lumma | hxxps://cdn1[.]synapsecdn[.]to/rel/synapse-v2-launcher-12-5-22[.]zip

Analysis

max time kernel
152s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
01-04-2023 21:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://cdn1.synapsecdn.to/rel/synapse-v2-launcher-12-5-22.zip

Score

10^/10

lumma evasion stealer trojan

Malware Config

Signatures

Lumma Stealer
An infostealer written in C++ first seen in August 2022.
stealer lumma
Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
evasion

Query Registry
T1012

Virtualization/Sandbox Evasion
T1497

Processes:

eu4c5cat.exe

description ioc process

Key opened \REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__ eu4c5cat.exe
Downloads MZ/PE file

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__	eu4c5cat.exe

Checks BIOS information in registry 2 TTPs 2 IoCs

BIOS information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

eu4c5cat.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion	eu4c5cat.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion	eu4c5cat.exe

Executes dropped EXE 5 IoCs

Processes:

rEJZ.binrEJZ.bineu4c5cat.exeCefSharp.BrowserSubprocess.exeCefSharp.BrowserSubprocess.exe

pid process

5632 rEJZ.bin
5744 rEJZ.bin
5800 eu4c5cat.exe
3476 CefSharp.BrowserSubprocess.exe
5304 CefSharp.BrowserSubprocess.exe

pid	process
5632	rEJZ.bin
5744	rEJZ.bin
5800	eu4c5cat.exe
3476	CefSharp.BrowserSubprocess.exe
5304	CefSharp.BrowserSubprocess.exe

Loads dropped DLL 25 IoCs

Processes:

eu4c5cat.exeCefSharp.BrowserSubprocess.exeCefSharp.BrowserSubprocess.exe

pid	process
5800	eu4c5cat.exe
5800	eu4c5cat.exe
5800	eu4c5cat.exe
5800	eu4c5cat.exe
5800	eu4c5cat.exe
5800	eu4c5cat.exe
5800	eu4c5cat.exe
5800	eu4c5cat.exe
5800	eu4c5cat.exe
5800	eu4c5cat.exe
3476	CefSharp.BrowserSubprocess.exe
3476	CefSharp.BrowserSubprocess.exe
3476	CefSharp.BrowserSubprocess.exe
3476	CefSharp.BrowserSubprocess.exe
3476	CefSharp.BrowserSubprocess.exe
3476	CefSharp.BrowserSubprocess.exe
3476	CefSharp.BrowserSubprocess.exe
3476	CefSharp.BrowserSubprocess.exe
5304	CefSharp.BrowserSubprocess.exe
5304	CefSharp.BrowserSubprocess.exe
5304	CefSharp.BrowserSubprocess.exe
5304	CefSharp.BrowserSubprocess.exe
5304	CefSharp.BrowserSubprocess.exe
5304	CefSharp.BrowserSubprocess.exe
5304	CefSharp.BrowserSubprocess.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs
evasion trojan

System Information Discovery
T1082

Processes:

eu4c5cat.exe

description ioc process

Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA eu4c5cat.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	eu4c5cat.exe

Drops file in Program Files directory 2 IoCs

Processes:

setup.exe

description	ioc	process
File created	C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\3ad69651-6283-4c59-a7dc-4afde8521e76.tmp	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\20230401232940.pma	setup.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

eu4c5cat.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	eu4c5cat.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	eu4c5cat.exe

Enumerates system info in registry 2 TTPs 8 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

eu4c5cat.exemsedge.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	eu4c5cat.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key created	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	eu4c5cat.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVendor	eu4c5cat.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSReleaseDate	eu4c5cat.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	eu4c5cat.exe

Modifies registry class 3 IoCs

Processes:

powershell.exemsedge.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000_Classes\Local Settings	powershell.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000_Classes\Local Settings	msedge.exe

Suspicious behavior: EnumeratesProcesses 31 IoCs

Processes:

powershell.exemsedge.exemsedge.exemsedge.exeidentity_helper.exeSynapse Launcher.exeSynapse Launcher.exerEJZ.bineu4c5cat.exeCefSharp.BrowserSubprocess.exeCefSharp.BrowserSubprocess.exemsedge.exe

pid	process
2708	powershell.exe
2708	powershell.exe
3332	msedge.exe
3332	msedge.exe
3068	msedge.exe
3068	msedge.exe
5112	msedge.exe
5112	msedge.exe
4320	identity_helper.exe
4320	identity_helper.exe
5340	Synapse Launcher.exe
5340	Synapse Launcher.exe
5564	Synapse Launcher.exe
5564	Synapse Launcher.exe
5744	rEJZ.bin
5744	rEJZ.bin
5800	eu4c5cat.exe
5800	eu4c5cat.exe
5800	eu4c5cat.exe
3476	CefSharp.BrowserSubprocess.exe
3476	CefSharp.BrowserSubprocess.exe
3476	CefSharp.BrowserSubprocess.exe
3476	CefSharp.BrowserSubprocess.exe
5304	CefSharp.BrowserSubprocess.exe
5304	CefSharp.BrowserSubprocess.exe
5304	CefSharp.BrowserSubprocess.exe
5304	CefSharp.BrowserSubprocess.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe
5248	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 21 IoCs

Processes:

msedge.exe

pid	process
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe

Suspicious use of AdjustPrivilegeToken 7 IoCs

Processes:

powershell.exeSynapse Launcher.exeSynapse Launcher.exerEJZ.bineu4c5cat.exeCefSharp.BrowserSubprocess.exeCefSharp.BrowserSubprocess.exe

description	pid	process
Token: SeDebugPrivilege	2708	powershell.exe
Token: SeDebugPrivilege	5340	Synapse Launcher.exe
Token: SeDebugPrivilege	5564	Synapse Launcher.exe
Token: SeDebugPrivilege	5744	rEJZ.bin
Token: SeDebugPrivilege	5800	eu4c5cat.exe
Token: SeDebugPrivilege	3476	CefSharp.BrowserSubprocess.exe
Token: SeDebugPrivilege	5304	CefSharp.BrowserSubprocess.exe

Suspicious use of FindShellTrayWindow 16 IoCs

Processes:

msedge.exe

pid	process
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe
3068	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

msedge.exe

description	pid	process	target process
PID 3068 wrote to memory of 1600	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 1600	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 544	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 3332	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 3332	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe
PID 3068 wrote to memory of 724	3068	msedge.exe	msedge.exe

