Windows Analysis Report
SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe

Overview

General Information

Sample name: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe
Analysis ID: 1502192
MD5: 43b1b2c0a77f854b3da78dcea07dde13
SHA1: 3bba28b52b62a793bbfab4a70e086d914534c131
SHA256: 1da656b1a5ab3d5fe578eb6bcfd078bf68df4a7ecc570b611686b0213cb54775
Tags: exe
Infos:

Detection

Score: 80
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Multi AV Scanner detection for submitted file
AI detected suspicious sample
Found direct / indirect Syscall (likely to bypass EDR)
Found strings related to Crypto-Mining
Hides threads from debuggers
Overwrites code with unconditional jumps - possibly settings hooks in foreign process
Query firmware table information (likely to detect VMs)
Tries to detect debuggers (CloseHandle check)
Tries to evade analysis by execution special instruction (VM detection)
Checks if the current process is being debugged
Creates a process in suspended mode (likely to inject code)
Entry point lies outside standard sections
HTTP GET or POST without a user agent
IP address seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
Monitors certain registry keys / values for changes (often done to protect autostart functionality)
PE file contains sections with non-standard names
Queries keyboard layouts
Queries the volume information (name, serial number etc) of a device
Uses a known web browser user agent for HTTP communication
Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Classification

AV Detection
barindex
Multi AV Scanner detection for submitted file
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Virustotal: Detection: 18% Perma Link
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe ReversingLabs: Detection: 15%
AI detected suspicious sample
Source: Submited Sample Integrated Neural Analysis Model: Matched 99.9% probability

