoicer_0-5-1 stable.exe
5680	TheChoicerVoicer_0-5-1 stable.exe

Suspicious use of WriteProcessMemory 58 IoCs

description	pid	Process	procid_target
PID 740 wrote to memory of 5032	740	msedge.exe	89
PID 740 wrote to memory of 4044	740	msedge.exe	90
PID 740 wrote to memory of 1796	740	msedge.exe	91
PID 740 wrote to memory of 1796	740	msedge.exe	91
PID 740 wrote to memory of 1796	740	msedge.exe	91
PID 740 wrote to memory of 3816	740	msedge.exe	92
PID 740 wrote to memory of 3816	740	msedge.exe	92
PID 740 wrote to memory of 3960	740	msedge.exe	94
PID 740 wrote to memory of 3964	740	msedge.exe	95
PID 740 wrote to memory of 3960	740	msedge.exe	94
PID 740 wrote to memory of 3960	740	msedge.exe	94
PID 740 wrote to memory of 3964	740	msedge.exe	95
PID 740 wrote to memory of 3964	740	msedge.exe	95
PID 740 wrote to memory of 228	740	msedge.exe	96
PID 740 wrote to memory of 228	740	msedge.exe	96
PID 740 wrote to memory of 228	740	msedge.exe	96
PID 740 wrote to memory of 224	740	msedge.exe	97
PID 740 wrote to memory of 224	740	msedge.exe	97
PID 740 wrote to memory of 224	740	msedge.exe	97
PID 740 wrote to memory of 4008	740	msedge.exe	100
PID 740 wrote to memory of 4008	740	msedge.exe	100
PID 740 wrote to memory of 552	740	msedge.exe	101
PID 740 wrote to memory of 552	740	msedge.exe	101
PID 740 wrote to memory of 2764	740	msedge.exe	103
PID 740 wrote to memory of 1160	740	msedge.exe	104
PID 740 wrote to memory of 1160	740	msedge.exe	104
PID 740 wrote to memory of 2500	740	msedge.exe	105
PID 740 wrote to memory of 2500	740	msedge.exe	105
PID 740 wrote to memory of 2500	740	msedge.exe	105
PID 740 wrote to memory of 3360	740	msedge.exe	106
PID 740 wrote to memory of 3360	740	msedge.exe	106
PID 740 wrote to memory of 3360	740	msedge.exe	106
PID 740 wrote to memory of 4012	740	msedge.exe	107
PID 740 wrote to memory of 4012	740	msedge.exe	107
PID 740 wrote to memory of 4012	740	msedge.exe	107
PID 740 wrote to memory of 4852	740	msedge.exe	108
PID 740 wrote to memory of 4852	740	msedge.exe	108
PID 740 wrote to memory of 4852	740	msedge.exe	108
PID 740 wrote to memory of 3932	740	msedge.exe	113
PID 740 wrote to memory of 4884	740	msedge.exe	114
PID 740 wrote to memory of 224	740	msedge.exe	115
PID 740 wrote to memory of 4768	740	msedge.exe	116
PID 740 wrote to memory of 4768	740	msedge.exe	116
PID 740 wrote to memory of 4768	740	msedge.exe	116
PID 740 wrote to memory of 4780	740	msedge.exe	117
PID 740 wrote to memory of 4780	740	msedge.exe	117
PID 740 wrote to memory of 4780	740	msedge.exe	117
PID 740 wrote to memory of 2416	740	msedge.exe	122
PID 740 wrote to memory of 2416	740	msedge.exe	122
PID 740 wrote to memory of 2416	740	msedge.exe	122
PID 740 wrote to memory of 3360	740	msedge.exe	123
PID 740 wrote to memory of 4012	740	msedge.exe	124
PID 740 wrote to memory of 3360	740	msedge.exe	123
PID 740 wrote to memory of 4012	740	msedge.exe	124
PID 740 wrote to memory of 4012	740	msedge.exe	124
PID 740 wrote to memory of 816	740	msedge.exe	129
PID 740 wrote to memory of 816	740	msedge.exe	129
PID 740 wrote to memory of 1948	740	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://thepeccato.itch.io/the-choicer-voicer-051
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffbf87ec188,0x7ffbf87ec194,0x7ffbf87ec1a0
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,8111321461480912267,17250514443995039770,524288 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,17346334088690593321,9185918686208046810,262144 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,8107257666692204321,3179851190778857070,524288 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,5874789642552258405,13691928080566699727,2097152 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,557596267354839016,7954748785318806090,2097152 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,7632403883482874275,18396991773320543279,2097152 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,10446113900290250747,6219409784533663846,2097152 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,15126680279481819555,1270027713650206046,524288 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,10958427404605187226,10146977592777171369,524288 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,17052283921857371579,3086020222194336993,524288 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,17052283921857371579,3086020222194336993,524288 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6276,i,5902069997406688044,10398375123776170424,524288 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:8
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6472,i,14407116233901760072,4891635642653415620,2097152 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:1
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6680,i,7734182353223265195,3449057755433367460,2097152 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=120,i,663268128227782938,3387470565062248440,2097152 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=5968,i,17403536492097859455,1551446436342695199,2097152 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=6924 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3944,i,13173741861717378614,15760212977869516949,524288 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6856,i,8215302738878995261,10986768523874614122,524288 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:8
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6848,i,13344737588474264680,1331383689627256397,524288 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=6852 /prefetch:8
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6764,i,16664045316669915454,312839308080070172,2097152 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:1
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=4436,i,5529515872295112014,18108879343062873561,2097152 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4500,i,18311452381179565427,5133808191919973945,2097152 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:1
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6780,i,2198030816522520583,13505587567080767286,524288 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6584,i,7014413169772929280,5920617930216716028,2097152 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:1
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6804,i,16227627103277331825,15286926711369684812,524288 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:8
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1228,i,50538665715213157,12354983995075379308,524288 --field-trial-handle=2284,i,1427075207226720371,10510509675614676938,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
  2⤵
  PID:1948