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell start shell:Appsfolder\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge https://cdn1.synapsecdn.to/rel/synapse-v2-launcher-12-5-22.zip
1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2708

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-redirect=Windows.Launch https://cdn1.synapsecdn.to/rel/synapse-v2-launcher-12-5-22.zip
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:3068

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffc926746f8,0x7ffc92674708,0x7ffc92674718
2⤵
PID:1600

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2216 /prefetch:2
2⤵
PID:544

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 /prefetch:3
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:3332

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2756 /prefetch:8
2⤵
PID:724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3676 /prefetch:1
2⤵
PID:1788

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3656 /prefetch:1
2⤵
PID:2236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:1
2⤵
PID:2016

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:1
2⤵
PID:4820

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3748 /prefetch:8
2⤵
PID:924

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --configure-user-settings --verbose-logging --system-level --msedge --force-configure-user-settings
2⤵
- Drops file in Program Files directory
PID:1976

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x224,0x228,0x22c,0x220,0x230,0x7ff7b06f5460,0x7ff7b06f5470,0x7ff7b06f5480
3⤵
PID:5020

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3748 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4320

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5988 /prefetch:1
2⤵
PID:1716

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5996 /prefetch:1
2⤵
PID:612

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5280 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:5112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5868 /prefetch:1
2⤵
PID:2808

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=4464 /prefetch:8
2⤵
PID:3104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3292 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:5248

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1900 /prefetch:1
2⤵
PID:5768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3792 /prefetch:1
2⤵
PID:3748

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6312 /prefetch:1
2⤵
PID:5920

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
2⤵
PID:3828

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6064 /prefetch:1
2⤵
PID:5948

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6320 /prefetch:1
2⤵
PID:5236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6932 /prefetch:1
2⤵
PID:4448

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6808 /prefetch:1
2⤵
PID:5216

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6860 /prefetch:1
2⤵
PID:1968

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7140 /prefetch:1
2⤵
PID:5456

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6632 /prefetch:1
2⤵
PID:3360

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1
2⤵
PID:5640

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6948 /prefetch:1
2⤵
PID:1656

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,8443512217392354267,7194500509540870207,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6288 /prefetch:1
2⤵
PID:2956

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2616

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4584

C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\Synapse Launcher.exe
"C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\Synapse Launcher.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5340

C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\rEJZ.bin
"bin\rEJZ.bin"
2⤵
- Executes dropped EXE
PID:5632

C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\Synapse Launcher.exe
"C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\Synapse Launcher.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5564

C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\rEJZ.bin
"bin\rEJZ.bin"
2⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5744

C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\eu4c5cat.exe
"bin\eu4c5cat.exe"
3⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5800

C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.BrowserSubprocess.exe
"C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.BrowserSubprocess.exe" --type=gpu-process --field-trial-handle=3696,6783698977761923365,12558404155086955534,131072 --enable-features=CastMediaRouteProvider --disable-features=OutOfBlinkCors --no-sandbox --log-file="C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\debug.log" --lang=en-US --cefsharpexitsub --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --use-gl=swiftshader-webgl --log-file="C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\debug.log" --mojo-platform-channel-handle=3704 /prefetch:2 --host-process-id=5800
4⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3476

C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.BrowserSubprocess.exe
"C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.BrowserSubprocess.exe" --type=utility --field-trial-handle=3696,6783698977761923365,12558404155086955534,131072 --enable-features=CastMediaRouteProvider --disable-features=OutOfBlinkCors --lang=en-US --service-sandbox-type=network --no-sandbox --log-file="C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\debug.log" --lang=en-US --cefsharpexitsub --log-file="C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\debug.log" --mojo-platform-channel-handle=3948 /prefetch:8 --host-process-id=5800
4⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5304

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Synapse Launcher.exe.log

Filesize
1KB

MD5
96a530fc8267c0b81f305e29b59abd11

SHA1
0b352ae803f8fabd17e1c0a58b864e84a3f26798

SHA256
a45c28f2204c97b7d5f9cb4fe8e827ba943aed11e7582941a50938208e1d5d33

SHA512
862672c177856a208e9fdd23099f9a2e15810f7562f5579aff9f9870e1acddee9ce1b2314a33fde0e388003d62e99db0d94d1dfd55b8943a30761a68aa3c3240

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
5a10efe23009825eadc90c37a38d9401

SHA1
fd98f2ca011408d4b43ed4dfd5b6906fbc7b87c0

SHA256
05e135dee0260b4f601a0486401b64ff8653875d74bf259c2da232550dbfb4f5

SHA512
89416a3f5bf50cd4a432ac72cd0a7fb79d5aeb10bdcc468c55bbfa79b9f43fab17141305d44cb1fe980ec76cc6575c27e2bcfcbad5ccd886d45b9de03fb9d6d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c1a3c45dc07f766430f7feaa3000fb18

SHA1
698a0485bcf0ab2a9283d4ebd31ade980b0661d1

SHA256
adaba08026551b1b8f6c120143686da79f916d02adbef4a8d1c184e32a19fd48

SHA512
9fc93f01ab4b14f555791d757ffe881787cc697102547c61847552e597e206e70c6d35fedff559c72a0a67d1b95e769095ecb0a8a7d4f07cf58a7a0d57d3e9f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
18KB

MD5
aa9b83f527f9508819df2255c76c9f7f

SHA1
1e7a051eaabce7e153f98f64ee0e84e564e194b1

SHA256
fc16cd578cd72cb69bb15aad729eea569f6565edb0067f375e16069de101c0c1

SHA512
6dd3fd8a0c26ae7f5efa37fd33849fb6bca273eb610dd5d6176bb4dce965301c6a362884c2e6c168fccca234375cacb93a5d0755aaeb46f79030f000c7c2f9dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

Filesize
70KB

MD5
e5e3377341056643b0494b6842c0b544

SHA1
d53fd8e256ec9d5cef8ef5387872e544a2df9108

SHA256
e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25

SHA512
83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk

Filesize
2KB

MD5
6c9d260dc8513eed6816b063bf569b14

SHA1
dc197bd4cb40ea0b4e672e43ce2847eed2a88c09

SHA256
b7bfec5280b7a216c8a9aeb5d786f331bcfef74266ab772a1acd7d541faf7707

SHA512
c5822e9e009eaefb2bf43488dc2ece7811be2e7b8b58f9ede726baf59e38172161480ddadc642d67e356382853ae40f795c18bd57cb737defb69eb01cfe23579