Bitcoin Miner
barindex
Found strings related to Crypto-Mining
Source: msedgewebview2.exe, 00000002.00000002.2945603689.00003C9C00C80000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: jsecoin.com/
Source: msedgewebview2.exe, 00000002.00000002.2945708725.00003C9C00CD8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: "coinhive.com
Source: unknown HTTPS traffic detected: 5.42.101.19:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView\Default\ Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView\Default\Network\SCT Auditing Pending Reports Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView\ Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView\Default\Network\d092329e-afca-4715-8e6f-4716b6b57dee.tmp Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\ Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\ Jump to behavior
HTTP GET or POST without a user agent
Source: global traffic HTTP traffic detected: GET /static/ecosystem/installer/index.nmt HTTP/1.1accept: */*host: nmtsocial.uno
IP address seen in connection with other malware
Source: Joe Sandbox View IP Address: 162.159.61.3 162.159.61.3
Source: Joe Sandbox View IP Address: 13.107.21.239 13.107.21.239
Source: Joe Sandbox View IP Address: 172.64.41.3 172.64.41.3
JA3 SSL client fingerprint seen in connection with other malware
Source: Joe Sandbox View JA3 fingerprint: 74954a0c86284d0d6e1c4efefe92b521
Uses a known web browser user agent for HTTP communication
Source: global traffic HTTP traffic detected: POST /componentupdater/api/v1/update?cup2key=6:Z9WEj5j7bMokk2oDrtG6tYZnJW9KL-znJhyrhQ6gzCI&cup2hreq=3d2a7c1e263e23ad11d695c9a680e73a61ccc1164e54b0e31b81af7eea4054bf HTTP/1.1Host: edge.microsoft.comConnection: keep-aliveContent-Length: 4921X-Microsoft-Update-AppId: oankkpibpaokgecfckkdkgaoafllipag,fppmbhmldokgmleojlplaaodlkibgikh,ndikpojcjlepofdkaaldkinkjbeeebkl,eeobbhfgfagbclfofmgbdfoicabjdbkn,jbfaflocpnkhbgcijpkiafdpbjkedane,alpjnmnfbgfkmmpcfpejmmoebdndedno,ahmaebgpfccdhgidjaidaoojjcijckba,ohckeflnhegojcjlcpbfpciadgikcohk,fgbafbciocncjfbbonhocjaohoknlaco,kpfehajjjbbcifeehjgfgnabifknmdad,ojblfafjmiikbkepnnolpgbbhejhlcimX-Microsoft-Update-Interactivity: bgX-Microsoft-Update-Service-Cohort: 7331X-Microsoft-Update-Updater: msedge-117.0.2045.47Content-Type: application/jsonSec-Mesh-Client-Edge-Version: 117.0.2045.47Sec-Mesh-Client-Edge-Channel: stableSec-Mesh-Client-OS: WindowsSec-Mesh-Client-OS-Version: 10.0.19045Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-WebView: 1X-Client-Data: CIPhygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, br
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.21.239
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.21.239
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.21.239
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.21.239
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.21.239
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.21.239
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.21.239
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.21.239
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.21.239
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.21.239
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.21.239
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.21.239
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.21.239
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.21.239
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.21.239
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.21.239
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global traffic HTTP traffic detected: GET /static/ecosystem/installer/index.nmt HTTP/1.1accept: */*host: nmtsocial.uno
Source: msedgewebview2.exe, 00000002.00000002.2947724753.00003C9C01478000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: <www.facebook.com equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 00000002.00000002.2947756958.00003C9C01480000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: ?www.facebook.com equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 00000002.00000002.2942434137.00003C9C004D4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1811622919.00007298008C4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1830496606.00007298008B4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.facebook.com/* equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 00000008.00000003.1811622919.00007298008C4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1830496606.00007298008B4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1831387851.00007298008C4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.facebook.com/*translatorserp.bing.combrowserAction.openPopupmanifest:browser_action@ equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 00000002.00000002.2947756958.00003C9C01480000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2940378680.00003C9C0001C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2947724753.00003C9C01478000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: global traffic DNS traffic detected: DNS query: nmtsocial.uno
Source: global traffic DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: unknown HTTP traffic detected: POST /dns-query HTTP/1.1Host: chrome.cloudflare-dns.comConnection: keep-aliveContent-Length: 128Accept: application/dns-messageAccept-Language: *User-Agent: ChromeAccept-Encoding: identityContent-Type: application/dns-message
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2923480101.0000000140485000.00000002.00000001.01000000.00000003.sdmp String found in binary or memory: http://.css
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2923480101.0000000140485000.00000002.00000001.01000000.00000003.sdmp String found in binary or memory: http://.jpg
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://129fy.ie.chalai.net
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://360kjedge.dh.softby.cn
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://360kjedge.xrccp.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://430360cs.yc.anhuang.net
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://511sllqdkj.yc.anhuang.net
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://511zdqdkj.yc.anhuang.net
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://608hyestn.yc.ceg29.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://803hyescs.30bz.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://aldkj207.dh.softby.cn
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://aldkj827.xrccp.com
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943336648.00003C9C00738000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806955389.0000110800144000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/1423136
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2940378680.00003C9C0001C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2162
Source: msedgewebview2.exe, 00000002.00000002.2945563973.00003C9C00C4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1809988517.00003C9C00C5C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941854280.00003C9C002CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2517
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943336648.00003C9C00738000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2970
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3078
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3205
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3206
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2940378680.00003C9C0001C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3452
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942935131.00003C9C00660000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3498
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3502
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942935131.00003C9C00660000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3577
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3584
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942935131.00003C9C00660000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3586
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945525182.00003C9C00C2C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2931705134.00001108000AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3623
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945525182.00003C9C00C2C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2931705134.00001108000AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3624
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945525182.00003C9C00C2C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2931705134.00001108000AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3625
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3832
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3862
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3965
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942935131.00003C9C00660000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3970
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943336648.00003C9C00738000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4324
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943336648.00003C9C00738000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4384
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941854280.00003C9C002CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4405
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2940378680.00003C9C0001C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4428
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943336648.00003C9C00738000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4551
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4633
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4722
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942935131.00003C9C00660000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4836
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942935131.00003C9C00660000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4901
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4937
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806955389.0000110800144000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5007
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5055
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5061
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5281
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5371
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5375
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942935131.00003C9C00660000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5421
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5430
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942935131.00003C9C00660000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5535
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943336648.00003C9C00738000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5658
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943336648.00003C9C00738000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5750
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5881
Source: msedgewebview2.exe, 00000002.00000002.2945563973.00003C9C00C4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1809988517.00003C9C00C5C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5901
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941854280.00003C9C002CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5906
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6041
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6048
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6141
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941854280.00003C9C002CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6248
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6439
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6651
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6692
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6755
Source: msedgewebview2.exe, 00000002.00000002.2945563973.00003C9C00C4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1809988517.00003C9C00C5C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6860
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6876
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6878
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6929
Source: msedgewebview2.exe, 00000002.00000002.2945563973.00003C9C00C4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1809988517.00003C9C00C5C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6953
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943336648.00003C9C00738000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806955389.0000110800144000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7036
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2940378680.00003C9C0001C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7047
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941854280.00003C9C002CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7172
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7279
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942935131.00003C9C00660000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7370
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7406
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7488
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941854280.00003C9C002CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7553
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7556
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943336648.00003C9C00738000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806955389.0000110800144000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7724
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943336648.00003C9C00738000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806955389.0000110800144000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7760
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943336648.00003C9C00738000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7761
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/8162
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942935131.00003C9C00660000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/8215
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/8229
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943336648.00003C9C00738000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/8280
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://bd.gy912.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://cdmg.yuchiweb.icu
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://click.dotmap.co.kr/?pf_code=
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://df.edge.bdkj.bailiana.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://df.edge.qhkj.baicana.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://df.edge.zdkj.ker58.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://dongtaiwang.com/loc/phome.php?v=
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://dongtaiwang.com/loc/phome.php?v=odo
Source: msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000002.2927450900.000042C4001D8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000002.2926221731.000042C40017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000002.2929875286.000042C400364000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://e6.i.lencr.org/0A
Source: msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000002.2927450900.000042C4001D8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000002.2926221731.000042C40017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000002.2929875286.000042C400364000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://e6.o.lencr.org0
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://game.whwuyan.cn
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://hao123.di178.com/?
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://hao123.di178.com/?r916
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://hao123kjedge.dh.softby.cn
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2923480101.0000000140485000.00000002.00000001.01000000.00000003.sdmp String found in binary or memory: http://html4/loose.dtd
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861339479.0000173C0030C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://ipc.localhost/plugin%3Aevent%7ClistenfmethoddPOSTgheaders
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945904059.00003C9C00D4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932896611.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933472953.0000110800218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1812205357.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932373277.0000110800104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://issuetracker.google.com/200067929
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://jg.wangamela.com/tg
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2923480101.0000000140485000.00000002.00000001.01000000.00000003.sdmp String found in binary or memory: http://localhost:5173/../disticons/128x128.pngicons/128x128
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://mini.yyrtv.com/?from=
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://navi.anhuiyunci.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://navi.programmea.com
Source: msedgewebview2.exe, 00000002.00000002.2923717775.00000052F37F2000.00000004.00000010.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941106744.00003C9C0018C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941142440.00003C9C0019C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2946062852.00003C9C00D7C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.loca