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3944

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5376

C:\Users\Admin\Downloads\TheChoicerVoicer 0.5.1 (Windows)\TheChoicerVoicer_0-5-1 stable.exe
"C:\Users\Admin\Downloads\TheChoicerVoicer 0.5.1 (Windows)\TheChoicerVoicer_0-5-1 stable.exe"
1⤵
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:5680

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 03c9714ceda41208919b91db8014de24ae37606ed2abc96a2531b3653937df48
MD5 8c2296de8b61220530f453b2f30415dd
SHA1 2c66c88bc6a0f8267af3c1881fe9195ca1582177
SHA512 c741a1ee72d19a8af3a3823ca6df21b2e3afeeede73da7c80eb421ce9f7370fb162d00a8565078ba3856a8ccf78493a4b12f92955afe287b59ec5f2dc6911402
TLSH
T1E7D023307A3671C0C21E0030E4110B40236E40B230CF43476194440DADB40C1D2DFEC7
MD5 SHA1 SHA512 TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 68KB
SHA256 9e4788840f43b463a51534f036f6bd9a36e5293bd6da8e4654b43e1d83714d81
MD5 0032df338799c529f8900ed1df3fe473
SHA1 3552463fe133dad96c5fbb369d3225e51f729c51
SHA512 15265ff935bcd4e70263c233fcc97185785291a454838bde98267e26dc2143af16720dae70710ff0149a783ffa484ca7478ae76fc451fe2743c2c1069d7b04e0
SSDEEP 1536:U6UIpg9QPWEgHpuRQAPmrc930G+7F4rwzk50fpuMSKlZh:U6LO9AQy+GnSfDS+Zh
TLSH
T12863129CB8B56F8C40B28EB153ABA01DD306C65DC47B93FAC214B64F029D129A43769F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 38KB
SHA256 49e64d3ed6fa7cd75bd9e1d68a4a6db1667e4706f6354a97bf562dced5c78464
MD5 543599d2ca352c98f24b367fed1efe87
SHA1 a478e6c9c448b507158198b2b9936c8fab198cdc
SHA512 ad6705236eebff2e182a7dc1a1163741962ca6d87e485663843a4badece80424fec831260826f95890b1d4663026198ec5646cb5c7b9ed813374627ec2a96147
SSDEEP 768:GHRXACTGqn4j/ADPN0Qo7pPg0gbCy6E9pvZwcWx83rmnbhaRbRkhQl6:HeR4bA7CVjgbZpP3Wk6b8ruT
TLSH
T1DF03F1AF2B7D6A752F2A9394013F0AF4D48DE01E3465A158A26721F97D2C8D7748B0DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 43KB
SHA256 08b668ab17c2dde5424fbfacddfcca4e37e2471be0e1cfff477831d4122157b3
MD5 a524ec6f978e298c04ff7e6e618245df