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
307B

MD5
a07bb7bd05fe9c6b4c4039bcbdaf1aba

SHA1
bc8e8c9a7dee9de222fcabde9a431677b30fdf7c

SHA256
bf31118bf22c7cc7719f72e293881bc4ef6e09faf0653b266b26a4cd1fe4efba

SHA512
6e2769af8a64fb49772338b073020a6c58251b351ef9c6457175cf41ab08f0b93689269bc947bdc8a6a0baf691bdfad9ec4ce982adb37c505ecbd1a28b02db04

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
1d4645b332815a6c0633ffb51c4efb24

SHA1
ffb03f01ed349e1d87407802a9dd56481d1e67a7

SHA256
19b4c1675079d30b9a4f727f72dcb7e0752006189108c9b1e9a8c8667a9cbf58

SHA512
e0010f70bc567c1accd79d729622e51b432c747f388eeb00536171cbdd8b57583f076793375d0e192302cbd2d9a40af9cd3f3567a27c046231659e7faff3d8f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
ff6f49d13f24f29dcaf780a7f5117eb1

SHA1
dde3afc6a2fe28e53ce61665f6208f41ab5ef94b

SHA256
8d41ef511f0521026fe0f5ce86facf4a4faad11e92f26c090ec2c0e3114184fc

SHA512
6fe46c2729d8bf220dac4c3d5e87f8a2e5f8d7f066c800e7feef5143dbd7ae24ed5ea61dbbaacd762f48adb8b816201a6c25b99e6212ae0a1eb8b1c252316be1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
17f7a555e059e0637361ee42a4f4817a

SHA1
4b1117be6ebd5350d31b058647e09a4174d83701

SHA256
45086802f8caaea6f54cebe460f29fcdb46876771832b8c9ea36d1e979bea4ab

SHA512
16b506f11dd90cc3c9edbd57d11fe85e4bdc0047133b1f0426a58f467ee133b1f8afc7603528fc37702d3b0f151dc9807034de08afd341482fec5ac69d10875e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
4KB

MD5
8e946e34fbe40b4a3fb34ae44527c0ad

SHA1
305dab15733fb132eff1290b58dbe33abb0ac1cc

SHA256
d0e0eaf704efe3c51b0bc1534a164949e760792301aeb5cc7d0a415c7c55d967

SHA512
ac7f2e2835004cea46dc34e2254194c5fe1c8e7895c16e5ff1627a63fc235835d4db85369ce3ec1e459de4fc767606beee91513475833dd61403e6a084d16c4e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
5edab6d3ffbeee247ccb4423f929a323

SHA1
a4ad201d149d59392a2a3163bd86ee900e20f3d9

SHA256
460cddb95ea1d9bc8d95d295dd051b49a1436437a91ddec5f131235b2d516933

SHA512
263fa99f03ea1ef381ca19f10fbe0362c1f9c129502dc6b730b076cafcf34b40a70ee8a0ee9446ec9c89c3a2d9855450609ec0f8cf9d0a1b2aebdd12be58d38c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
749e9bbc4137ef2fd4cac436df50af94

SHA1
abb715f40a178093bc11084efc83874926d5cf2e

SHA256
ccd810ef8dc1b350677e4ca4fa5e8c827351538960d444a8d9d4ffafc7710a2d

SHA512
cc558489ef849196dd163c9a33f2b77ba305511211b3c2573d0b9241e42a439e0a6081dc84112ef9e5d54558eb4af622fb163777a9df16bd151cb95aecb5c0fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
61797f5adc9fe891a3347075bebb0ac6

SHA1
92b2e7d52f4527fb0a3fc7e473e7c1908c72a4ed

SHA256
a50fa941b02c89a6b4e36766f204cb9318a674b45a14c52de7cc0f2e37dc17aa

SHA512
847f276b77826118015954c308e85b7c3fba60c240ba362e5ef107fe1edde0b7c292229d4d03c3599bb22f4bcd2aed59b1ed1ae364c0f3252574a2fe882ee9bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b91f3faf-6527-47ef-8726-816f8746140e.tmp

Filesize
10KB

MD5
e02c7d1677584463066e30a2a026ff87

SHA1
ef961f07d24f52882eb5217b455d419fb4abd645

SHA256
90fb1f88ea1b7ab80caf6fba71b1a2d9f4230542a591cec645a0e630eff986da

SHA512
7b0f1c3bc21e5820540052c8381245d6228e3ee55ac8f813824ceb3c730819b24bf09145401fcad7d83a6a070261e70f223e5d2947e319273c677d7cd6903063

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ea3da35c.ud2.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
3KB

MD5
174b27cbf8103e1dd1c67afb0f322756

SHA1
21b8dd39e4dffc8e1ad0ca93c9243c0970f4a140

SHA256
28dd735ca096bc800eff34eef8791414c5635cc58eae8ef375aab025111c31b4

SHA512
482a4a3f80e0cf3d41394873786e276a9d0ceeeaa7c4fd8aac5546786f8c9d274a02df7101a5b9fe6cf0418004abcf7c866cb19450d991bd20c2617f04276b83

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22.zip

Filesize
351KB

MD5
b03b887ae392b6f33fad562becfc0482

SHA1
101c2388c16ca7678a8426739ec7a1b505a6f6aa

SHA256
93db5f4e53b9c0514b9c0c4c562be8d8e7c3d64f8542c03b7e7f032a9c5d0c55

SHA512
0c1cd2e1f5c32b76aa8c994b6399acf81c6f9e2558e120d2eefcde9628a162fa4c3c74aae519a59640f49ee6ca1a33f3faeeaea5e8c02aef9749af0c74d4dc73

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.BrowserSubprocess.Core.dll

Filesize
912KB

MD5
67e9fdff12286ad0ff11aa7e8a7775d9

SHA1
245ec015e953bb395cf5d1e4f54804166daeaf68

SHA256
b184f42ad13993a963700ad40400d401e398a46f72056f5907b6acdff986c63d

SHA512
42c068e0b157fa5bd9ec9be977c1ec44712fc78909efb64961dc1e34d6c7fccc7af6bb685e847f32da9fe9124a215ad3adea08317279851c8ffd2761a3b47870

