26b4dec69aeacb1bf048a11dc5ee0bf25f208b9d6a2a730f099d8e31e19f3a8c

Analysis

max time kernel
145s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
29-10-2024 16:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7c2fd2a7a4ac9763d2010bcc3640aa48_JaffaCakes118.exe
Size

457KB
MD5

7c2fd2a7a4ac9763d2010bcc3640aa48
SHA1

7293060ea2380b750fb4901954b6ddd1cb7d1187
SHA256

26b4dec69aeacb1bf048a11dc5ee0bf25f208b9d6a2a730f099d8e31e19f3a8c
SHA512

fb43efbbbf9bec2faf48f4fc0d05f6a76cbf72b58e56893952ecb3295745cace907b43befc9cdddb8dbde8a726b434e7a35fa9ec7c382c09579f01ebcdded05e
SSDEEP

6144:5wxmrFQqkWicxfnS+qwLn2a8C5yk89YoMCNzfZ7QUk:5SCKu5oz2t

Score

4^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 3 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	msedge.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	msedge.exe

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exemsedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	msedge.exe

Suspicious behavior: EnumeratesProcesses 21 IoCs

Processes:

7c2fd2a7a4ac9763d2010bcc3640aa48_JaffaCakes118.exemsedge.exemsedge.exeidentity_helper.exemsedge.exemsedge.exe

pid	process
3344	7c2fd2a7a4ac9763d2010bcc3640aa48_JaffaCakes118.exe
924	msedge.exe
924	msedge.exe
3136	msedge.exe
3136	msedge.exe
4336	identity_helper.exe
4336	identity_helper.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
4772	msedge.exe
6912	msedge.exe
6912	msedge.exe
6912	msedge.exe
6912	msedge.exe
3344	7c2fd2a7a4ac9763d2010bcc3640aa48_JaffaCakes118.exe
3344	7c2fd2a7a4ac9763d2010bcc3640aa48_JaffaCakes118.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 44 IoCs

Processes:

msedge.exe

pid	process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

7c2fd2a7a4ac9763d2010bcc3640aa48_JaffaCakes118.exe

description pid process

Token: SeDebugPrivilege 3344 7c2fd2a7a4ac9763d2010bcc3640aa48_JaffaCakes118.exe

description	pid	process
Token: SeDebugPrivilege	3344	7c2fd2a7a4ac9763d2010bcc3640aa48_JaffaCakes118.exe

Suspicious use of FindShellTrayWindow 25 IoCs

Processes:

msedge.exe

pid	process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

msedge.exe

pid	process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

7c2fd2a7a4ac9763d2010bcc3640aa48_JaffaCakes118.exe

pid process

3344 7c2fd2a7a4ac9763d2010bcc3640aa48_JaffaCakes118.exe
3344 7c2fd2a7a4ac9763d2010bcc3640aa48_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

7c2fd2a7a4ac9763d2010bcc3640aa48_JaffaCakes118.exemsedge.exe

description	pid	process	target process
PID 3344 wrote to memory of 3136	3344	7c2fd2a7a4ac9763d2010bcc3640aa48_JaffaCakes118.exe	msedge.exe
PID 3344 wrote to memory of 3136	3344	7c2fd2a7a4ac9763d2010bcc3640aa48_JaffaCakes118.exe	msedge.exe
PID 3136 wrote to memory of 4772	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4772	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 1128	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 924	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 924	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe
PID 3136 wrote to memory of 4548	3136	msedge.exe	msedge.exe