Source: msedgewebview2.exe, 00000002.00000002.2923717775.00000052F37F2000.00000004.00000010.00020000.00000000.sdmp String found in binary or memory: http://nmt.locahost/
Source: msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944948137.00003C9C00A88000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.local
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2911579928.00000000004E1000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://nmt.localh
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2923480101.0000000140485000.00000002.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822777631.0000173C0080C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2936470358.0000173C00230000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865822283.0000173C00FB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861273117.0000173C00F54000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822068362.0000173C0033C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2917307894.0000000003F34000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1866804802.0000173C0104C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2936893752.0000173C0026C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822920544.0000173C00EAC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1823080429.0000173C00E0C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861377942.0000173C0033C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865314011.0000173C0110C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945804868.00003C9C00D14000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1890005069.00003C9C012BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943795977.00003C9C0080C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1890213124.00003C9C0123C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943956474.00003C9C00855000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1823051777.00003C9C0114C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1867113125.00003C9C012D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1866980801.00003C9C012F8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2917307894.0000000003F34000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost.R
Source: msedgewebview2.exe, 00000002.00000003.2397617655.00003C9C0086C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944125783.00003C9C00890000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944089939.00003C9C00885000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942788768.00003C9C0060C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941252455.00003C9C001C8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943858900.00003C9C0082C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2923717775.00000052F37F2000.00000004.00000010.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943828064.00003C9C0081C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2940783054.00003C9C000E8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2933212335.00000154DD6D5000.00000002.00000001.00040000.0000001A.sdmp, msedgewebview2.exe, 00000002.00000002.2919504172.00000052987FC000.00000004.00000010.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941142440.00003C9C0019C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944948137.00003C9C00A88000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2946518924.00003C9C00E5C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945297044.00003C9C00B20000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941072072.00003C9C0017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945936546.00003C9C00D58000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1823010420.00003C9C00E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941002003.00003C9C0015C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2940818634.00003C9C000F8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/
Source: msedgewebview2.exe, 00000002.00000002.2945150687.00003C9C00ACC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941142440.00003C9C0019C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/(
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2917307894.0000000003F34000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1883540562.0000729800EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1879477343.0000729800EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.2041030324.0000729800ED0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.2163519243.0000729800EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1917792983.0000729800EC8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/assets/index-BUegJusl.css
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2917307894.0000000003F34000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/assets/index-BUegJusl.cssNR
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2917307894.0000000003F34000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/assets/index-BUegJusl.cssZR
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2917307894.0000000003F34000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/assets/index-BUegJusl.cssost
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2917307894.0000000003F34000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/assets/index-BUegJusl.cssttf
Source: msedgewebview2.exe, 00000002.00000002.2944089939.00003C9C00885000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/d
Source: msedgewebview2.exe, 00000002.00000002.2945150687.00003C9C00ACC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1883540562.0000729800EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1879477343.0000729800EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.2041030324.0000729800ED0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.2163519243.0000729800EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1917792983.0000729800EC8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/fonts/JetBrainsMono-Light.ttf
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2937856838.0000173C002EC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/fonts/JetBrainsMono-Light.ttffmethodcGETgheaders
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2917307894.0000000003F34000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1883540562.0000729800EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1879477343.0000729800EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.2041030324.0000729800ED0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.2163519243.0000729800EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1917792983.0000729800EC8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/fonts/JetBrainsMono-Medium.ttf
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2917307894.0000000003F34000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/fonts/JetBrainsMono-Medium.ttf.8
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2917307894.0000000003F34000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/fonts/LexendExa-Bold.ttf
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2917307894.0000000003F34000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/fonts/LexendExa-Bold.ttfFR
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2936809185.0000173C00260000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2917307894.0000000003F34000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944204272.00003C9C008E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945603689.00003C9C00C80000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945150687.00003C9C00ACC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941742690.00003C9C00288000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945563973.00003C9C00C4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2397617655.00003C9C0086C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943795977.00003C9C0080C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945042042.00003C9C00A9C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2946131453.00003C9C00D98000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2940378680.00003C9C0001C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1860982060.00003C9C00D94000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943305786.00003C9C0072C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2933212335.00000154DD6D5000.00000002.00000001.00040000.0000001A.sdmp, msedgewebview2.exe, 00000002.00000002.2941814171.00003C9C002AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2946518924.00003C9C00E5C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2940494042.00003C9C00068000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945194850.00003C9C00AF0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/install
Source: msedgewebview2.exe, 00000002.00000002.2943795977.00003C9C0080C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/installP
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2936809185.0000173C00260000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945603689.00003C9C00C80000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945150687.00003C9C00ACC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945563973.00003C9C00C4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2940378680.00003C9C0001C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945194850.00003C9C00AF0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2946201941.00003C9C00DB4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945364020.00003C9C00B44000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945836938.00003C9C00D18000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/installr
Source: msedgewebview2.exe, 00000002.00000002.2945563973.00003C9C00C4C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/installr8
Source: msedgewebview2.exe, 00000002.00000002.2941742690.00003C9C00288000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/installrerPolicybledrs
Source: msedgewebview2.exe, 00000002.00000002.2944204272.00003C9C008E4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/installry
Source: msedgewebview2.exe, 00000002.00000002.2945075634.00003C9C00ABC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2397617655.00003C9C0086C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2940378680.00003C9C0001C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2933212335.00000154DD6D5000.00000002.00000001.00040000.0000001A.sdmp, msedgewebview2.exe, 00000002.00000002.2941814171.00003C9C002AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945194850.00003C9C00AF0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942935131.00003C9C00660000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.2412195698.0000729801D18000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1839800171.000072980195C000.00000004.00000800.00020000.00000000.sdmp, History.2.dr String found in binary or memory: http://nmt.localhost/preloader
Source: msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/preloaderh
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2917307894.0000000003F34000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945563973.00003C9C00C4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945904059.00003C9C00D4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2946201941.00003C9C00DB4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942935131.00003C9C00660000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1879419687.0000729800A98000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1896842489.0000729800A78000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1858330172.0000729800A88000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1851703273.0000729800A9E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1854159030.0000729800A98000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1851162910.0000729800A9E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.2069186635.0000729800A98000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1872797065.0000729800A88000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1910676236.0000729800A88000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1884035624.0000729800A88000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1909818863.0000729800A78000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1894353484.0000729800A88000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1897223372.0000729800A80000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.2040192649.0000729800A98000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.2042524603.0000729800A90000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1857855147.0000729800A7E000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/vite.svg
Source: msedgewebview2.exe, 00000002.00000002.2945563973.00003C9C00C4C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost/vite.svg7
Source: msedgewebview2.exe, 00000002.00000002.2945150687.00003C9C00ACC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhost0E1B1E0C3990C00774E85E191C32B0E)
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2937297276.0000173C002A0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhostcontent-type:
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861339479.0000173C0030C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945936546.00003C9C00D58000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhostgRefereruhttp://nmt.localhost/jUser-Agentx
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2937856838.0000173C002EC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945332230.00003C9C00B38000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhostgRefererx.http://nmt.localhost/assets/index-BUegJusl.cssjUser-Agentx
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2917307894.0000000003F10000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhostt
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2917307894.0000000003F10000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://nmt.localhosttZ
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://r.emsoso.cn
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://r.jgxqebp.cn
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://service.whchenxiang.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://sgcs.edge.ker58.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://sgkjedge.47gs.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://vi.liveen.vn/p/home.html
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://web.113989.com/?
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://web.503188.com/?
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.4399.com/flash/32979.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.4399.com/flash/48399.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.4399.com/flash/seer.htm
Source: msedgewebview2.exe, 00000002.00000002.2942788768.00003C9C0060C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.chambersign.org1
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.dinoklafbzor.org
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.hao123.com.11818wz.com/?e
Source: msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000002.2925361836.000042C400144000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://x1.c.lencr.org/0
Source: msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000002.2925361836.000042C400144000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://x1.i.lencr.org/0
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xt.tiantianbannixue.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941181332.00003C9C001AC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://zn728.tdg68.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://123.sogou.com/?
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://360.qrfq25sg.xyz
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941181332.00003C9C001AC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://656a.com
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/4830
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942935131.00003C9C00660000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/4966
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/5845
Source: msedgewebview2.exe, 00000002.00000002.2945563973.00003C9C00C4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1809988517.00003C9C00C5C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/6574
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942935131.00003C9C00660000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7161
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7162
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943336648.00003C9C00738000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7246
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2940378680.00003C9C0001C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7308
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942166058.00003C9C0040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7319
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7320
Source: msedgewebview2.exe, 00000002.00000002.2945563973.00003C9C00C4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1809988517.00003C9C00C5C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2943336648.00003C9C00738000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7369
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7382
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7489
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7604
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7714
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7847
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2944164356.00003C9C008B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933386202.000011080020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7899