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.BrowserSubprocess.Core.dll

Filesize
912KB

MD5
67e9fdff12286ad0ff11aa7e8a7775d9

SHA1
245ec015e953bb395cf5d1e4f54804166daeaf68

SHA256
b184f42ad13993a963700ad40400d401e398a46f72056f5907b6acdff986c63d

SHA512
42c068e0b157fa5bd9ec9be977c1ec44712fc78909efb64961dc1e34d6c7fccc7af6bb685e847f32da9fe9124a215ad3adea08317279851c8ffd2761a3b47870

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.BrowserSubprocess.Core.dll

Filesize
912KB

MD5
67e9fdff12286ad0ff11aa7e8a7775d9

SHA1
245ec015e953bb395cf5d1e4f54804166daeaf68

SHA256
b184f42ad13993a963700ad40400d401e398a46f72056f5907b6acdff986c63d

SHA512
42c068e0b157fa5bd9ec9be977c1ec44712fc78909efb64961dc1e34d6c7fccc7af6bb685e847f32da9fe9124a215ad3adea08317279851c8ffd2761a3b47870

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.BrowserSubprocess.Core.dll

Filesize
912KB

MD5
67e9fdff12286ad0ff11aa7e8a7775d9

SHA1
245ec015e953bb395cf5d1e4f54804166daeaf68

SHA256
b184f42ad13993a963700ad40400d401e398a46f72056f5907b6acdff986c63d

SHA512
42c068e0b157fa5bd9ec9be977c1ec44712fc78909efb64961dc1e34d6c7fccc7af6bb685e847f32da9fe9124a215ad3adea08317279851c8ffd2761a3b47870

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.BrowserSubprocess.Core.dll

Filesize
912KB

MD5
67e9fdff12286ad0ff11aa7e8a7775d9

SHA1
245ec015e953bb395cf5d1e4f54804166daeaf68

SHA256
b184f42ad13993a963700ad40400d401e398a46f72056f5907b6acdff986c63d

SHA512
42c068e0b157fa5bd9ec9be977c1ec44712fc78909efb64961dc1e34d6c7fccc7af6bb685e847f32da9fe9124a215ad3adea08317279851c8ffd2761a3b47870

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.BrowserSubprocess.Core.dll

Filesize
912KB

MD5
67e9fdff12286ad0ff11aa7e8a7775d9

SHA1
245ec015e953bb395cf5d1e4f54804166daeaf68

SHA256
b184f42ad13993a963700ad40400d401e398a46f72056f5907b6acdff986c63d

SHA512
42c068e0b157fa5bd9ec9be977c1ec44712fc78909efb64961dc1e34d6c7fccc7af6bb685e847f32da9fe9124a215ad3adea08317279851c8ffd2761a3b47870

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.BrowserSubprocess.Core.dll

Filesize
912KB

MD5
67e9fdff12286ad0ff11aa7e8a7775d9

SHA1
245ec015e953bb395cf5d1e4f54804166daeaf68

SHA256
b184f42ad13993a963700ad40400d401e398a46f72056f5907b6acdff986c63d

SHA512
42c068e0b157fa5bd9ec9be977c1ec44712fc78909efb64961dc1e34d6c7fccc7af6bb685e847f32da9fe9124a215ad3adea08317279851c8ffd2761a3b47870

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.BrowserSubprocess.exe

Filesize
7KB

MD5
1687e4430649fdd4fde98a120f992836

SHA1
fd7227e15928bee5335772cd72dba0047f6d06ce

SHA256
5b0d7eec5ae0f5af562ec02611dbaadbfba6b308ba0345cb19b30a0a84f937a7

SHA512
a6c3b0db67a4f27a37ee2b9302752c2094015bcca9a006561805fbe93f178e163e47501bc3c2c120cb8469a7985d69533020f9d736e6409e31fdc1084e279f4d

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.BrowserSubprocess.exe

Filesize
7KB

MD5
1687e4430649fdd4fde98a120f992836

SHA1
fd7227e15928bee5335772cd72dba0047f6d06ce

SHA256
5b0d7eec5ae0f5af562ec02611dbaadbfba6b308ba0345cb19b30a0a84f937a7

SHA512
a6c3b0db67a4f27a37ee2b9302752c2094015bcca9a006561805fbe93f178e163e47501bc3c2c120cb8469a7985d69533020f9d736e6409e31fdc1084e279f4d

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.BrowserSubprocess.exe

Filesize
7KB

MD5
1687e4430649fdd4fde98a120f992836

SHA1
fd7227e15928bee5335772cd72dba0047f6d06ce

SHA256
5b0d7eec5ae0f5af562ec02611dbaadbfba6b308ba0345cb19b30a0a84f937a7

SHA512
a6c3b0db67a4f27a37ee2b9302752c2094015bcca9a006561805fbe93f178e163e47501bc3c2c120cb8469a7985d69533020f9d736e6409e31fdc1084e279f4d

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.Core.dll

Filesize
1.3MB

MD5
a44554d38b7a25a7ab2320fe731c5298

SHA1
c287a88fd3a064b387888f4bbc37a0630c877253

SHA256
35980974bdba6d5dd6a4dc1072e33aab77f72f56c46779cb0216e4801dcc36ab

SHA512
bd8956b7e8ca6d1129fbbb950dd913183b3e92601c2c900aed26d695782e4663654ac57074e1f0f2efcf9cced969487162910dc9bb52b42572d61994b07f2aad

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.Core.dll

Filesize
1.3MB

MD5
a44554d38b7a25a7ab2320fe731c5298

SHA1
c287a88fd3a064b387888f4bbc37a0630c877253

SHA256
35980974bdba6d5dd6a4dc1072e33aab77f72f56c46779cb0216e4801dcc36ab

SHA512
bd8956b7e8ca6d1129fbbb950dd913183b3e92601c2c900aed26d695782e4663654ac57074e1f0f2efcf9cced969487162910dc9bb52b42572d61994b07f2aad

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.Core.dll

Filesize
1.3MB

MD5
a44554d38b7a25a7ab2320fe731c5298

SHA1
c287a88fd3a064b387888f4bbc37a0630c877253

SHA256
35980974bdba6d5dd6a4dc1072e33aab77f72f56c46779cb0216e4801dcc36ab

SHA512
bd8956b7e8ca6d1129fbbb950dd913183b3e92601c2c900aed26d695782e4663654ac57074e1f0f2efcf9cced969487162910dc9bb52b42572d61994b07f2aad