C:\Users\Admin\AppData\Local\Temp\7c2fd2a7a4ac9763d2010bcc3640aa48_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\7c2fd2a7a4ac9763d2010bcc3640aa48_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.chip.de/downloads/?icp2=download.badUU2020
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:3136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Suspicious behavior: EnumeratesProcesses
    PID:4772
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2228 /prefetch:2
    3⤵
    PID:1128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 /prefetch:3
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2688 /prefetch:8
    3⤵
    PID:4548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
    3⤵
    PID:1492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:1
    3⤵
    PID:964
- - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5380 /prefetch:8
    3⤵
    PID:3288
- - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5380 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4336
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
    3⤵
    PID:5080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5224 /prefetch:1
    3⤵
    PID:2004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1
    3⤵
    PID:3284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5104 /prefetch:1
    3⤵
    PID:5132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4880 /prefetch:1
    3⤵
    PID:5328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6064 /prefetch:1
    3⤵
    PID:5336
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3736 /prefetch:1
    3⤵
    PID:5732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6420 /prefetch:1
    3⤵
    PID:5760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5760 /prefetch:1
    3⤵
    PID:5272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6732 /prefetch:1
    3⤵
    PID:5356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6392 /prefetch:1
    3⤵
    PID:6132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6836 /prefetch:1
    3⤵
    PID:5204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7144 /prefetch:1
    3⤵
    PID:2216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4300 /prefetch:1
    3⤵
    PID:6004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6304 /prefetch:1
    3⤵
    PID:5948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6732 /prefetch:1
    3⤵
    PID:3516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7072 /prefetch:1
    3⤵
    PID:5164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6680 /prefetch:1
    3⤵
    PID:5476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6380 /prefetch:1
    3⤵
    PID:1560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6860 /prefetch:1
    3⤵
    PID:6104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5104 /prefetch:1
    3⤵
    PID:3720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5152 /prefetch:1
    3⤵
    PID:6028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1296 /prefetch:1
    3⤵
    PID:3348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7336 /prefetch:1
    3⤵
    PID:3540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
    3⤵
    PID:448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7536 /prefetch:1
    3⤵
    PID:1796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5448 /prefetch:1
    3⤵
    PID:5852
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7936 /prefetch:1
    3⤵
    PID:2004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
    3⤵
    PID:6488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7648 /prefetch:1
    3⤵
    PID:6516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7420 /prefetch:1
    3⤵
    PID:7108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7384 /prefetch:1
    3⤵
    PID:7132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1048 /prefetch:1
    3⤵
    PID:6708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8096 /prefetch:1
    3⤵
    PID:6732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6972 /prefetch:1
    3⤵
    PID:6776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7340 /prefetch:1
    3⤵
    PID:6796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6472 /prefetch:1
    3⤵
    PID:4588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8532 /prefetch:1
    3⤵
    PID:6728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8260 /prefetch:1
    3⤵
    PID:6244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8448 /prefetch:1
    3⤵
    PID:5572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8432 /prefetch:1
    3⤵
    PID:6900
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7332 /prefetch:1
    3⤵
    PID:6892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2156,15620364707751792201,12793923458411609143,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=8956 /prefetch:2
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:6912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:4004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:5660
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:5176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:5548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:5668
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:4380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:3188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:4272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:5128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:5284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:4468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:5224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:4852
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:5592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:6420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:6436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:7036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:7052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:6620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:6636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:3856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:4384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:6672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:6860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:6240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.chip.de/secured-installer-support/feedback?t=&cid=&pid=&pg=45787072657373&data=26536574757049443D26436C69656E7449443D33313635333836363634333136353330324433363634333936343244333436353631333132443631333533383333324433333631333033393333333233383337363336353331333026436F6E74656E7449443D26506172746E657249443D26536F7572636549443D267374724F533D353736393645363436463737373333313330264455423D364437333635363436373635324536353738363526737472416E746976697275733D2665784D73673D34463632364136353633373432303732363536363635373236353645363336353230364536463734323037333635373432303734364632303631364532303639364537333734363136453633363532303646363632303631364532303646363236413635363337343245264572726F72506C6163653D34333638363536333642353336313736363534313733
  2⤵
  PID:4072
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9d12e46f8,0x7ff9d12e4708,0x7ff9d12e4718
    3⤵
    PID:6632

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3872

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3184

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata

Filesize
150B

MD5
0096f3541809ef176ee95c3bf2b669ea

SHA1
7e11cd118422377922dba04b71cbdd1039b1d46c

SHA256
31e3c4b8ab009f37754167da8afb490008cdeccdc76e1d36b145ff214c6d3def

SHA512
05880f06a59d72613ea4a9cf4ed7aa6675542e00b74411020881bfcf86d36411ff38968cc4829675710ff2555b7fb5dbe6254d9fff73f7c7a5cd14180bc3c656

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\14e067b5-7e96-48b8-a2be-4d0f6575bc48.dmp

Filesize
4.0MB

MD5
fa2c4628bbb508ad4ac4e57e6c431d95

SHA1
595929fd51cb020209414939a89d376b5a87d23a

SHA256
8ffc4803f341d39b5bdd0b624cc860c18c14e1714a0ae80f74202a65c426d37c

SHA512
71e140643a60351a7b414a43d59bcda82bbba0b8ad744e08e4b68df120a0ea42551a065413ff3303dbba1d1648529fa68c8ff9531882fcf542663f05ff5220bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
61cef8e38cd95bf003f5fdd1dc37dae1

SHA1
11f2f79ecb349344c143eea9a0fed41891a3467f

SHA256
ae671613623b4477fbd5daf1fd2d148ae2a09ddcc3804b2b6d4ffcb60b317e3e

SHA512
6fb9b333fe0e8fde19fdd0bd01a1990a4e60a87c0a02bc8297da1206e42f8690d06b030308e58c862e9e77714a585eed7cc1627590d99a10aeb77fc0dd3d864d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0a9dc42e4013fc47438e96d24beb8eff

SHA1
806ab26d7eae031a58484188a7eb1adab06457fc

SHA256
58d66151799526b3fa372552cd99b385415d9e9a119302b99aadc34dd51dd151

SHA512
868d6b421ae2501a519595d0c34ddef25b2a98b082c5203da8349035f1f6764ddf183197f1054e7e86a752c71eccbc0649e515b63c55bc18cf5f0592397e258f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2d503209254631ab89108735db90e95e

SHA1
94cb4e633e562e0c1196bc96c3fcb15884e78106

SHA256
729f0df272c2fa37b543c3c3fa41fd929951d3ed71067899b4fd92ccf880b768

SHA512
fe4c5d7f64ee5e21cc75ec07928d5422efaebffdc14ff6b6625983c37b43667f181f06be3ee882f786b279304ae7b794b98616f7fbee0892cbcc3d4500419ffb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5a4115c9-090e-429a-a449-6e7cb42388ab.tmp