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://ausu.lol
Source: msedgewebview2.exe, 00000002.00000002.2941424600.00003C9C0020C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://azureedge.net/
Source: msedgewebview2.exe, 00000002.00000002.2942203638.00003C9C00428000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://baduk.hangame.com/?utm_source=baduk&utm_medium=icon&utm_campaign=shortcut
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://browser.360.cn/saas/index.html
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://browser.cloud.huawei.com.cn/pc
Source: msedgewebview2.exe, 00000002.00000002.2941665427.00003C9C00250000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/record
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://code.51.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://daohang.96zxue.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://de.withtls.net
Source: msedgewebview2.exe, 00000002.00000002.2942312322.00003C9C00468000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://designerapp.officeapps.live.com/designerapp/TraceRequest.ashx
Source: msedgewebview2.exe, 00000002.00000002.2942312322.00003C9C00468000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://designerapp.officeapps.live.com/designerapp/TraceRequest.ashxn_value
Source: msedgewebview2.exe, 00000002.00000002.2942312322.00003C9C00468000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://designerapp.officeapps.live.com/designerapp/suggestions.ashx
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://dev.tg.wan.360.cn/?
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://discovery.lenovo.com.cn/home
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://discovery.lenovo.com.cn/home062291
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2923480101.0000000140485000.00000002.00000001.01000000.00000003.sdmp String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://gamebox.160.com/static
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861177661.0000000003F56000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1864202535.0000173C010AC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1867325895.0000173C00F90000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2919444970.0000000004B10000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1863891932.0000173C00FB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1866804802.0000173C0100C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1864707997.0000173C0104C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1863453959.0000173C00360000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861576665.0000173C0036C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861989476.0000000003F71000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1860977081.0000000003F87000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861526267.0000173C00360000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861426351.0000173C00348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1862603017.0000000003FCF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1864848805.0000173C00F7C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1863046924.0000000003F71000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1867157275.0000173C0104C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1863301930.0000000003FCF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1866287908.0000173C0108C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1864776205.0000173C0100C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1864116207.0000173C010CC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/JetBrains/JetBrainsMono)
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865491227.0000173C01120000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1862475168.0000173C00378000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1862603017.0000000003FA9000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861989476.0000000003FA9000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865314011.0000173C01148000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861858061.0000000003FC9000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1863713750.0000000003FA9000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865075020.0000173C01170000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1864848805.0000173C00F7C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865007511.0000173C01198000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1862312311.0000173C00348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1862373549.0000173C00360000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1863301930.0000000003FA9000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865267724.0000173C011AC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865216936.0000173C01184000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1862415221.0000173C0036C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865555569.0000173C00F7C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1862344505.0000173C00354000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865314011.0000173C0110C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1890005069.00003C9C012BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1867113125.00003C9C012D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/googlefonts/lexend)6_kw
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1813277344.00000000004EC000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1812830458.00000000004E7000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2911579928.0000000000499000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2923480101.0000000140485000.00000002.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2937782256.0000173C002DC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942935131.00003C9C00660000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2916744208.000002A6DE5ED000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1823259160.0000729800730000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/nmt-apps/nmt/issues/2549#issuecomment-1250036908
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1813277344.00000000004EC000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1812830458.00000000004E7000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2911579928.0000000000499000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2923480101.0000000140485000.00000002.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2937782256.0000173C002DC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942935131.00003C9C00660000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2916744208.000002A6DE5ED000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1823259160.0000729800730000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/nmt-apps/nmt/issues/8306)
Source: msedgewebview2.exe, 00000002.00000002.2941424600.00003C9C0020C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://google.com/
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822317339.0000173C0066C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1821828387.00000000004F4000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1821949134.000000000401E000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822317339.0000173C0072C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822429201.0000000003F11000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1823470578.0000173C0080C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822835576.0000173C0080C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1815867832.0000000003E03000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1823704473.0000173C00A04000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1823195166.0000173C0094C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822240382.0000173C0060C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822777631.0000173C0080C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822920544.0000173C00EAC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1823080429.0000173C00E0C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822203703.0000173C00390000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822574788.0000000004017000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1819690022.0000000003F11000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1823051777.00003C9C0114C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1823112160.00003C9C010AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1850283806.00003C9C00F48000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1823233204.00003C9C00EA8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://gsap.com
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822317339.0000173C0066C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1821828387.00000000004F4000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1821949134.000000000401E000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822317339.0000173C0072C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822429201.0000000003F11000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1823470578.0000173C0080C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822835576.0000173C0080C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1815867832.0000000003E03000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1823704473.0000173C00A04000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1823195166.0000173C0094C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822240382.0000173C0060C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822777631.0000173C0080C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822920544.0000173C00EAC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1823080429.0000173C00E0C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822203703.0000173C00390000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822574788.0000000004017000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1819690022.0000000003F11000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1823051777.00003C9C0114C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1823112160.00003C9C010AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1850283806.00003C9C00F48000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1823233204.00003C9C00EA8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://gsap.com/standard-license
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://h5.mcetab.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hao.360.cn/?a1004
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hao.360.com/?360safe
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hao.360.com/?a1004
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hao.360.com/?a1111
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hao.360.com/?h_lnk
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hao.360.com/?installer
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hao.360.com/?src=jsqth
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hao.360.com/?src=lm&ls=
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hao.360.com/?wd_xp1
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hao.360.com/?y1001
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hao.360.com/?y1002
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hao.360.com/?y1013
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hao.qq.com/?unc=
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hao.qq.com/?unc=Af31026&s=o400493_1
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hk.eynbm.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hlj04.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://ilive.lenovo.com.cn/?f=
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://internet-start.net/?
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945904059.00003C9C00D4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932896611.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933472953.0000110800218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1812205357.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932373277.0000110800104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/161903006
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945904059.00003C9C00D4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932896611.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933472953.0000110800218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1812205357.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932373277.0000110800104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/166809097
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945904059.00003C9C00D4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932896611.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933472953.0000110800218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1812205357.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932373277.0000110800104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/184850002
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945904059.00003C9C00D4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932896611.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933472953.0000110800218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1812205357.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932373277.0000110800104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/187425444
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945904059.00003C9C00D4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932896611.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933472953.0000110800218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1812205357.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/220069903
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945904059.00003C9C00D4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932896611.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933472953.0000110800218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1812205357.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932373277.0000110800104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/229267970
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945904059.00003C9C00D4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932896611.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933472953.0000110800218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1812205357.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932373277.0000110800104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/250706693
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945904059.00003C9C00D4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932896611.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933472953.0000110800218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1812205357.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932373277.0000110800104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/253522366
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945904059.00003C9C00D4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932896611.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933472953.0000110800218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1812205357.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/255411748
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945904059.00003C9C00D4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932896611.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933472953.0000110800218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1812205357.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/258207403
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945904059.00003C9C00D4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932896611.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933472953.0000110800218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1812205357.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932373277.0000110800104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/274859104
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2945904059.00003C9C00D4C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932896611.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930557082.000011080000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2933472953.0000110800218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1812205357.00001108001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2932373277.0000110800104000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/284462263
Source: msedgewebview2.exe, 00000002.00000003.1810937194.00003C9C00D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2942898093.00003C9C00650000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1810086397.00003C9C00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807047048.00001108001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807124666.000011080017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000002.2930740792.0000110800024000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806969487.0000110800154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1806987533.0000110800164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1807017100.0000110800170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/issues/166475273
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://jg.awaliwa.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://jianjie.2345.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://kf.07073.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://lenovo.ilive.cn/?f=
Source: msedgewebview2.exe, 00000002.00000002.2941665427.00003C9C00250000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://login-us.microsoftonline.com/
Source: msedgewebview2.exe, 00000002.00000002.2941665427.00003C9C00250000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://login.chinacloudapi.cn/