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.Core.dll

Filesize
1.3MB

MD5
a44554d38b7a25a7ab2320fe731c5298

SHA1
c287a88fd3a064b387888f4bbc37a0630c877253

SHA256
35980974bdba6d5dd6a4dc1072e33aab77f72f56c46779cb0216e4801dcc36ab

SHA512
bd8956b7e8ca6d1129fbbb950dd913183b3e92601c2c900aed26d695782e4663654ac57074e1f0f2efcf9cced969487162910dc9bb52b42572d61994b07f2aad

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.Wpf.dll

Filesize
83KB

MD5
1533d9b2ed991ad4fecef548dc762565

SHA1
7a0664cc6bdc5ffd23c4aba43fa7b2acdfe949f4

SHA256
8e6e874d51f654c1c081cd1658a2e4ad8e3b92e74f9406e8c4eb34d354ab8791

SHA512
710677d3c6ebff9da638d22a3ae800eb12ba947aad9acb4e42f9e9268ade1b8dde680b4aa135121851285943aecc0fc9be85c5ca8a269d6857b35e905c7b7c12

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.Wpf.dll

Filesize
83KB

MD5
1533d9b2ed991ad4fecef548dc762565

SHA1
7a0664cc6bdc5ffd23c4aba43fa7b2acdfe949f4

SHA256
8e6e874d51f654c1c081cd1658a2e4ad8e3b92e74f9406e8c4eb34d354ab8791

SHA512
710677d3c6ebff9da638d22a3ae800eb12ba947aad9acb4e42f9e9268ade1b8dde680b4aa135121851285943aecc0fc9be85c5ca8a269d6857b35e905c7b7c12

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.dll

Filesize
219KB

MD5
92defcf3ee31db03999e8ea41742f8f8

SHA1
2d5a94c029e1ac0df07a2055f03ca3d77ceb76b6

SHA256
d3873ec8cf9a80b3b5691445cd0f6d2a38f5a2432864d7fa372b751bad54e891

SHA512
d58f4c6bf526ed5e19bbb9c36db8fa192c63eb770b8bb5cebef0e1baf69d35ec3e1367062b9d2af9aa654d97e9cdcecca9c12bc73d9097c38a9c7e6dc11f103a

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.dll

Filesize
219KB

MD5
92defcf3ee31db03999e8ea41742f8f8

SHA1
2d5a94c029e1ac0df07a2055f03ca3d77ceb76b6

SHA256
d3873ec8cf9a80b3b5691445cd0f6d2a38f5a2432864d7fa372b751bad54e891

SHA512
d58f4c6bf526ed5e19bbb9c36db8fa192c63eb770b8bb5cebef0e1baf69d35ec3e1367062b9d2af9aa654d97e9cdcecca9c12bc73d9097c38a9c7e6dc11f103a

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.dll

Filesize
219KB

MD5
92defcf3ee31db03999e8ea41742f8f8

SHA1
2d5a94c029e1ac0df07a2055f03ca3d77ceb76b6

SHA256
d3873ec8cf9a80b3b5691445cd0f6d2a38f5a2432864d7fa372b751bad54e891

SHA512
d58f4c6bf526ed5e19bbb9c36db8fa192c63eb770b8bb5cebef0e1baf69d35ec3e1367062b9d2af9aa654d97e9cdcecca9c12bc73d9097c38a9c7e6dc11f103a

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.dll

Filesize
219KB

MD5
92defcf3ee31db03999e8ea41742f8f8

SHA1
2d5a94c029e1ac0df07a2055f03ca3d77ceb76b6

SHA256
d3873ec8cf9a80b3b5691445cd0f6d2a38f5a2432864d7fa372b751bad54e891

SHA512
d58f4c6bf526ed5e19bbb9c36db8fa192c63eb770b8bb5cebef0e1baf69d35ec3e1367062b9d2af9aa654d97e9cdcecca9c12bc73d9097c38a9c7e6dc11f103a

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.dll

Filesize
219KB

MD5
92defcf3ee31db03999e8ea41742f8f8

SHA1
2d5a94c029e1ac0df07a2055f03ca3d77ceb76b6

SHA256
d3873ec8cf9a80b3b5691445cd0f6d2a38f5a2432864d7fa372b751bad54e891

SHA512
d58f4c6bf526ed5e19bbb9c36db8fa192c63eb770b8bb5cebef0e1baf69d35ec3e1367062b9d2af9aa654d97e9cdcecca9c12bc73d9097c38a9c7e6dc11f103a

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.dll

Filesize
219KB

MD5
92defcf3ee31db03999e8ea41742f8f8

SHA1
2d5a94c029e1ac0df07a2055f03ca3d77ceb76b6

SHA256
d3873ec8cf9a80b3b5691445cd0f6d2a38f5a2432864d7fa372b751bad54e891

SHA512
d58f4c6bf526ed5e19bbb9c36db8fa192c63eb770b8bb5cebef0e1baf69d35ec3e1367062b9d2af9aa654d97e9cdcecca9c12bc73d9097c38a9c7e6dc11f103a

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\CefSharp.dll

Filesize
219KB

MD5
92defcf3ee31db03999e8ea41742f8f8

SHA1
2d5a94c029e1ac0df07a2055f03ca3d77ceb76b6

SHA256
d3873ec8cf9a80b3b5691445cd0f6d2a38f5a2432864d7fa372b751bad54e891

SHA512
d58f4c6bf526ed5e19bbb9c36db8fa192c63eb770b8bb5cebef0e1baf69d35ec3e1367062b9d2af9aa654d97e9cdcecca9c12bc73d9097c38a9c7e6dc11f103a

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\D3DCompiler_47.dll

Filesize
3.5MB

MD5
f76b1d2cd95385b21e61874761ddb53a

SHA1
e5219dc55dcd6b8643e3920ad21d0640fd714383

SHA256
8bf0eeb5081d8397e2f84f69449c8a80d9c0cdcf82bcef7a484309046adcb081

SHA512
8e5c6541bbea6730c4f6392439454f516d56ac9ad6d6b55336e52361cc80a35fbed8a90d58020d92fa4ac9fcfeee6c280754a9e99cc32bae901b00306626e69f

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\SLAgent.dll

Filesize
6.0MB

MD5
9b248dfff1d2b73fd639324741fe2e08

SHA1
e82684cd6858a6712eff69ace1707b3bcd464105

SHA256
39943c30732988289ca346902f007a72124bd98b82e08b0b9739241cdab4018e

SHA512
56784a895f113088e3c92ccd96f354473e5d849fb9d0798868ff5e9477f60854e8bc7c9759c63417c9298f8702abab266722439b445977c6e940da393b8b696c