SHA1 15e6b5ac570c11bd38953ed2c8d9c2306f062a2c
SHA512 416e1be619b0d64f694a2aa7bf945d89d0d812e7cd12e387efac6574d1c66596d3b075b786a2a399d3c03de326666bb7a196851d85c4b85aa609c85c920ddb42
SSDEEP 768:aD2YhIpzPQAP6aqZjY5tBJtKLNtyn1EnHHDpDm4cuK12p5ZNS/DeWTzR:aDTapzIAP6BuzJtIdptcuG0zNADb
TLSH
T1E5130219B14CB841D529773F326A76F1F61DD50AF9E6FE403A7103400BDADB260A68CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 34KB
SHA256 078203c875dbb4eb1cdf502f1937c24939598e127b478c74e260af4fff505154
MD5 dfcedc490fb5ecc84a8e8fcbdae8b98d
SHA1 b9363e36ee3b5c6715a72ad5b9a01c71087edb0b
SHA512 a054393ccc7db8b289f42007c989b40302233c59d5eb28e8f2fe25f035e27f85ccb5e93b069102917ae80758068046fe0875b4bb1fc0c3338c801663652584fc
SSDEEP 768:l9LKH/ZwlRXxDSw+qkXSW07BsKGUavdLQEcjb4PTx:mZSRxDSwvWH5vJEbCx
TLSH
T17FF2F11D1BED99DA2E91E6A341874E266070113633B6E63BB5124FC47A72FCF346C05D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
Size 22KB
SHA256 a709439292508450e6d5a1d8fa21d2d517c911d006f09f812a512e00acfe6fe5
MD5 2a5aa1f6379ef0b6c488ef620936f08a
SHA1 7daf4224b166a972c32492ea12a6576169ce6c43
SHA512 571650425b9e7410702edd562262c2bd2fc7a6162375d373fe1e8482d38692272f5bcea1755c1813c3a2424a70d4e705e426d508d063f5f566d83cec7cc28efc
SSDEEP 384:CN+FbkgLDe5TcP7i27cqiwSG/HYo1w94zmZMlzcXMXdeQwLJNG9jNvqdaX:NZHyK7T1f/HYF4zmZMlYcX3WNG5Vqdc
TLSH
T1CBA2E1957378E942D38026E0BC91C619F420971AA9682F779C7DE9A4937CCF8CACF550
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 22KB
SHA256 2d73fa9673e220bf3041580104d83bbb0811475867455b1e6fdcd9134f5048f5
MD5 bd819b7840f92cceac2ca33fdaa1d6fe
SHA1 9a09d4238b4df49f1a612b04f518b07c184acd3c
SHA512 e34bfc6bfd14cb341569e70c0ba1a8810366259327c83dac88d2391c170251cba2b544cc46eb09984123a21d78c93269d49a3b5cb9d51c5445f4bd75df8535f2
SSDEEP 384:l0BQL3MGpIjNLz2yApph0Z/MNcj2EMAULVrjvaMR7e6ZqbUrnxf7QWfwLLTGC9kC:lNTMjNLOp4Z/jzURfRe6Gonxf7QJLCut
TLSH
T1B7A2E09364600217F3791EF8B0E37B5B0032708EB2FDC3A9E5091EA5DA775E2425AB12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000095