Filesize
538B

MD5
8b7f70b1e566567321ea44ce88dd6599

SHA1
1f45940c93f88f72fa3c75dfcab6635a1d463586

SHA256
5bca30beb67d11ff33b27b2dea0b5eaaa1163d215fd38e5e8027c95262d52548

SHA512
b2911f85b2fb18283ad3e9443489665284aaa97fa06df4495b16997739e351bb35c7b27710424136099c9f9defef39951576dede8eb06e8fef21ed994cdf370f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
18KB

MD5
2ddcf69b536d4749ea2f68ce2e9fea40

SHA1
0f78c2d952e6e2f22e9c7ce249181ae806e922ca

SHA256
26ae535ac008c2196e26f2e6515c9a40751d8ae3746a18005ea1a8f521002303

SHA512
1668af6ae1308c658a76716f28bc8a8f520a17c2f0a757f7ad0e3ed6d46f7b047d701e8789cf15978af9162fd939a52072bb156f5117b85b0a21df7acd09f554

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
190KB

MD5
4e0c6c26a5bc7edd64fce32b753cc0e4

SHA1
16699f325f17c25ec84855d0e4f3e192c7cd868d

SHA256
126806ee184d6bdc9d4fa042c5d7889a7d25e78f332513890057756e593ec79d

SHA512
4e7f7a13bb22f6e9a74707faf1540e83cb0bfa63552ac506cdd6ab00a1d7e426a13be296488301d7a910605be01d1d4289e152269b29b03e9038c6928265fbeb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
29KB

MD5
4971a6ea46dbeae53088ac755fe37d5d

SHA1
edb30dd65b3eeb80930b04e91a9945d33186b5c7

SHA256
2118a92f8bb50e2ce191ef789a5aee19f6481e3394b99a696bc2b8f694449ad7

SHA512
c24d3dc445b3f0f8c7220fcba50016eb5ec6222c1e8351e9930b0f941fad4c132d6ad846f5099bcef1fdd806ae8f34cd02a7b6709a3349af978a7b36be411eb3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

Filesize
16KB

MD5
0608c5f06d974530489aad86c51ccf5e

SHA1
10973e93f6464407eb1184db47e80d9f66988331

SHA256
397aa8d8b05586b07a4567e8a0ce21de2d9924e58e38f26daffb319697a032c7

SHA512
a654401346c88081236e4f52b700248e652229ca65ea5089b314fcc37bb481bbb785d4f5871e3a62cf369cfd29b40012bce4a45d77a3906bff59f41638df5e39

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

Filesize
28KB

MD5
f4f8f939cd19b7d3fa19b4bbcc21a1f6

SHA1
278ecfa3e2aa4caef632c5f61e524902d62c1ac1

SHA256
c187f8135bba78f31cc83ccdad95bf03ed96a8d0d6331db2ef3a72c59718e21a

SHA512
95646c067a7ee0dc5fb2c00f3a21a987aa69ba27aef8afa2e135180d39a86d5f1780c76b8c41e1dc0259bedcd3e21e87e56a89774f8be2470308c1c0b369858d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

Filesize
16KB

MD5
f0ee8f1089f063ca6fa08a96a5ad62a9

SHA1
9151549922e14b42a273978594798230ab6e679f

SHA256
90114ad5e35515400e5c2c762b5b5acdbf12835c9c3af1cbce956f9bd0d04318

SHA512
2e79fb7bc0a98758ef182fac2c7fba0a028e736a6b3c8119675adc10f56d8ad5f5a17f61ad1aadc77306dac54790ff111929fe7b152158328fec165fbf9df186

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

Filesize
35KB

MD5
86adb1aae7a21d0620c71e1134670243

SHA1
961cde623ed0fb1e83c0d24a041a951d50da94ab

SHA256
d51667ded9b2eccfdd7a0e4a5dd52ba77815b7e55f80dda790ee839aa815736a

SHA512
1fc58b12822d1df1c64a255c8c05d09bfc798cfbceb7f8c2e633c7a4bc3f43daabb643b5cf7645df5ad0c17991b5277ad848a599fde5d767c3cd783c0b9327fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

Filesize
39KB

MD5
812f3f2851f697f4ebd801ef5c798d9c

SHA1
b68b1dd17218ea2f549114089707fd5c97a0a7bd

SHA256
40b9714fd520a5e315fc8e9e9af306ed4dc3682d78c2dd683cfbf1ecc1347333

SHA512
da87259a2932a23cd05ce007811a21a07b969b696439f0ee86c3f6930a490cd7d56fa6f89b6f5e5c24e6f2bf54d99d63599d59f6bf8a6b4147bd0e2f6f59b6ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

Filesize
98KB

MD5
9dd21c2e4eed047c0c1751a5eae34592

SHA1
d01a716dc128b93e0e01b49361b7b57019e96553

SHA256
4e180501aa072fc6979010bbff5c34ed796648d47e22537fed44479630e0a8f4

SHA512
b4a849b3103c895a5a62239a5e1d2a8af743315c9738969e64f0a591c9bf5d93bcbce8d5c9f17d3b62d6593cc7955d9f9c290037437d47b39aa6f0c08ad2dca5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