Source: msedgewebview2.exe, 00000002.00000002.2941665427.00003C9C00250000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://login.cloudgovapi.us/
Source: msedgewebview2.exe, 00000002.00000002.2941665427.00003C9C00250000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://login.microsoft-ppe.com/
Source: msedgewebview2.exe, 00000002.00000002.2941665427.00003C9C00250000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://login.microsoftonline.com/
Source: msedgewebview2.exe, 00000002.00000002.2941665427.00003C9C00250000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://login.microsoftonline.de/
Source: msedgewebview2.exe, 00000002.00000002.2941665427.00003C9C00250000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://login.microsoftonline.us/
Source: msedgewebview2.exe, 00000002.00000002.2940535735.00003C9C00094000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://login.partner.microsoftonline.cn/er
Source: msedgewebview2.exe, 00000002.00000002.2941665427.00003C9C00250000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://login.usgovcloudapi.net/
Source: msedgewebview2.exe, 00000002.00000002.2941665427.00003C9C00250000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://login.windows-ppe.net/
Source: msedgewebview2.exe, 00000002.00000002.2941665427.00003C9C00250000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2934682384.00000154DEC10000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://login.windows.net/
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941181332.00003C9C001AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2940457318.00003C9C0005C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://lx.pub
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://lx.pub/
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://mini.eastday.com/?qid=04433&rfstyle=qt
Source: msedgewebview2.exe, 00000002.00000002.2941424600.00003C9C0020C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://msn.cn/
Source: msedgewebview2.exe, 00000002.00000002.2941424600.00003C9C0020C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://msn.com/
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://news.4399.com/aoyazhiguang/
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2923480101.0000000140485000.00000002.00000001.01000000.00000003.sdmp String found in binary or memory: https://nmtsocial.uno/static
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2923480101.0000000140485000.00000002.00000001.01000000.00000003.sdmp String found in binary or memory: https://nmtsocial.uno/static/ecosystem
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2911579928.00000000004B5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2917307894.0000000003F34000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://nmtsocial.uno/static/ecosystem/installer/index.nmt
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2911579928.00000000004B5000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://nmtsocial.uno/static/ecosystem/installer/index.nmt36
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2923480101.0000000140485000.00000002.00000001.01000000.00000003.sdmp String found in binary or memory: https://nmtsocial.uno/static/ecosystem/installer/installer.exe
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2923480101.0000000140485000.00000002.00000001.01000000.00000003.sdmp String found in binary or memory: https://nmtsocial.uno/staticH
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://ntp.msn.cn/edge/ntp
Source: msedgewebview2.exe, 00000002.00000002.2941424600.00003C9C0020C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://office.net/
Source: msedgewebview2.exe, 00000002.00000002.2943858900.00003C9C0082C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2940378680.00003C9C0001C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941106744.00003C9C0018C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2941355801.00003C9C001E8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000002.2926723425.000042C4001AC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/
Source: msedgewebview2.exe, 00000002.00000002.2943667675.00003C9C007D4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/GetCheckConnectionInfo?source=ChromiumBrowser
Source: msedgewebview2.exe, 00000002.00000002.2941665427.00003C9C00250000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/devicemanagement/data/api
Source: msedgewebview2.exe, 00000002.00000002.2942312322.00003C9C00468000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2940378680.00003C9C0001C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/oauth/multilogin
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://redian.mnjunshi.com/?qid=tpnews
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://redian.mnjunshi.com/?qid=tpnewsy_pcuni
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865491227.0000173C01120000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1862475168.0000173C00378000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1862603017.0000000003FA9000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861989476.0000000003FA9000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861177661.0000000003F56000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865314011.0000173C01148000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1864202535.0000173C010AC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861858061.0000000003FC9000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1867325895.0000173C00F90000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2919444970.0000000004B10000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1863891932.0000173C00FB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1866804802.0000173C0100C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1864707997.0000173C0104C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1863453959.0000173C00360000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1863713750.0000000003FA9000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861576665.0000173C0036C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861989476.0000000003F71000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1860977081.0000000003F87000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861526267.0000173C00360000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861426351.0000173C00348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865075020.0000173C01170000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://scripts.sil.org/OFLThis
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861177661.0000000003F56000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1864202535.0000173C010AC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1867325895.0000173C00F90000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2919444970.0000000004B10000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1863891932.0000173C00FB0000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1866804802.0000173C0100C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1864707997.0000173C0104C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1863453959.0000173C00360000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861576665.0000173C0036C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861989476.0000000003F71000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1860977081.0000000003F87000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861526267.0000173C00360000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861426351.0000173C00348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1862603017.0000000003FCF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1864848805.0000173C00F7C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1863046924.0000000003F71000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1867157275.0000173C0104C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1863301930.0000000003FCF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1866287908.0000173C0108C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1864776205.0000173C0100C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1864116207.0000173C010CC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://scripts.sil.org/OFLhttps://www.jetbrains.comPhilipp
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865491227.0000173C01120000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1862475168.0000173C00378000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1862603017.0000000003FA9000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861989476.0000000003FA9000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865314011.0000173C01148000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1861858061.0000000003FC9000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1863713750.0000000003FA9000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865075020.0000173C01170000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1864848805.0000173C00F7C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865007511.0000173C01198000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1862312311.0000173C00348000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1862373549.0000173C00360000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1863301930.0000000003FA9000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865267724.0000173C011AC000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865216936.0000173C01184000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1862415221.0000173C0036C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865555569.0000173C00F7C000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1862344505.0000173C00354000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1865314011.0000173C0110C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1890005069.00003C9C012BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1867113125.00003C9C012D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://scripts.sil.org/OFLhttps://www.lexend.comBonnie
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://so.lenovo.com.cn
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://start.jword.jp/?fr=slc
Source: msedgewebview2.exe, 00000002.00000002.2941665427.00003C9C00250000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://sts.windows-ppe.net/
Source: msedgewebview2.exe, 00000002.00000002.2941665427.00003C9C00250000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://sts.windows.net/
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://tg.602.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://tj.xyhvip.cn
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://tp.9377s.com
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1822127479.0000173C00360000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://vuejs.org/error-reference/#runtime-$
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://web.sogou.com/?
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2940494042.00003C9C00068000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.2345.com/?
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/100030_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/10305_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/10379.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/10379_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/107884_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/109832_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/110975_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/110975_1.htmhttps://www.4399.com/flash/109832_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/112689_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/115339_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/117227_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/117945_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/118852_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/122099_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/12669_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/127539_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/130389_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/130396.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/130396_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/132028.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/133630_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/134302_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/136516_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/137116_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/137953_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/1382_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/145991_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/151915_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/155283_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/155476_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/15548_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/160944_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/163478_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/171322_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/173634_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/177937_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/17801_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/18012.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/18012_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/180977_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/18169_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/187040_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/187228_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/188593.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/188739_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/189558_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/191203_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/195673_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/195990_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/198491_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/198637_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/198660_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/199408_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/202061_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/202574_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/202604_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/202692_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/202724_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/202785.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/202819_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/202828_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/202901_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/202907_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/202911_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203018_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203093_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203152.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203153_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203154.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203166_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203178_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203215_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203215_3.htmhttps://www.4399.com/flash/203178_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203231_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203369_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203371_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203404_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203453_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203476_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203481_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203495_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203515_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203564_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203682_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/203768_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/204044_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/204056_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/204206.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/204255_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/204290_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/204422_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/204429_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/204562_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/204650_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/204685_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/204886_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/204926_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/204952_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/204989_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/205090_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/205147.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/205165.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/205182.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/205235_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/205325_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/205341_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/205462_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/205536_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/205551_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/205845_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/206114_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/20660_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/206724_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/207195_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/207717_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/208107_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/209567_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/210650_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/212767_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/21552_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/216417_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/21674_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/217370_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/217603_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/217622_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/217629_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/217706_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/217815_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/217844_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/217855_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/217926_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/218066_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/218162_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/218717_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/218860_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/218939_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/218939_3.htmIE11