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
Size 154KB
SHA256 f6dc8f33d66ae579fb5fdc84fd4337246dad152c26425f79b064a9fb722394e3
MD5 430699880aef8260cbb2a4ab955fb451
SHA1 93cb2f861a298b0f8ee48833395cffcbd24cb4d6
SHA512 c5d5e4a886b4c2a3ce3af78bc5e0686e1fdd53e8d0efee7ba7e524280a24942741639c0a162633411f78c9d696f4d082b98c07cf62c4acea424f3a4a8877518a
SSDEEP 3072:4h3wP9A4HrS18JaxcC2WPprxF+2i16g1IfGasBTvHJKfCJaAQooe3ZjBN:4hkrSmW2uh+2i5mfAtvwooMf
TLSH
T1B2F312F00C4BB3EDEA9DC6831573F894150FDCB6459FA205936242B89B4D2AFA0D19CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 a619971fc289c9b398b89cb95ad29e0c3416400730889f06c0e9334d01c23a2a
MD5 cd3d66c56e8f1d80deaac0ef8eea0b10
SHA1 fba66b85bfb38f80f6aedf67392072afd5690334
SHA512 117590ff692ead6b41b27889a5aa2e417e6333e298c470d42d0ee4476e0444a934e2c3c06fe5939541f4963dee4c4f2751fe5d3630793da20c23aad09bdae67d
SSDEEP 96:TZh38kJZ2waOazh/0IA6qRoiXKlp6m+FsIY1C4:d9jTrazp0I9iXKX6m+CdC4
TLSH
T169D1C5BD122E2124D71A02F3D0F013597D32B7C7F49B3D25B358DEF428067DAA95A1A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe596c4d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596c4d.TMP
Size 3KB
SHA256 1639cea40f5697d75776141b24743c05950a504bc3bf86f0d94295c4a604749f
MD5 f2a83ae145e15047f3cc1ea0e093d72f
SHA1 0e0d5dc87be9406830495d695f3fd7df92d71fb3
SHA512 09279478b23e6b65b38f9d44cb7c51347dab1e5120176fdc6b6a9129d3baaa6f5259fa579061362c3b7fdb3d8ddf897f52cc72b5620ab00f3580dddef3dd7993
TLSH
T16871C83D044E4469D3AA03F364F117167D71BBDBF5D32E9571949AF028053D68E4F1A8
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 df74600acf2337141b464b5c671da5d72fcdc18da266469aef8ebd8d757d4d58
MD5 84f7927dcc90f23bba085a25e7555ba7
SHA1 5a31fd10a684eb3ff3c9720eac4180e115f7330d
SHA512 334e013bc0d2898f56cfc3228b43598fd0d3df288feffc9f3c3bfdda214705df627bb7fd47aa56c55704bcc14f8bd8f7e7140b5ab47273a857c3e43975bddce9
SSDEEP 3:MsEllllkEthXllkl2zE/lg3X:/M/xT02zVX
TLSH
T152440208ABA0044AC6001230805183511370E4501613674364554C22AC896400C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 3e9dec69f16fced9b475bf99de576dc5518f31da1be5dd0a08bbc4e31c72360f
MD5 38d0426b862122a353fbd14ea25c047e
SHA1 996fddbd698aa0ce509bcfd24a4963a452da5388
SHA512 c591d8bc0d4934fcc8558c4b7556c13918e6bfe71ce58d36e9bc93debf3b5af0fa37f6e3392ddd918fb86b579240ac746ddd7eacf1805876f0c1d7a15d22917c
SSDEEP 96:DoOjO7ERj8M+NsjD5zKjhjYIwBEOi/d/EMjhjFxjHjhzjhJj9bojcjgjBWjA:DTjO7mjwNsjD52jhjYIkni/d/EMjhjXQ
TLSH
T1CBB1CFF7C7E4466DC91156F09A152F1FCE2D095A426C3C1AC9D4EF4B93F24B1E241A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 8712973d99932ca270d6913dface6e997e64ffa892a57609837cf50d427875ea
MD5 e18da3aed8d54fd33ff19bcbbc1e3886
SHA1 2e1ed42808a0fd1129cbd02347b7698b18c07104