Filesize
26KB

MD5
bcd774d10f610fab9bb56c18d4b6947c

SHA1
cd07e6f6a0d33c3b308231f693829daf62b8391c

SHA256
5afb80c8c0f78a204b2abd339a968b41f2db5f005b58aa1eeb0c172246bb58f1

SHA512
e844cf3117ed12d65815ca2884aff371d8e3c72a5e6fcc880621995c4739ab6e568e60ae802345cf1373e5f63fc9bfe0216cc95907b57d70f0818292dfb36767

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

Filesize
103KB

MD5
26b0b4527d99f10cc9c0f371948dcec7

SHA1
b4dce56cb60dfb5b997ec380747e6db396be112c

SHA256
091d7f74a57da2c3b134c130eb902731afb62fc7a53d7caa08506a349eff2cef

SHA512
68d6805c73b76ea5cc2f68717f3a57dc1326aa5fa1e98d3f16d7df168f1538c4339fac4a15425bb34f16bc361e2a7b399cdd22b10a9ea95f0bc674727e8c6e15

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

Filesize
35KB

MD5
1396a859d7bbb9b9344f7f78b5dad8ed

SHA1
0ada90fd6f0a2e22cdd8442653cea240a11c4672

SHA256
4d7dd4fb301738ddb56f813d18f73e04db023bc6970f969768db929b1c3dce55

SHA512
1033faa30988c73e7603d7e16cca796dcc82d5145ceab9264f1d7eff8de05932ed4249ff1bfb737d6381045121f88cc04ef5bd5aaeae094637947d4852166a16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

Filesize
74KB

MD5
ed311c7a0ade9a75bb3ebf5a7670f31d

SHA1
0613c7ebba55ee47ef302c0f7766324692f899a7

SHA256
8ea8791754915a898a3100e63e32978a6d1763be6df8e73a39d3a90d691cdeef

SHA512
6048e7ab94134b7200f0d5ed7fb8d577298d4831a2b3a4e0e5baa5c67468f77d4409314d63d34436ba6ba038c86faf87e46dacf98d311a74291b976fa39a9674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

Filesize
23KB

MD5
90f9f5d6a438e32a881b2810d399a14d

SHA1
194e9a0201d083517842b169e75ce14c0b3340cf

SHA256
b3eb6b5410dfaef6048e57bb82bea987166fb7fe98c8f585ea26d55285332a6e

SHA512
3ff4ff37a89ea7dcf423f65b0001b0565bca00980e0395f9e879d4377328b5930cee48fcb5ee0b3c9d65e9a55a74e2c32b853097d8ef58ceb1bd8e0d2458c48d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023

Filesize
23KB

MD5
d6182d765414d228d788a74e2d7e10d5

SHA1
1190f12685840a6bd91790eb7df79ed9f06c6266

SHA256
3319f2daa863d4f9b82c511a9861d26a00086ae6291fd40d6f8dd38d6a2bb7eb

SHA512
bac88fec5308c9cb3c154d03e3dee4d971892d9e352b1bce08bef8006fa2a25397289758732e84a830c0701594462ecdf6deeb0dd4c3d449d8d3bcf306c4f5d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2066c5154f8fe445_0

Filesize
157KB

MD5
c6944dd6f6ef9135ec6cb5695799d5b6

SHA1
883051e24e29ce9de428d3affb366cbdf1b664ff

SHA256
aa91dadb8313b97b52d46b6b79830dd59777f33a377f4ae0ad8a4522cd6d2e78

SHA512
5482ba20eabf7a7c5c2561cf3be44d807266ab5d9f9a86abd6c59074d140d9cb091b1676bbc76702fe9547ff595144a44baefab41d45d3bb49433646dc84f06d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2894fd592959b0c9_0

Filesize
152KB

MD5
6d91368cbee4dd4f554419bafcda19dc

SHA1
a24b29a6cb4de467789deefce5777e432e2b351e

SHA256
e64fa2ef61c0059ff650a88963fab79ecb6f1858fa92d6d4b3cdc7c5773bf428

SHA512
b76090cb91ec760e174fdd95f1a2b43b6fc95946077b6efcefc8a4b55822e68773421aa0f23aad7ccf40abfddf027a033ec7fb3b4b4c5ad7c4cf45ac4189dd4c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2984257ea918326f_0

Filesize
271B

MD5
7d035283c130c14055ef78969faecede

SHA1
e8ab2aaff2030037a0c8c51c02496e9f32edb616

SHA256
295c7be241c7ae4114ca478b9f86e6ffe49504def7822fbad76e4d62c480a771

SHA512
e1c90c46240c630229ac0d9771819fd5fd6dd59b0397cdaa3d7c7141b82f93f44bf324748a540ef2744f90affbe5be80856f30d896a50b9f02d61b3d15125df7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3545ba7b29a9d0b6_0

Filesize
267B

MD5
4e111a0d9c140085431b0770f99b58fa

SHA1
4d58a67f6d79c2965862843c3f41362dc18c7325

SHA256
04dd45a1f2e6e9ddb451dc6020938d765b30f4726a38f32f8c8efb7fe52c7564

SHA512
af12e1bca8e4249831a42fba450f0abe9af4583bf9468a58c567da754c6157555d86881078f449f13aa8d3bb1f10a4e4aa70d7f3ad90494ae6d7554c907c5c1e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3708348c7f291b6a_0

Filesize
274B

MD5
91593a151db037151e544d6874c1ca9b

SHA1
2306350df14b6c71c0ad6f7a1c7bfa6eed05a5dc

SHA256
fb9628401b86932c0ef5388f6a85dbe8e0101c011e5c1230aecf60a89b3e4b57

SHA512
935908a6786b09657d92ad6fc5d8da951b5adc7a4800b7c32076e57db5a4c7059466b6ed5cd0cfe2dd3411b342d3b339219c06056baf84ab574cb87a6804c793

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\37ab3ea7565fae09_0

Filesize
278B

MD5
a83060ee639f27fe4a9968c0421f45bd

SHA1
2ec3bf953983b9015335a120415652174b53da7e

SHA256
0604d668f53251e107e9d97fc8258cf89a42040d495c872c5c44aa2103c67b38

SHA512
43e57fbb9c2b2a6145f1f9e95df6c549de38d11565f8314cb984fa8e2238b949f71ebd1a3c1e666548848c063a7cb7ab23c7e9cc0320e7e2631944647f14c886

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4acec542bf7be713_0

Filesize
87KB

MD5
57d8b0ca3225775a651ac4d3ee1f49e9

SHA1
d703b7ab25d02ea3cd250dae9f0b25723ee363d5

SHA256
37ac2a0405086186ce77faeeff25378f70bfc563591c4877022c1e03520988a7

SHA512
c6071e42b33fbb26b7b7208340d0c75b91936a2c0428c5367aaa531a5d9e6fd735eab2013ab98e8bd2a81a5ff5508b35b8f575358e86970a635a658e485c897d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\721c766d1159ca15_0

Filesize
178KB

MD5
f16b4f47621306baf5caa37465923a2b

SHA1
2c4e46743501850771cae1f8ede7ebcbf936470b

SHA256
567b2c17188a6a6a297e4e7b28c225efec5125f54f42852f60398ac5c29aa029

SHA512
e57ca5b88023bb328fd961ef95bbd246efb7daed58a5b46859c577c64cc0e5971b1495763c315e671e1f994a7d716bb19a54cf0751c11c74a709308ac0fde6c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\72abdc74d67f31e9_0

Filesize
14KB

MD5
296efa8e057af773d2c36f55a552c762

SHA1
a71abdc96afd6bb937d5e4a19ec337614a8a3b1d

SHA256
e8797375ecbe3a8766859e267fe296bd5508a79cd88416abcadbed66017d8754

SHA512
e0087b0e62729eb608756d665bfed5832b7a6fad4d4a0b5b82f692b54703b00ccf4fdf1910aa36d94f0d498575fdcc08893452ca03ef7debb4efa596bb1ced0a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\73ed4eb5b99b6fd0_0

Filesize
20KB

MD5
dec8a8a8f710b0645b03b9de1cebb236

SHA1
b6e3a592e70ea0f54d9cb9fcd4f1de15e3cd1c32

SHA256
d94f52e9255d9f8e412c6bddb75a1a193a2ada4e855e81dad38fa9594f1b9b07

SHA512
50288322fc634582c48f781da174d1be15bd21104d6d27ef4ac44bef3e8e010a717842b923e3f7e7489d7a3fa71528ef154616f53318b939e8ef80fadf5e4395

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\79394c3edffe4aed_0

Filesize
9KB

MD5
23e86b37929bb96dd31778cb510451fa

SHA1
0c54a76d630298716d04111df608338ee24b103d

SHA256
7813f9909e43bb2d0b2bd6d15d78304446fe4b3330b38a529250cd2ab34adb2a

SHA512
fe7625a45b5a13493bbdce12310aaf1a2e8e4072f5a0ef5a600fb28e05e38c9573038518d3bb180ab417b195cf685ba16268280470e22831c7ebbc816b8dfba3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7c9ec9556faad6c7_0

Filesize
17KB

MD5
ed13db53c268e99a21325788bb258893

SHA1
9de5fb5560e110fb5a8daf2799560d7a201abed0

SHA256
a6fe84ee1dcc05d0fd288106fc094c6f42978aa2f84806151ee242cd2099593d

SHA512
1f2231e21743a9079f5df5d27b99311f599e32e40a70ea7cb4336e8f573ecd5b0651cf3c3d14a1b0762185188402c58baa24b558cc9a6cd008772befac9cfb07

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7e65bf82250cd71e_0

Filesize
5KB

MD5
6e0e85ddece168f6fab514bc7e7a99c6

SHA1
9bd00cb7516de67140ef55703cfe94fdf54fcc66

SHA256
6d1b82108b72bd993c68d47bd0e6f222cb6fe2e97fa468fae6d54f9a079157a3

SHA512
f3f6f6e22086bc6cc91a0d88b0ff876798257820bef1bcc942d6508a7904df50dca755bbd1116ca3fb94ed533ba2feec807169fb468fe40240e2160a6686d13b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\848454e9e3208b22_0