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\SLAgent.dll

Filesize
6.0MB

MD5
9b248dfff1d2b73fd639324741fe2e08

SHA1
e82684cd6858a6712eff69ace1707b3bcd464105

SHA256
39943c30732988289ca346902f007a72124bd98b82e08b0b9739241cdab4018e

SHA512
56784a895f113088e3c92ccd96f354473e5d849fb9d0798868ff5e9477f60854e8bc7c9759c63417c9298f8702abab266722439b445977c6e940da393b8b696c

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\SynapseInjector.dll

Filesize
6.0MB

MD5
9b248dfff1d2b73fd639324741fe2e08

SHA1
e82684cd6858a6712eff69ace1707b3bcd464105

SHA256
39943c30732988289ca346902f007a72124bd98b82e08b0b9739241cdab4018e

SHA512
56784a895f113088e3c92ccd96f354473e5d849fb9d0798868ff5e9477f60854e8bc7c9759c63417c9298f8702abab266722439b445977c6e940da393b8b696c

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\cef.pak

Filesize
2.0MB

MD5
8fc7b5ede33bd0c9383e192dd9cd6293

SHA1
d649304001bca369eb71443b1be3d279f231aa97

SHA256
5140abe33c79ded61f11fd2945f5baef3d48024cc29e8877b6c571045ab91bac

SHA512
5d7f23ff2147d1b005f0941c3ebb3de5f35eae4fa72e2566ab7751b5cf04543676e6f680c85b183f6995f2ca9fa455a9ab446062db054c778a83ca31dbe98847

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\cef_100_percent.pak

Filesize
639KB

MD5
f9584dcc12af247be531f348c856f65a

SHA1
6c78561f7641a0a68a3a668e45a4d72962ffd878

SHA256
5d1dc0f08500369842b83750a07d3dd0230b3246c492784b5cb26cba2c4a40d4

SHA512
55f611be62ca6e2cf9736bd8b68d0a0c7a5468d650e96863bd3322e7d5e845887313b8e45125d9e1a9608a455726fc769f01049d47e983a5aeebc910555e79d7

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\cef_200_percent.pak

Filesize
790KB

MD5
498133d9ffbdee7d8996cbd4cbd944da

SHA1
eb26f9e98509931e22c18c2a469a698bfef0b5fd

SHA256
b362be1e8853b97afb22d6611b6c480127ef7a478c79d8ef7b3cbc070e4abaab

SHA512
a2ccd21ce6302f7552f31217aeebd6a7399eac9829d0240346bc0512bad940a2f04108fccb821e13c43b18f6f0a665d3bda25da6099b899d699b60082074ddf2

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\cef_extensions.pak

Filesize
1.7MB

MD5
79213c18bddffae6044263d883464200

SHA1
711ed6d95e1de97eda384aab9b9b102d7718641e

SHA256
858eceabe965e0dbe74b12d4403b9ad0fb1e23248bb2b0250f8d42e6229f7bb4

SHA512
6a172b56213926c6dc18afcb1d10c8e4d09e8a16cb7209bf0e3cd7f17b25992d0ef17ebb070ea14a684d37e00993b7db79dfddd8500433e99812c2e94f2fe6d7

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\chrome_elf.dll

Filesize
788KB

MD5
6499ea6b92ab4971886bd06c12625819

SHA1
5ebb75eeca7625b9511233158a02f50a92867a39

SHA256
6820f276c0d71557a0c7b997fd2f4a3ac6a45c86454c4dc3bcfa29843b5c470b

SHA512
e57703730e42eb9d80e762337e08176705b349f54fbd429edc657d44c9dc3a1f9ccfa594bc3ef622798aebb5bc69b225abb266b00f9b350ae59f734c2f31f63d

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\chrome_elf.dll

Filesize
788KB

MD5
6499ea6b92ab4971886bd06c12625819

SHA1
5ebb75eeca7625b9511233158a02f50a92867a39

SHA256
6820f276c0d71557a0c7b997fd2f4a3ac6a45c86454c4dc3bcfa29843b5c470b

SHA512
e57703730e42eb9d80e762337e08176705b349f54fbd429edc657d44c9dc3a1f9ccfa594bc3ef622798aebb5bc69b225abb266b00f9b350ae59f734c2f31f63d

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\chrome_elf.dll

Filesize
788KB

MD5
6499ea6b92ab4971886bd06c12625819

SHA1
5ebb75eeca7625b9511233158a02f50a92867a39

SHA256
6820f276c0d71557a0c7b997fd2f4a3ac6a45c86454c4dc3bcfa29843b5c470b

SHA512
e57703730e42eb9d80e762337e08176705b349f54fbd429edc657d44c9dc3a1f9ccfa594bc3ef622798aebb5bc69b225abb266b00f9b350ae59f734c2f31f63d

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\chrome_elf.dll

Filesize
788KB

MD5
6499ea6b92ab4971886bd06c12625819

SHA1
5ebb75eeca7625b9511233158a02f50a92867a39

SHA256
6820f276c0d71557a0c7b997fd2f4a3ac6a45c86454c4dc3bcfa29843b5c470b

SHA512
e57703730e42eb9d80e762337e08176705b349f54fbd429edc657d44c9dc3a1f9ccfa594bc3ef622798aebb5bc69b225abb266b00f9b350ae59f734c2f31f63d

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\chrome_elf.dll

Filesize
788KB

MD5
6499ea6b92ab4971886bd06c12625819

SHA1
5ebb75eeca7625b9511233158a02f50a92867a39

SHA256
6820f276c0d71557a0c7b997fd2f4a3ac6a45c86454c4dc3bcfa29843b5c470b

SHA512
e57703730e42eb9d80e762337e08176705b349f54fbd429edc657d44c9dc3a1f9ccfa594bc3ef622798aebb5bc69b225abb266b00f9b350ae59f734c2f31f63d

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\d3dcompiler_47.dll

Filesize
3.5MB

MD5
f76b1d2cd95385b21e61874761ddb53a

SHA1
e5219dc55dcd6b8643e3920ad21d0640fd714383

SHA256
8bf0eeb5081d8397e2f84f69449c8a80d9c0cdcf82bcef7a484309046adcb081

SHA512
8e5c6541bbea6730c4f6392439454f516d56ac9ad6d6b55336e52361cc80a35fbed8a90d58020d92fa4ac9fcfeee6c280754a9e99cc32bae901b00306626e69f