SHA512 9a5572460e36d249073644daffdfe1a1745acfa306f98f2a604bcd91cdc9af14dad7e5768beacfc64a97e7312c1e556c4f854d99e8bd9119ab3735d308ca5c76
SSDEEP 96:DoOjO7ERj8M+NsjDJjqjkzKjhjYIEOi/d/9jpjHjhzjhJj9bojcjgjBWjxwgvjFA:DTjO7mjwNsjDJjqjk2jhjYIni/d/9jp2
TLSH
T14AC1BBF7C7E4466DC91156F09A152F2BDE2D095A426C3C0AC9D8EF4B93F24B1E241A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 57eacc767f1e4602cba17dfc225a17c6d611446858daff915af23d9ce1d936a5
MD5 44deda9e830a32281e54650c6c77fc1a
SHA1 2acc51afd56f2b0e5414cc319e6f728b2b73dc81
SHA512 8b4c576ea814e4a7fde63b40b2f0b387cf21c1581feccced50f38c59299ba04cb08fe4d1b4ff24ce845089f87789efaa5b2e33a86864161ae2d76427b7494581
TLSH
T160D02223530270B5A97C3E8B516AEC8FC73A10690992EED461D0D8991A3147C090B289
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 9bc2ef0bf522460f971dfe076e093da7c205af903bf052930cd3062fd41a0292
MD5 8c93c16202043cf61227d3c9c4d16a09
SHA1 e5e8cc39ecc5ce8df00c4fc8c58b367599a6dd95
SHA512 cdb175bf9e2720f33ec0f9a9cccaab287e23aff3ee46dcd0724504c93856c028c0012422e3c3d386b5616d23d0688e9d003c6117e301290a595310c618911eb0
TLSH
T1AFD02263530170B4A9AC3E96916ABC8EC73A003909829DD561D0D89A1A329AD09471C8
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe58ab20.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe58ab20.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b7d108162f6ad0f54b8787098895847b63e19a0c8e3b0e6a32a1468e5cdb77ed
MD5 bbf17417d6761ea4212beb0d8ec42845
SHA1 e6eb1481ba7956c80966e6fd052b7bb0a36f6847
SHA512 1723e47a0525093be245e95046b68a469cc2d0c5e130983c14e01f00205090df4822613f18527dfed7924702269356e09af04fbbc5530256a9c1bd7f0fc65d35
SSDEEP 192:sxZ2RQkP/f/sns+ZSdpTAxlfHW6+WNiyOtH2j/YzGGfQIgrJ:sxZ2tP/f/sn/4EHbSE/J9
TLSH
T1B032B7526E34697B8CC7D219BA15BF53D6F9503291D11E58E6FC9A1C08E6ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 11350dc24ee1963ca4c32fdcb2fd85cd9d6bbc98bfce94fe849398661cafc163
MD5 86e1340536a730225f1495d9c369c03b
SHA1 188baf2df0138b0744fcd1ef9c6da78ea949452b
SHA512 1a2672233d364c69c51b040d01b9912cf9ffab81f14970688aee62e724c303a77ddfe86435d8664039166fb25f7843e4344e1fcba8fbe1d57b5f6f4593d62318
SSDEEP 192:sxZ2RQ0cB1P/f/shs+DSdpTbu8l3HW6+WNiyOtH2j/YzGGfQIg52Blml:sxZ2Rm1P/f/sh/G/HbSE/JKl0
TLSH
T14652C7526E24D9778CCBD619BE34BF12D6F95022D9910E5CABFCD51C04EB6ED220B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 c6056e4868de2a78795aded9f56716a933c173c3c37f6882237850f5a1253ee6
MD5 2986b4aaefdb26c1f09c7f13b6c84af6
SHA1 b092348c6387f60b90db4ebdfb300549656d8a6e
SHA512 21ab52bd98cab5044a926acde7c771bd927c457948bf499b5f95b3c3368d79f6fd65cdad46c5526c3503d656fb9db0907910cac907539bf14137f2f548b962ee
SSDEEP 192:sxZ0Re0cB4P/f/sFWpV2sJCSdpdmu5lmHW6+WNc+qsMOtHj4XYTfjv8OIgbcgFml:sxZ0Lm4P/f/sFWv2QDiHb5MXer0