Filesize
62KB

MD5
9e7519a628fcab562a6995ee60313f0d

SHA1
9b39482711c93e022590db5750371cc195a7a02d

SHA256
628badd259f65d27927db0dec8a99a1bd86d5561dc0221fc01e2aaad3634c004

SHA512
bcb3d4dac6801fcf829c57c15889cea0457b973094a4ce1b166aff286ddf2e73085f4a97308d61dc37eca967a087a192e38eda14a6c3b80ad3b2fb9575ab6df6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e784b04e03e41e1_0

Filesize
16KB

MD5
abd7d354fb8e57f969b047700fe0d80a

SHA1
93a678349f993b92a318086d5f0193934d978956

SHA256
7576bb50f5aef6c91f2d05d43b19577ba5809546cb394eee2ec3092378c3c9d9

SHA512
b5709cd9aad7dff4223445b1288671b40f66729d8a10cc9773e4426892c73c941b72ae09cecd748bd20f0b726581e98e887297083acf7442d330ada869b32bfe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b4de594485a9f26b_0

Filesize
27KB

MD5
41047f729d7dd9e33393c138916fc244

SHA1
e0bf06634c0e150e0a365a7d8890564ad93bf215

SHA256
dada24ee8cb8c7cc9f8dd01ab0b70e54dbe64b2745511edb7120cab8d1b04776

SHA512
4422d63a06cfbbcba2508df454450bb01f3c04c8532b7a342a38a1a01d5f4cff56ed9dfb9fdf9acb6115fc10a1187ec33e225f8b509a28d246902762d28a9df6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\db136e7a69c5ad3d_0

Filesize
7KB

MD5
cdca28b9f790803e18ae08b2e6fae2df

SHA1
5af1e98e8fc7f460936aef84fcde6756d5531fff

SHA256
d01431135ac2d12be1d36d850197bb67aa86550c73eec2fd8433b8029fbb2745

SHA512
bf91e5d5bf16eb3ee1ba6bd37ca2222f60edc3129dc341eeeb6b08375d47a2b91bbc0c0056fe01a3c54304b62701d3ab3588325c4921a71be602a8dee466c766

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f89492ecf3967904_0

Filesize
717B

MD5
b9f1b06281e50f6cb6e8a77183f0112f

SHA1
91c981955b5098b27ce99953df073442b4b6762b

SHA256
8b094a478f6bdc7710a39817c2eb0a2fe9eff83229288bf9b16ec186b3417537

SHA512
b0116073cbad644abfd9df693c9dcbd585d40fba38a6f0903e8ffb86ae8e2e74640f452cae304c400dda1b159fcba6a9c10554a1e9a6c9edf8f390ad6d1acfca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
840B

MD5
6afacfde8243f48da6954bd815a8320e

SHA1
b3074356a0b3f42dd1c7f9d923ab124275610b9d

SHA256
9616621bb25a259bff94879444ce385e209f03f07daebb856e3dce09b61f8c0f

SHA512
0de8c9a03f30af5be71798255be4f0293705908f937bc9947965b981a7351c509d86c308e8c5a1584b9b6fec93ddaec9d7018596631cef233e3501378ab12aff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
17d3d91a80fa645f3c428477fea6fc7b

SHA1
32c0cc76611df0c8e547c98b5b3bece2b39bdc58

SHA256
ee51ade6d01a98026c6a8955d1800c7a54a67c98719e6af5d50b47c778010102

SHA512
fce46993f0e8ca58dfab0380d0474b9d23f09012bb5687bb2572033206f08d47d237b6843429d4642f1203a70cd82cb94aa3a665a0d4ba5668b6ffdc225ab7a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
310fc4769a2c7ca6cbc7aa6a6107b964

SHA1
fe50c7ae19f8243199acd11f11829e193c4909d6

SHA256
1477accfc9f969aaefa71624d4edc872197b02e11648187c208efcefff75a698

SHA512
ad5fa7ff01f2e0b78f8cf8cd8efacd5db075b73376d0e5303ba9490342ee97af1edf4960d1c6446c020ad0f31b50f2a2b3b42a3132f2a2002de1bacc61563387

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
2d80bdc889ebd7e19baec1b3ab3a1b0e

SHA1
9bda1104b3200b95401897809551e59d3c593500

SHA256
9639423bc0777ad1bf94553665cf6b5f4c11935d5410b7b42c6bd78850bdc506

SHA512
eb9eaeb054646cc1c0d96c3318dfbbb5413f4114688cf4f9b3ffdc47da908fd91b77b79fd7aef769712857cd7a41180f8df4adb88354add4ae1e72c3a50ab9ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
fde015239f3f785af806c10f72964af6

SHA1
f8b3315b92facada96d01bd41736460d893b2c5f

SHA256
7226f14816b4af853e159872674a10045c9272d2f75297125fbc09a759b63468

SHA512
c275f8853621c0e1e507fcdb1fa21bbcd068e3041837e3d8c7c3260e843e9ce4341d811729efafc4ae94889a2ad298b4b6c21f076fb4bd987e95f687e8b9463d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
f855c6aad0342f83dc84e8683c3b28ef

SHA1
99150d800c2547f8a750ca45e765e0a9af88dff2

SHA256
f1ed82a399cba7777451b97dd4b19d4e77eb909861a93b5827e78b11d6a0743f

SHA512
ff82807c65ef3c93c60c86618a1992c415d1678543cc1fc804b25465bebb75a89978422b36cf4ba137cbb27d3f2fde74bb07f6856dce92dbbd7b37ca2d0ac9e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
af0264e295e928cdc8c33f12d5c14f3e

SHA1
e08700fe6eb3521cca33478787b3cbe8df7767ee

SHA256
501bc8d0b5a0197767dc5cc0886a92fb4cd1ac729da8edf35accd3b6919d9df5

SHA512
0431a7b6e0d04ddf6dcd359b13d9828172d0e14150da16aca132b929d03f43f33fec7c8aab2e42a6a50b8885d52a5db9a9678f8820f8b941a15e168e13521b4e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
0cd1cc7c3857e7666f8c6cfcd66ef875

SHA1
eeb4534ed84c1e91056f30b372505b3b04667c69

SHA256
9e821a23f2dd642be1fded6ebc2a75c990f46d72339ab693dc23d1b23229f3b1

SHA512
b1ce9a307367030a9970e8022af83531ec886f83d70ff4fa4d6b17cdbeb1a4161a4e8d07278d57eaa1841be337e922aff146aa8a7cbee19afd6f5a3657ad87c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
70141332036c9c1d147eec2048b5a277

SHA1
30d35251d40b7716ef83f58dc92bbe3847bf2a80

SHA256
599d6129f4ff7aad8148d092c1bd221a294147620334414670fd3b75c86cce69

SHA512
b54cd447b3e10661f2e60670b5176980bf49436de852b9bb03c1d5454130cb0e238191a87c1ce6129cca2dbd10c06f4fce75d767a072855852eea6387e06df01

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
5c310fecf9020bec49857ecc2bd4df9f

SHA1
9f3d7d7a346f9b1c0020f2f8707e3cad3e0862b0

SHA256
d943bcc797bbff0dc076a9a375439e9270f041fe5f9fbf6966cbbbbc1e03ad25

SHA512
6ccbb86110750ac42ad5e6d63712c1a1183f063aa1b159f0f25f6b800b3e4cdf37368465c7010ec058d7518100b03d1189e2558ec0140939b8f490cd3df8f833

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
b25fcfbdc24480ff54381740dd639ed6

SHA1
94c99387347e33144ca4d64613592bf43e20e836

SHA256
1e984a46f88b35dba21b19afc0a416eb82f085d0cb927a3001fd182c75c9434e

SHA512
7aec632508c2f445d22f99f61fc6d3714d72244225a956994f5b372240c7b9bfe174f1b945a33e6901102bc2e8b6e5331f54af416991adc169ef143f2273551f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
dd999aff8262a412177ebd8ab41c6d0c

SHA1
0c2e563406f3f382d169376c1df33ce65180a131

SHA256
9885a55dcc08eb1f488fa1b23ec241d5eebf19f5629ca36cf493770cd5dd0843

SHA512
3f4b65a2138ebb39384919ff00179fc1a6dfd7d4139202cc0eaf492f3606e67481879c0829931220b26dc42b916c0c22682fdcd7eb25b7c376c2c517d84fd500

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
d5dd567d2fd8d40a2884a7634b94a7cc

SHA1
81c6d8a26ac5b1820e7084137dec8a3cb1afbb84

SHA256
d95dbae85aec4aaee2f95670799422f7662a8428b0213adde9f0aea4860212c6

SHA512
2c54a9d66d7f6bf172515bfce5c80ef447afcaf095fef0d2f1648715aca2363da09e4c99acf8bc8261bb67f63f16927824c06d914efea7866798498cb7400d81

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
536B

MD5
67800d94c31efaaa14a8b0f51b86ec12

SHA1
13f0529140b4f71d397e55c8135b7202009cf632

SHA256
a41f1bcbdeb691c0e9e9eeaf7beccd01dc8c4e1ebdfcaa777821a27fc5e5b4b5

SHA512
b3aa656873e5b956655deaeeb37f2cf655a43e520f4843d5b5c1b820d0aef063a6bbe0f7463f3edbf803ce76f6e2f0ec1d3fcbec58a898e8a39f7fccd1a92131

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
536B

MD5
2b434e639ea3d964557e69de1660dd1d

SHA1
f9022100eb731657e146457bae31ad325fb22f7e

SHA256
584cc35cb4f5908e5c6b7a71bb705091cb9ed487e200a6dd9ef161c11f075ee2

SHA512
9be75e8f3b36b6ef76ebee7426578c8b629a1a717f7a1a3de4e1d076a46f0ff116e7e10637d44fa5c197569382cb3d31f1e05925ef8f7618603873fb5104daaf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
020779b0f1e0dbf6a459ba3ca23ae344

SHA1
a53b48288229c5732da099289583b4e24d1ec4c1

SHA256
7644c9c4f3c1ee664546f38e2b5d2ab5f9eda2935026445117b0548923eb70c3

SHA512
ac66430dbc7b4562845399f135e22d4bfa56003e54f50332a7ba3e31604b39772f97e8ab0ae7ad7f4d8491c5e81815e46941112fe49989a0518f970060861c40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
9b834549e6b9c6cd52d11545477b5b91

SHA1
ad7e19d98c930f5535c8cc4dda7ade0cdb4c78c2

SHA256
a6a1570b987c192e474bc0245652038aa66eadaeaa18ff56133f2d42741890ba

SHA512
a73b8a0f185c4165812877b958e2e81af3d97c1592510ad88f21e1f75936c9926b138b7ab360b1616e1390324ffc1b5aa3fe390d578f936a56723bfec3fa99f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
532B

MD5
7849bacae7504a8c501dc89a238f996c

SHA1
84f7e5e09c43a50f34b136a8e6145e0663a43a0c

SHA256
dcaff0de275a25473058909f72004bd3e3f1517203b0c7528fdbd63776ca0316

SHA512
6259ef3688cacc5bbc534337b80e3bf4fc818404258331ab7fcd6a0235a56fc5f09b3eaa0153c279c1dad121ac7cfe3fb40c2a8c00d45b2866f1d40335f4e98c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
688dc1eda8bef4fac7fd48a6951d20db

SHA1
e879fab99eebbdadf1f5479c3896cfc102bfc681

SHA256
108bafd357ff3fc0407094729ea6f37c6f6bf773475c58593b7d5649f7e5fa91

SHA512
43602508a5827f2b92ecce77d346a5b5afc76c0b0ddde865ea3ed75944009494ca2651dc70b0808648579acf0e95f3f157f55c165e56ca359c8c9f588c1b8531

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
ddd0f0edcc9bd1f45e8331dc02c43f61

SHA1
e4f6132e81ee7d0ed88bd50a3abcbda5a0f3d24e

SHA256
7027fb8e44929a532d354ae423aa3e684980158d8188ce4cb23edb016c357fbc

SHA512
3a8c9f8aa45c7ed88daff7325b5029fa04b43fa8d84dc1185529798d7361e112ee200ab843580ff9bc1ec4a6e8691bf3d8fc02920e4b74c546d51aa0d61a0dea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
d73e16a3d23a5dec1c6dc4f851e53f2e

SHA1
60e1219867819e29a5f079914e14e8eecc5554a6

SHA256
9877ad504ec1257140e9562b486375faa59e84d3449c6dedf7d3bef8fa446b8b

SHA512
c4e79e3b49763477e093084fb17584f16da10ec35059bfe4168fba5c537168c606849097f11e2efc6de9fe807a29d5c73d4bbf1f6961901fe7362a9808e9cfc8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe581ff7.TMP

Filesize
534B

MD5
acd5d621567dfadbe4533b2c50554be7

SHA1
c00f50eaa98206bf2dc442aceb9a35142b262435

SHA256
74f72cb91865e46ff1ce64a50892c3177e3b2c4804b70d25714376f6b16113aa

SHA512
3cc87f9e6d4fbcd99113312f653b1d349256c2fc81988815a7c769a9e2e78bdc6b67ce881481867a664b4e8d3f1fb0d484b04c97866f11d5924ca2e6797de53e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
32127e9ce575d77bdba2c0a6ed72fda2

SHA1
23f0871c2cb947df0de3c8c3cf5e3b71e8d763a3

SHA256
c1636d602406dd842f25e1c156340ac9a43cd842688c115d5e4c19ad44589b28

SHA512
9858182411393d7ab555e06375db4523f9a528bd7ce18180de57551cacc2c7c01c44c14a4360f5292f00e3d39f4f22198cf869a207279536a71b6b13625175cd

Download Submit
\??\pipe\LOCAL\crashpad_3136_YQFTYMREMSFRRJRI

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/3344-100-0x00007FF9D9B20000-0x00007FF9DA5E1000-memory.dmp

Filesize
10.8MB

Download
memory/3344-3-0x00007FF9D9B20000-0x00007FF9DA5E1000-memory.dmp

Filesize
10.8MB

Download
memory/3344-2-0x00007FF9D9B20000-0x00007FF9DA5E1000-memory.dmp

Filesize
10.8MB

Download
memory/3344-4-0x00007FF9D9B20000-0x00007FF9DA5E1000-memory.dmp

Filesize
10.8MB

Download
memory/3344-5-0x00007FF9D9B20000-0x00007FF9DA5E1000-memory.dmp

Filesize
10.8MB

Download
memory/3344-6-0x00007FF9D9B20000-0x00007FF9DA5E1000-memory.dmp

Filesize
10.8MB

Download
memory/3344-44-0x00007FF9D9B23000-0x00007FF9D9B25000-memory.dmp

Filesize
8KB

Download
memory/3344-68-0x00007FF9D9B20000-0x00007FF9DA5E1000-memory.dmp

Filesize
10.8MB

Download
memory/3344-0-0x00007FF9D9B23000-0x00007FF9D9B25000-memory.dmp

Filesize
8KB

Download
memory/3344-1380-0x00007FF9D9B20000-0x00007FF9DA5E1000-memory.dmp

Filesize
10.8MB

Download
memory/3344-1-0x0000000000140000-0x00000000001B6000-memory.dmp

Filesize
472KB

Download