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/220266_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/221162_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/221700_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/221839_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/222061_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/222151_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/222442_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/22287_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/223745.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/223745_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/225193_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/227465_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/230446_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/231814_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/27924.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/27924_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/32979_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/35538.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/35538_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/3881_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/3883_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/39379_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/40779_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/41193_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/42760_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/43689_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/43841_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/47931_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/48272_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/48504.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/48504_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/55146_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/59227_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/60369_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/6232_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/63805_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/65731_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/69112_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/69156_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/70215_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/72526_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/73386.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/776_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/79452_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/81895_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/83345_4.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/85646_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/87425_2.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/88902_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/90302_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/93015_1.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/93398_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/93551_3.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/yzzrhj.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.4399.com/flash/zmhj.htm
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.91duba.com/?
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.91duba.com/?f=
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.baidu.com/?tn=
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.baidu.com/s?tn=15007414_9_dg&wd=
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.douyin.com/?ug_source=
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.flash.cn/success
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.hao123.com/?tn=
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.iduba.com/sv.html?f=
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.jiegeng.com
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.nate.com/?f=nateontb
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.newduba.cn/?
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.newduba.cn/?f=
Source: msedgewebview2.exe, 00000002.00000002.2945563973.00003C9C00C4C000.00000004.00000800.00020000.00000000.sdmp, Top Sites.2.dr String found in binary or memory: https://www.office.com/
Source: msedgewebview2.exe, 00000002.00000002.2946629217.00003C9C00E8D000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.office.com/OfficeeEATE
Source: msedgewebview2.exe, 00000002.00000002.2945563973.00003C9C00C4C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.office.com/tallr
Source: msedgewebview2.exe, 00000002.00000002.2945563973.00003C9C00C4C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.office.com/w
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.so.com/?src=
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.startfenster.de
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.startseite24.net
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://yxtg.3zwx.cn/tg/ttfc.html?sc=
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://yxtg.flamebird.cn/tg/ttfc.html?sc=
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://yxtg.taojike.com.cn/tg/ttfc.html?sc=
Source: msedgewebview2.exe, 00000002.00000002.2942712805.00003C9C005D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://zum.com/?af=
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown HTTPS traffic detected: 5.42.101.19:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: classification engine Classification label: mal80.evad.mine.winEXE@12/140@5/5
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe File created: C:\Users\user\AppData\Local\com.nmt.ecosystem Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Mutant created: NULL
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File created: C:\Users\user\AppData\Local\Temp\40cb8e6c-55e7-4f64-9302-50475c1a318f.tmp Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File read: C:\Windows\System32\drivers\etc\hosts Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File read: C:\Windows\System32\drivers\etc\hosts Jump to behavior
Source: msedgewebview2.exe, 00000002.00000002.2933811145.00000154DD705000.00000002.00000001.00040000.0000001B.sdmp, Login Data.2.dr Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Virustotal: Detection: 18%
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe ReversingLabs: Detection: 15%
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe String found in binary or memory: ProductNamenmt-installer,
Source: unknown Process created: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe"
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-GB --mojo-named-platform-channel-pipe=7544.7668.17675517513217638666
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffdfb1c8e88,0x7ffdfb1c8e98,0x7ffdfb1c8ea8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView" --webview-exe-name=SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1768 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView" --webview-exe-name=SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2608 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:3
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView" --webview-exe-name=SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2652 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView" --webview-exe-name=SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --first-renderer-process --autoplay-policy=no-user-gesture-required --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1725101066859934 --launch-time-ticks=5743702722 --mojo-platform-channel-handle=3400 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffdfb1c8e88,0x7ffdfb1c8e98,0x7ffdfb1c8ea8 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView" --webview-exe-name=SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1768 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView" --webview-exe-name=SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2608 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:3 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView" --webview-exe-name=SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2652 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:8 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView" --webview-exe-name=SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --first-renderer-process --autoplay-policy=no-user-gesture-required --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1725101066859934 --launch-time-ticks=5743702722 --mojo-platform-channel-handle=3400 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: dwmapi.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: secur32.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: explorerframe.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: dataexchange.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: d3d11.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: dcomp.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: dxgi.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: twinapi.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: edputil.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: dbghelp.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: mswsock.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: rasadhlp.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: fwpuclnt.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: schannel.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: mskeyprotect.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: ntasn1.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: ncrypt.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: ncryptsslp.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: gpapi.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Section loaded: cryptnet.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: version.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.system.profile.platformdiagnosticsandusagedatasettings.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: policymanager.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msvcp110_win.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kbdus.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.system.profile.platformdiagnosticsandusagedatasettings.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: policymanager.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msvcp110_win.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: gpapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mdmregistration.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mdmregistration.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msvcp110_win.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: omadmapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: powrprof.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dmcmnutils.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: iri.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: umpdc.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dsreg.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msvcp110_win.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: powrprof.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: umpdc.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dpapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: nlaapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dhcpcsvc6.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dhcpcsvc.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.ui.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windowmanagementapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: inputhost.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: twinapi.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: twinapi.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wtsapi32.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winsta.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mscms.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: coloradapterclient.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.security.authentication.web.core.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: onecorecommonproxystub.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: devobj.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dataexchange.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: d3d11.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dcomp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dxgi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: uiautomationcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: atlthunk.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: oleacc.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: directmanipulation.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dxgi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: resourcepolicyclient.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mf.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mfplat.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: rtworkq.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: hevcdecoder.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dolbydecmft.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mfperfhelper.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dwmapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: d3d11.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: d3d10warp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dxcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dcomp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dbghelp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: policymanager.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msvcp110_win.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dwritecore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: vaultcli.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: aadwamextension.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.web.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: hevcdecoder.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: tenantrestrictionsplugin.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: netprofm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: npmproxy.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wevtapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.system.userprofile.diagnosticssettings.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: secur32.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dbghelp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: bitsproxy.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dhcpcsvc6.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dhcpcsvc.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: nlaapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mswsock.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: rasadhlp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: ncrypt.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: ntasn1.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: ncryptprov.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}\InProcServer32 Jump to behavior
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Static PE information: Virtual size of .text is bigger than: 0x100000
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Static PE information: Image base 0x140000000 > 0x60000000
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Static file information: File size 15394816 > 1048576
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Static PE information: Raw size of .nmt2 is bigger than: 0x100000 < 0xe9ea00
Entry point lies outside standard sections
Source: initial sample Static PE information: section where entry point is pointing to: .nmt2
PE file contains sections with non-standard names
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Static PE information: section name: .nmt0
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Static PE information: section name: .nmt1
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Static PE information: section name: .nmt2