TLSH
T16862D552692498B7CCCBD619BE35BF12D7F91022D9810E5CABFCD91C05EA6ED220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 65b49cc0dd07a121f8c89f4358dab0516a2490555eb5e5964e293f1b1ce9d301
MD5 4856f965da4a16538bb838cbd47cad1f
SHA1 d6142f4ba712246118ca68bf1b612abbbfd56bb5
SHA512 92805859b890c6443b8cc26fac72acb7facfb686444d88f03425dceb195eb53f9cbdc0fa7e97d69ace9441111d401df8be24d8c7ccc7ee0a59d03b79cb589450
SSDEEP 192:sxZ0RQ0cB1P/f/shsJ7HSdpHmu5lmHW6+WNcAlMOtHj4XYzpifQIg5cgFml:sxZ0Rm1P/f/shQ7ygHbJMXeJ0
TLSH
T1B652D6525A249977CCC7D619BE34BF12D7F55032C9810E5CABFCD91C18EA6ED220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fc91a225ec8ac417ae11e4eb91a9ae618ffe9d1a66668529fbf27ce86c1adbc2
MD5 2e82b2890bc7fda269a481f8e3daf349
SHA1 8de5ceb08ab0c62d04a826215e7ffca91168dbb4
SHA512 95c5d2075e0a5a20bd8da23bc093f26a392ef0c028c9fadcbc25f57dd67d593dc5c2c04792387de17435e73ef8db19d75febaae345e5c365fb80ddcc4e42a991
SSDEEP 192:sxZ2RQ0cB1P/f/shsJ7hSdpTbu8l3HW6+WNilMOtHj4XYzpifQIg5cBlml:sxZ2Rm1P/f/shQ7Q/Hb8MXesl0
TLSH
T1EA52C7526E24D977CCCBD609BE35BF12E6F9502299810E5CABFCD51C04EB6ED220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 16714ec4b5fe592c324b0556fe47d5122ebed38e572d4e5d84eedf6557aa472e
MD5 f9f70f0e5aedacbed64e8623a36a0fa2
SHA1 3d31490e318b7754c0610a2a6ee6c4bd974a4c48
SHA512 6ba0df476eb8c18f836cc1f79810494e51f6e51830f47e25640b11ff09a0f33d35c75617a85d3245d1b9ec11c116d0b4ae6effbe971e94f755b1812aa77720a3
SSDEEP 192:sxZ0RQ0cB4P/f/shsJ7HSdpHmu5lmHW6+WNcAlMOtHj4XYzpifQIg5cgFml:sxZ0Rm4P/f/shQ7ygHbJMXeJ0
TLSH
T15652D6526A249977CCCBD619BE35BF12D7F55032C9810E5CABFCD91C18EA6ED220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b1c180411d6c463d68e6ab547fb4536f44ead5cc50f58d7a798fc6ceda22668e
MD5 4187a62fc00a8a4b51b746d5f749f6b2
SHA1 85fd5ac75ca76051fdfe433a809419bd103a3eeb
SHA512 6acc1493a823962deb1201347cf79bb53de11dd5f61aab2bf55748662bcd3de73742f29376b1cb306cbff0e6872d858bdddb67185315b81cf434426c883cd929
SSDEEP 768:qck7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBhroy6Y+:qck7u70WvqiEau1jai5LA3Bao+
TLSH
T199C2E93B740CCB7E4F801E9DEC5A6F976E9802C7A6948D4087FA994C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 43e0487e6a171f343e41a10147468a95c94d53414f8d8ac16d7fb6eaf1c49dae
MD5 ad3b082270c9565a5183b9cd3497e464
SHA1 1961bf8d1de60c4b975aeb1cb20d2bc6b0060a38
SHA512 690dcde284780e59c8a758826d4c675f09b121979bd6588326074efa3b06f7279f14ef38f2d09654d27d9bd5022be060d0e7dc78a2e73d23b240d711bbbc2201
SSDEEP 96:KIbCKcfTWKIsS/1ITflP7/cTOWWX/KeuWB/KtVWjrUy+cK9:si1/1ITflP70TO/XduWBStVWjrUh
TLSH