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\debug.log

Filesize
3KB

MD5
9497006a97426f96d3e30f61ad2abaae

SHA1
2066ac850dd62613014ade3650c92b904e591f33

SHA256
3982be33fcfaa1afab1dee5ef344053d79f304e44a446972798157aa242cba1d

SHA512
7ec0354bdda0afbd464db4c16095805adbf4be852d4595ebdfc2e8dc359597336c59256cf28303c25b19d888d27a9c1186d5b3bf5b22f8a89ae6ebd2e0d5f0ca

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\debug.log

Filesize
4KB

MD5
735fac37735d5e09d97353e6c5a051a6

SHA1
248ef50b377a26a488f1da895fe3a9a93220db52

SHA256
6842224a548830469785a0f7ae0e1701769c8baed9f8edeb2e52a840025d1c48

SHA512
1c05ddc6bc5f48f2aad1207b5e35ca9d3409245e77741d4b3715ce68164fb29ecde2f9a7696b6371a1a65d47a27833ca0bfffe30e3c5e4c6b2f507e062df8a30

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\devtools_resources.pak

Filesize
1.7MB

MD5
dbe6ef08733bcd191be15a3643a12df3

SHA1
6a7997549bfb0df16f1cb8bd36884b7eaa12f7a5

SHA256
e5613e6c86cfb34bca6650ba7f47cf8c80fb4f83df376fbf6316831cbc287d01

SHA512
3bf89ebd97111cfad669f728da701908d4d031af91adf3bea43caa49d0eb5352a66c2cf41c2fc8bc977c30ff2c6abe392f23e3a731f0ffd636e27ae126b2f157

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\eu4c5cat.exe

Filesize
2.4MB

MD5
89c1ed9b8f26601e87e78e9bef226f6b

SHA1
b7a9f82784e067eee0b9649ff756a8f209f153f6

SHA256
6cc9a31f3b52a785f27b0ac6dfc2cecfbb39b2a71ce1a19247524f81095a4df2

SHA512
31a3d2c4da8d1a12780f1baf6d2302b616ff4cb0db61126d815cb1d114387c6ae58f63305ed08cba097eeab288f282b5d5cd1c1de6e80873bb061ca8ebc9c802

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\eu4c5cat.exe

Filesize
2.4MB

MD5
89c1ed9b8f26601e87e78e9bef226f6b

SHA1
b7a9f82784e067eee0b9649ff756a8f209f153f6

SHA256
6cc9a31f3b52a785f27b0ac6dfc2cecfbb39b2a71ce1a19247524f81095a4df2

SHA512
31a3d2c4da8d1a12780f1baf6d2302b616ff4cb0db61126d815cb1d114387c6ae58f63305ed08cba097eeab288f282b5d5cd1c1de6e80873bb061ca8ebc9c802

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\eu4c5cat.exe

Filesize
2.4MB

MD5
89c1ed9b8f26601e87e78e9bef226f6b

SHA1
b7a9f82784e067eee0b9649ff756a8f209f153f6

SHA256
6cc9a31f3b52a785f27b0ac6dfc2cecfbb39b2a71ce1a19247524f81095a4df2

SHA512
31a3d2c4da8d1a12780f1baf6d2302b616ff4cb0db61126d815cb1d114387c6ae58f63305ed08cba097eeab288f282b5d5cd1c1de6e80873bb061ca8ebc9c802

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\icudtl.dat

Filesize
10.0MB

MD5
3f019441588332ac8b79a3a3901a5449

SHA1
c8930e95b78deef5b7730102acd39f03965d479a

SHA256
594637e10b8f5c97157413528f0cbf5bc65b4ab9e79f5fa34fe268092655ec57

SHA512
ee083ae5e93e70d5bbebe36ec482aa75c47d908df487a43db2b55ddd6b55c291606649175cf7907d6ab64fc81ead7275ec56e3193b631f8f78b10d2c775fd1a9

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\libcef.dll

Filesize
96.9MB

MD5
8c51876f1b5dfbf4964732a65c1f2724

SHA1
ed5653a3a5655ba65d6221285da93799bd2517f9

SHA256
5ae7eff0a7b91e54d211046111d088ed8820793c97ee689f20371c356af6b46e

SHA512
a4bb49b64b58767fcaf5b3b889a63c0917d56c59dd48283539903a6856caf69c5ce35655e68ef8bdad1e9bc80002fd2f68fc1e46977ba68926f7a731904a7884

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\libcef.dll

Filesize
96.9MB

MD5
8c51876f1b5dfbf4964732a65c1f2724

SHA1
ed5653a3a5655ba65d6221285da93799bd2517f9

SHA256
5ae7eff0a7b91e54d211046111d088ed8820793c97ee689f20371c356af6b46e

SHA512
a4bb49b64b58767fcaf5b3b889a63c0917d56c59dd48283539903a6856caf69c5ce35655e68ef8bdad1e9bc80002fd2f68fc1e46977ba68926f7a731904a7884

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\libcef.dll

Filesize
96.9MB

MD5
8c51876f1b5dfbf4964732a65c1f2724

SHA1
ed5653a3a5655ba65d6221285da93799bd2517f9

SHA256
5ae7eff0a7b91e54d211046111d088ed8820793c97ee689f20371c356af6b46e

SHA512
a4bb49b64b58767fcaf5b3b889a63c0917d56c59dd48283539903a6856caf69c5ce35655e68ef8bdad1e9bc80002fd2f68fc1e46977ba68926f7a731904a7884

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\libcef.dll

Filesize
96.9MB

MD5
8c51876f1b5dfbf4964732a65c1f2724

SHA1
ed5653a3a5655ba65d6221285da93799bd2517f9

SHA256
5ae7eff0a7b91e54d211046111d088ed8820793c97ee689f20371c356af6b46e

SHA512
a4bb49b64b58767fcaf5b3b889a63c0917d56c59dd48283539903a6856caf69c5ce35655e68ef8bdad1e9bc80002fd2f68fc1e46977ba68926f7a731904a7884