Hooking and other Techniques for Hiding and Protection
barindex
Overwrites code with unconditional jumps - possibly settings hooks in foreign process
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Memory written: PID: 7544 base: 7FFE22370008 value: E9 EB D9 E9 FF Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Memory written: PID: 7544 base: 7FFE2220D9F0 value: E9 20 26 16 00 Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Memory written: PID: 7544 base: 7FFE2238000D value: E9 BB CB EB FF Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Memory written: PID: 7544 base: 7FFE2223CBC0 value: E9 5A 34 14 00 Jump to behavior
Monitors certain registry keys / values for changes (often done to protect autostart functionality)
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Registry key monitored for changes: HKEY_CURRENT_USER_Classes Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Registry key monitored for changes: HKEY_CURRENT_USER_Classes Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior

Malware Analysis System Evasion
barindex
Query firmware table information (likely to detect VMs)
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe System information queried: FirmwareTableInformation Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe System information queried: FirmwareTableInformation Jump to behavior
Tries to evade analysis by execution special instruction (VM detection)
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Special instruction interceptor: First address: 1418D233C instructions rdtsc caused by: RDTSC with Trap Flag (TF)
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Special instruction interceptor: First address: 1418D234B instructions rdtsc caused by: RDTSC with Trap Flag (TF)
Queries keyboard layouts
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\d0010809 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File Volume queried: C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView\Default\Code Cache\wasm FullSizeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File Volume queried: C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView\Default\Code Cache\js FullSizeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File Volume queried: C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView\Default\blob_storage\8d3a6f72-ebd6-4d56-87e7-0a719c9ea4d1 FullSizeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File Volume queried: C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView\Default\Cache\Cache_Data FullSizeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView\Default\ Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView\Default\Network\SCT Auditing Pending Reports Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView\ Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView\Default\Network\d092329e-afca-4715-8e6f-4716b6b57dee.tmp Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\ Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\ Jump to behavior
Source: msedgewebview2.exe, 00000002.00000002.2944629215.00003C9C009CC000.00000004.00000800.00020000.00000000.sdmp Binary or memory string: VMware
Source: msedgewebview2.exe, 00000002.00000002.2946378392.00003C9C00E1C000.00000004.00000800.00020000.00000000.sdmp Binary or memory string: VMware Virtual USB Mouse
Source: msedgewebview2.exe, 00000002.00000002.2940818634.00003C9C000F8000.00000004.00000800.00020000.00000000.sdmp Binary or memory string: USB device added: path=\\?\usb#vid_0e0f&pid_0003#5&2dda038&0&5#{a5dcbf10-6530-11d2-901f-00c04fb951ed} vendor=3599 "VMware", product=3 "VMware Virtual USB Mouse", serial="", driver="usbccgp", guid=0d8bb110-3ec2-4b6c-ab61-ad3e741a7f67
Source: SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000002.2913839830.000000000050F000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe, 00000000.00000003.1860829576.000000000050E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000002.2928939237.00000154D8440000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000002.2918326241.00000296BA64A000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe System information queried: ModuleInformation Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Process information queried: ProcessInformation Jump to behavior