T1E791A516757A0A403C7F794E95A686275F4236633114B56FBFB900E21EAAE100DFECEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593474.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593474.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 0e4af4d14efed00027bce58a541a82620d991df69a2d8dfe06de88b0faf62f4f
MD5 bac74ec0de2784e87385449e1b9bd0f0
SHA1 3c1db93c474667022599314e24955f07413f8e9a
SHA512 8179fb8a299997a0f63a13d5d0ce3ebf9e27b1246608d89e42241cc0ed79f29e9851e87116102d06e0858da1108630924bdf75cc841732cf0702a2936fbdbf80
SSDEEP 384:nZcIhsN4sq2xgCbEWsHZQd0mEMu5EnTKwBODNZOCL0+:PhxLCyHSkMu5EnewBKZO60+
TLSH
T194928D315C386C3B9EE6B145F84A36078EF89167F6C42F58E6EEBB1C05E9658130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 3266e62a25822ba5a87b344a28aa3f354eb0f58351d3cbd44f2c64f86c6101cb
MD5 f94edecce148013eae78dd875fff06ee
SHA1 15445f5eed9c3f8e90f7d677e47baa0c9b836d75
SHA512 5db0f0e0340f8e421c993e19c127fd097f7b1a78e4e84afff94897deabcf752130c992cd60fe65575da6c3bb2302b077639bbc8894ddffc47c3cd98ee1362094
SSDEEP 384:aZcIhsN4Fq2xgCbEWsgi2Qd0mEMu5EnTKwBODNZOCL0+:YhoLCygibkMu5EnewBKZO60+
TLSH
T192928D715C386C3B9EE6B105F84A36078EF89167F6C42F58E6EEBB1C04E9658130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 a758c867cb95f084b293a1d531af782533048fe1455e927ec075d6835e52d7bb
MD5 1c5e1c4ca61cd7f7ea901ed3687dbbc8
SHA1 e3ed7e10b20ca177b4a6f1ac32491a354e36b23b
SHA512 6c75195d4a59f5cc3a0414cee1f49ec284fc7b7a8bba46d5a0ecfde85834387ca087fa6649451f984fb299b37098040e43230f2ec7f6f234db7caffa6c2e2653
SSDEEP 768:zFMYfwgyLC58ibkMHucS0x9akbnewBKZO60+:mYCbM1WmnevZZn
TLSH
T1C7E28EE188D75CB6D99D9BC3973DAD025ABCD077B0845518B3E5BA2CEC4A1BFC312811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 aeb7bee94217b22364f09605b3585cb3b7742fd897c0e9dcbff48f3ccca0c42c
MD5 4e113954f80da231b3a65cb66966ceee
SHA1 a8d282ad36e48d63d325d98d2d97f7e92749bd23
SHA512 7f7dbb5b33c7ee351fe04e5a384a507a05345d03b39efff97991848958959f447e8a4b25fcd8f7251df6c35c36b8387e595fb3cafe1ddf9a0b4b1fa6cfa3729f
SSDEEP 192:MONf64BAQmiUys1TW5GBPKcl+FdGuom1baDY5U6:MONf6eA/hWzd0mSYU6
TLSH
T18302FA34AC756C7B9EB2BE45F5863B175FD4102BE6945B54EAD82B1C00D724C234682A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 73ff9597b8c4701f9c5daa6d868300d151af07f2c38501306c155a8198867ec1
MD5 eb9dd02886bfa36824daae48c9930c90
SHA1 db6eae799019147e99bcc39392fdf1fd6481751f
SHA512 b6ad9d970894768f6e6f5df8bc36ec90982b4d625be64bb1217a0c0a93358b973927129324378731f4437739811a03d4f1e4165e2ee498f63bdcb3fc5e14910e
SSDEEP 384:oiFiZcIkzsNo8TUNTUlIlFq2xgCbEWs3i2Qd0mEML5EnTKwBODNZOCL0+:zFQYNwgyLCy3ibkML5EnewBKZO60+
TLSH
T1BED229F248E7983BD99E9703A77D3D038EBCD067B5806A54B799AA1CCC9517FC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6a128b6edb905003e70da1ca8caf7b70263d478c6b833eefdbc397f92384ff03
MD5 6064eeb6a8008596c977b3aa4a682c51