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\rEJZ.bin

Filesize
2.4MB

MD5
89c1ed9b8f26601e87e78e9bef226f6b

SHA1
b7a9f82784e067eee0b9649ff756a8f209f153f6

SHA256
6cc9a31f3b52a785f27b0ac6dfc2cecfbb39b2a71ce1a19247524f81095a4df2

SHA512
31a3d2c4da8d1a12780f1baf6d2302b616ff4cb0db61126d815cb1d114387c6ae58f63305ed08cba097eeab288f282b5d5cd1c1de6e80873bb061ca8ebc9c802

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\rEJZ.bin

Filesize
2.4MB

MD5
89c1ed9b8f26601e87e78e9bef226f6b

SHA1
b7a9f82784e067eee0b9649ff756a8f209f153f6

SHA256
6cc9a31f3b52a785f27b0ac6dfc2cecfbb39b2a71ce1a19247524f81095a4df2

SHA512
31a3d2c4da8d1a12780f1baf6d2302b616ff4cb0db61126d815cb1d114387c6ae58f63305ed08cba097eeab288f282b5d5cd1c1de6e80873bb061ca8ebc9c802

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\rEJZ.bin

Filesize
2.4MB

MD5
89c1ed9b8f26601e87e78e9bef226f6b

SHA1
b7a9f82784e067eee0b9649ff756a8f209f153f6

SHA256
6cc9a31f3b52a785f27b0ac6dfc2cecfbb39b2a71ce1a19247524f81095a4df2

SHA512
31a3d2c4da8d1a12780f1baf6d2302b616ff4cb0db61126d815cb1d114387c6ae58f63305ed08cba097eeab288f282b5d5cd1c1de6e80873bb061ca8ebc9c802

Download Submit
C:\Users\Admin\Downloads\synapse-v2-launcher-12-5-22\bin\v8_context_snapshot.bin

Filesize
542KB

MD5
297fb973be7238782ac5403e8e664338

SHA1
e7658adfd312ac6d2f76f2e2ff3adb6da3f4650b

SHA256
97af5f82319aa36113eac81b0b2e38f0a20e78fe0599aa2fcdccb8f89c4bfbb6

SHA512
95af9ce48506afa2f5bdb651a59386f8876c99c60de5d5c01b800a15e6d4e4ce04ea8ac849a94be44c77a0a4777afd108e59a14978d55b0a98e72b4db06eeb37

Download Submit
\??\pipe\LOCAL\crashpad_3068_XKPRZWBWAJOFNUCE

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/2708-134-0x000002264C250000-0x000002264C260000-memory.dmp

Filesize
64KB

Download
memory/2708-133-0x000002264C250000-0x000002264C260000-memory.dmp

Filesize
64KB

Download
memory/2708-140-0x00000226674A0000-0x00000226674C2000-memory.dmp

Filesize
136KB

Download
memory/2708-145-0x000002264C250000-0x000002264C260000-memory.dmp

Filesize
64KB

Download
memory/3476-535-0x0000000000740000-0x0000000000748000-memory.dmp

Filesize
32KB

Download
memory/3476-570-0x0000000005211000-0x0000000005217000-memory.dmp

Filesize
24KB

Download
memory/5304-576-0x0000000004E30000-0x0000000004E40000-memory.dmp

Filesize
64KB

Download
memory/5340-326-0x00000000059A0000-0x00000000059B0000-memory.dmp

Filesize
64KB

Download
memory/5340-324-0x0000000005F60000-0x0000000006504000-memory.dmp

Filesize
5.6MB

Download
memory/5340-323-0x0000000000DB0000-0x0000000000E7A000-memory.dmp

Filesize
808KB

Download
memory/5340-325-0x00000000058A0000-0x0000000005932000-memory.dmp

Filesize
584KB

Download
memory/5340-336-0x00000000089A0000-0x00000000089C2000-memory.dmp

Filesize
136KB

Download
memory/5564-346-0x0000000004940000-0x0000000004950000-memory.dmp

Filesize
64KB

Download
memory/5632-345-0x00000000008C0000-0x0000000000B34000-memory.dmp

Filesize
2.5MB

Download
memory/5744-352-0x0000000004EC0000-0x0000000004ED0000-memory.dmp

Filesize
64KB

Download
memory/5800-361-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-447-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-501-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-446-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-515-0x000000000C0A0000-0x000000000C0DE000-memory.dmp

Filesize
248KB

Download
memory/5800-507-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-445-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-511-0x000000000BED0000-0x000000000BEEC000-memory.dmp

Filesize
112KB

Download
memory/5800-436-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-417-0x000000000A0E0000-0x000000000A0EA000-memory.dmp

Filesize
40KB

Download
memory/5800-516-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-517-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-518-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-519-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-520-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-522-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-523-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-524-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-525-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-526-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-527-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-528-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-529-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-415-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-530-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-413-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-410-0x00000000053D0000-0x00000000053E0000-memory.dmp

Filesize
64KB

Download
memory/5800-409-0x000000000A6E0000-0x000000000AC0C000-memory.dmp

Filesize
5.2MB

Download
memory/5800-548-0x00000000053D0000-0x00000000053E0000-memory.dmp

Filesize
64KB

Download
memory/5800-536-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-549-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-408-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-407-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-406-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-405-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-404-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-403-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-567-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-393-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-392-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-391-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-390-0x00000000053D0000-0x00000000053E0000-memory.dmp

Filesize
64KB

Download
memory/5800-389-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-387-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-388-0x0000000009960000-0x0000000009972000-memory.dmp

Filesize
72KB

Download
memory/5800-385-0x00000000097A0000-0x00000000097F0000-memory.dmp

Filesize
320KB

Download
memory/5800-382-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-381-0x0000000008700000-0x000000000870E000-memory.dmp

Filesize
56KB

Download
memory/5800-380-0x0000000008F40000-0x0000000008F78000-memory.dmp

Filesize
224KB

Download
memory/5800-379-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-378-0x0000000008610000-0x0000000008618000-memory.dmp

Filesize
32KB

Download
memory/5800-377-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-376-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-375-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-374-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-373-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-370-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-369-0x00000000053D0000-0x00000000053E0000-memory.dmp

Filesize
64KB

Download
memory/5800-368-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-366-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-365-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-364-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-574-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-363-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-575-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-577-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-578-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-579-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-580-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-581-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-582-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-362-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-360-0x000000006DC40000-0x000000006EB66000-memory.dmp

Filesize
15.1MB

Download
memory/5800-357-0x00000000053D0000-0x00000000053E0000-memory.dmp

Filesize
64KB

Download