Anti Debugging
barindex
Hides threads from debuggers
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Thread information set: HideFromDebugger Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Thread information set: HideFromDebugger Jump to behavior
Tries to detect debuggers (CloseHandle check)
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Handle closed: DEADC0DE
Checks if the current process is being debugged
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Process queried: DebugPort Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Process queried: DebugObjectHandle Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Process queried: DebugObjectHandle Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Process queried: DebugObjectHandle Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Process queried: DebugPort Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Memory allocated: page read and write | page guard Jump to behavior

HIPS / PFW / Operating System Protection Evasion
barindex
Found direct / indirect Syscall (likely to bypass EDR)
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe NtQueryInformationProcess: Direct from: 0x1411B1572 Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe NtProtectVirtualMemory: Direct from: 0x1411ED035 Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe NtQuerySystemInformation: Direct from: 0x140E402D7 Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe NtProtectVirtualMemory: Direct from: 0x140F30DB2 Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe NtSetInformationThread: Direct from: 0x1418CD80F Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe NtQuerySystemInformation: Direct from: 0x140F4C0F3 Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe NtClose: Direct from: 0x1418CA369
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe NtProtectVirtualMemory: Direct from: 0x141347947 Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe NtProtectVirtualMemory: Indirect: 0x140E2C853 Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe NtQuerySystemInformation: Direct from: 0x14114DAAF Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe NtUnmapViewOfSection: Direct from: 0x140F49D0D Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe NtProtectVirtualMemory: Direct from: 0x140F60EAA Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe NtSetInformationThread: Direct from: 0x14135DF4B Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe NtQuerySystemInformation: Direct from: 0x14118CB4E Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe NtDeviceIoControlFile: Indirect: 0x1402B2D67 Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe NtCreateFile: Indirect: 0x1402B380A Jump to behavior
Creates a process in suspended mode (likely to inject code)
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffdfb1c8e88,0x7ffdfb1c8e98,0x7ffdfb1c8ea8 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView" --webview-exe-name=SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1768 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView" --webview-exe-name=SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2608 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:3 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView" --webview-exe-name=SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2652 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:8 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView" --webview-exe-name=SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --first-renderer-process --autoplay-policy=no-user-gesture-required --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1725101066859934 --launch-time-ticks=5743702722 --mojo-platform-channel-handle=3400 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Very long cmdline option found, this is very uncommon (may be encrypted or packed)
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=securiteinfo.com.trojan.win64.krypt.13435.32435.exe --webview-exe-version=0.1.0 --user-data-dir="c:\users\user\appdata\local\com.nmt.ecosystem\ebwebview" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=mswebooui,mspdfooui,mssmartscreenprotection --enable-features=mojoipcz --lang=en-gb --mojo-named-platform-channel-pipe=7544.7668.17675517513217638666
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=c:\users\user\appdata\local\com.nmt.ecosystem\ebwebview /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=c:\users\user\appdata\local\com.nmt.ecosystem\ebwebview\crashpad --annotation=isofficialbuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=win64 "--annotation=prod=edge webview2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffdfb1c8e88,0x7ffdfb1c8e98,0x7ffdfb1c8ea8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.nmt.ecosystem\ebwebview" --webview-exe-name=securiteinfo.com.trojan.win64.krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --gpu-preferences=waaaaaaaaadgaaamaaaaaaaaaaaaaaaaaabgaaaaaaa4aaaaaaaaaaaaaaaeaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaagaaaaaaaaaayaaaaaaaaaagaaaaaaaaacaaaaaaaaaaiaaaaaaaaaa== --mojo-platform-channel-handle=1768 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:2
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.networkservice --lang=en-gb --service-sandbox-type=none --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.nmt.ecosystem\ebwebview" --webview-exe-name=securiteinfo.com.trojan.win64.krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2608 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:3
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.storageservice --lang=en-gb --service-sandbox-type=service --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.nmt.ecosystem\ebwebview" --webview-exe-name=securiteinfo.com.trojan.win64.krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2652 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.nmt.ecosystem\ebwebview" --webview-exe-name=securiteinfo.com.trojan.win64.krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --first-renderer-process --autoplay-policy=no-user-gesture-required --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1725101066859934 --launch-time-ticks=5743702722 --mojo-platform-channel-handle=3400 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=c:\users\user\appdata\local\com.nmt.ecosystem\ebwebview /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=c:\users\user\appdata\local\com.nmt.ecosystem\ebwebview\crashpad --annotation=isofficialbuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=win64 "--annotation=prod=edge webview2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffdfb1c8e88,0x7ffdfb1c8e98,0x7ffdfb1c8ea8 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.nmt.ecosystem\ebwebview" --webview-exe-name=securiteinfo.com.trojan.win64.krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --gpu-preferences=waaaaaaaaadgaaamaaaaaaaaaaaaaaaaaabgaaaaaaa4aaaaaaaaaaaaaaaeaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaagaaaaaaaaaayaaaaaaaaaagaaaaaaaaacaaaaaaaaaaiaaaaaaaaaa== --mojo-platform-channel-handle=1768 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:2 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.networkservice --lang=en-gb --service-sandbox-type=none --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.nmt.ecosystem\ebwebview" --webview-exe-name=securiteinfo.com.trojan.win64.krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2608 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:3 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.storageservice --lang=en-gb --service-sandbox-type=service --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.nmt.ecosystem\ebwebview" --webview-exe-name=securiteinfo.com.trojan.win64.krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2652 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:8 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.nmt.ecosystem\ebwebview" --webview-exe-name=securiteinfo.com.trojan.win64.krypt.13435.32435.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --first-renderer-process --autoplay-policy=no-user-gesture-required --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1725101066859934 --launch-time-ticks=5743702722 --mojo-platform-channel-handle=3400 --field-trial-handle=1772,i,11401663883599953160,14768806848800428662,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1 Jump to behavior
Queries the volume information (name, serial number etc) of a device
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\Trust Protection Lists\manifest.json VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\WidevineCdm\manifest.json VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\System32\spool\drivers\color\sRGB Color Space Profile.icm VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\MEIPreload\preloaded_data.pb VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Users\user\AppData\Local\com.nmt.ecosystem\EBWebView\Default\Network\SCT Auditing Pending Reports VolumeInformation Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1502192 Sample: SecuriteInfo.com.Trojan.Win... Startdate: 31/08/2024 Architecture: WINDOWS Score: 80 24 nmtsocial.uno 2->24 34 Multi AV Scanner detection for submitted file 2->34 36 AI detected suspicious sample 2->36 8 SecuriteInfo.com.Trojan.Win64.Krypt.13435.32435.exe 1 2->8         started        signatures3 process4 dnsIp5 26 nmtsocial.uno 5.42.101.19, 443, 49741 RU-KSTVKolomnaGroupofcompaniesGuarantee-tvRU Russian Federation 8->26 38 Overwrites code with unconditional jumps - possibly settings hooks in foreign process 8->38 40 Query firmware table information (likely to detect VMs) 8->40 42 Tries to evade analysis by execution special instruction (VM detection) 8->42 44 3 other signatures 8->44 12 msedgewebview2.exe 33 202 8->12         started        signatures6 process7 signatures8 46 Found strings related to Crypto-Mining 12->46 15 msedgewebview2.exe 18 12->15         started        18 msedgewebview2.exe 12->18         started        20 msedgewebview2.exe 12->20         started        22 2 other processes 12->22 process9 dnsIp10 28 13.107.21.239, 443, 49752 MICROSOFT-CORP-MSN-AS-BLOCKUS United States 15->28 30 chrome.cloudflare-dns.com 162.159.61.3, 443, 49745, 49750 CLOUDFLARENETUS United States 15->30 32 2 other IPs or domains 15->32
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
162.159.61.3
 chrome.cloudflare-dns.com United States
13335 CLOUDFLARENETUS false
13.107.21.239
 unknown United States
8068 MICROSOFT-CORP-MSN-AS-BLOCKUS false
172.64.41.3
 unknown United States
13335 CLOUDFLARENETUS false
5.42.101.19
 nmtsocial.uno Russian Federation
39493 RU-KSTVKolomnaGroupofcompaniesGuarantee-tvRU false

Private

IP
127.0.0.1

Contacted Domains

Name IP Active
chrome.cloudflare-dns.com 162.159.61.3 true
nmtsocial.uno 5.42.101.19 true