SHA1 a4706bead6dd3f5eeb3f3edca2911e3dfb1bb95c
SHA512 58574335a833c9425e1123daafb9b85f3c090646a06e51ff8c13832fadb4829aafbc9339b49d52a9a01f29fb181d431cf6c3e3be76f5804247a9943f6bf44a03
SSDEEP 192:0ONh64BQQmiUymyTb5GBPKcl+FdGuom1YKEMBWwGqFEU6:0ONh6eQZ6bzd0mEMl5EU6
TLSH
T1CC120A316C78AC2B5EA2B545F48737135EE4412BEAC46F94E7DD3B1C05EF6AC230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 dabecbdc065b7312f35e4fe31a57ed834a01e0da27ea981f334fb7d20b1b37da
MD5 1c69317cbb215809558a9d9141bbdf23
SHA1 128ad4a050473b64e41710515e60e013db72d3c3
SHA512 951be6e238624d33b08623b3535f818ceb559218f4dc7a6e76b0dd14e1fcb76c2f54367eee9e7e3f398383deb2845cb3abc5d3c8f92c2792f7bbc0463f834e2a
TLSH
T1B9E002229310009FC438033004C317323BB3C131276307075D1002742C123405F205C4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8725b483cba80bce14581d26e04d67b3f7aa686a64d8c49d8ba1318b7986c157
MD5 91eb3859e312bd039e19a2004c811512
SHA1 438a3d27dea7fc354518bca9e4d3959dc475c2d9
SHA512 c157a0827ef351f54a1b159f946e8b008d7f68e4b9d198a05407448664a6924f1774cfcfddc43e63345e97ed27fb564accb44df5a24d34743bcdaf71dab5c3a4
TLSH
T1EDE00123971000EBC438073004C317323BB3823127A306075D1002742C12380AF60984
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58ac29.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58ac29.TMP
Size 392B
SHA256 57910a29b51e119a28435599251fb4e33d3b123e4669830af50ee8a25e4be835
MD5 9499f7c337de1096bde11c7eafbaeda0
SHA1 feaff15a84df0f95975870b824748a52e305d216
SHA512 517a56e51128387af48a0a8085139544af803470c2e00abaeb84c09da16776687772391085134d26d4a2c8ad589df538d45cb1a4960aff6e26d2f7ba69de2938
TLSH
T1AAE002125310009EC0380130048317321B92C13124610707491002542C122405F205C4
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b3a08dffa712bcd64e173d706bdeda1e56e5cfa836a8981bbc20d1801cd637de
MD5 41b1348150bbd32303b8fc790ab0b231
SHA1 577036ffa1a52c240dba373a66fd9d0ee08e3ce0
SHA512 a980011899dbc377a560ff40aeedf4b6537da91e542fd7f8890aceb55e7d1d615e23478fb3ac072e8355e64f5084e3cece1f56b7bdb7a575be9583dc60962194
TLSH
T1FD412668A7E91148B3776E5AABF2A86D487FBD772E07D45D00110D4E0A72E40C9A1B37
MD5 SHA1 SHA512 TLSH

Submit Download

memory/5680-876-0x000002D707400000-0x000002D707401000-memory.dmp

Download

memory/5680-877-0x000002D707400000-0x000002D707401000-memory.dmp

Download

memory/5680-875-0x000002D707400000-0x000002D707401000-memory.dmp

Download

memory/5680-949-0x00007FF7238A0000-0x00007FF7296F8000-memory.dmp

Download

memory/5680-959-0x00007FF7238A0000-0x00007FF7296F8000-memory.dmp

Download

memory/5680-960-0x00007FF7238A0000-0x00007FF7296F8000-memory.dmp

Download

memory/5680-961-0x00007FF7238A0000-0x00007FF7296F8000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads