Windows Analysis Report
I8R24VDCOi.exe

Overview

General Information

Sample name: I8R24VDCOi.exe
(renamed file extension from none to exe, renamed because original name is a hash value)
Original sample name: 6e3c5f5597966cff1e50c43970281b70b31534e3
Analysis ID: 1541157
MD5: b5cd3cbe8995dfc01f035b107322db51
SHA1: 6e3c5f5597966cff1e50c43970281b70b31534e3
SHA256: 9c28d8da7a38029e84dda55e3509399ca89655731a6cb275ff59b3fd13fd4649
Infos:

Detection

Score: 6
Range: 0 - 100
Whitelisted: false
Confidence: 20%

Signatures

Creates a process in suspended mode (likely to inject code)
HTTP GET or POST without a user agent
IP address seen in connection with other malware
Installs a raw input device (often for capturing keystrokes)
JA3 SSL client fingerprint seen in connection with other malware
Monitors certain registry keys / values for changes (often done to protect autostart functionality)
PE file contains sections with non-standard names
Queries keyboard layouts
Queries the volume information (name, serial number etc) of a device
Uses a known web browser user agent for HTTP communication
Uses code obfuscation techniques (call, push, ret)
Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Classification

Source: unknown HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown HTTPS traffic detected: 185.199.109.153:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: I8R24VDCOi.exe Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Default\Network\fa060d0f-39c1-4b0a-b653-5e7aa71261e2.tmp Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\ Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Default\ Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\ Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Default\Network\Network Persistent State Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\ Jump to behavior
HTTP GET or POST without a user agent
Source: global traffic HTTP traffic detected: GET /lencx/ChatGPT/main/scripts/manifest.json HTTP/1.1accept: */*host: raw.githubusercontent.com
IP address seen in connection with other malware
Source: Joe Sandbox View IP Address: 162.159.61.3 162.159.61.3
Source: Joe Sandbox View IP Address: 185.199.108.133 185.199.108.133
Source: Joe Sandbox View IP Address: 185.199.108.133 185.199.108.133
Source: Joe Sandbox View IP Address: 104.18.94.41 104.18.94.41
JA3 SSL client fingerprint seen in connection with other malware
Source: Joe Sandbox View JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Uses a known web browser user agent for HTTP communication
Source: global traffic HTTP traffic detected: OPTIONS /report/v4?s=AV6wXoXwDiFa2kAZAebAMJt%2BTSlB3xS0XrY%2FGLd8wAnU7YsZ%2Fo6%2F97SrMSN%2FcKc0D4ciXoI%2BeFr99NoPlXrZcVlvOqSHzvKjKakolcYLTBKlFN4hA5mTeQt08Bj%2BbTU5BQ%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveOrigin: https://chat.openai.comAccess-Control-Request-Method: POSTAccess-Control-Request-Headers: content-typeUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: chatgpt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: chatgpt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8d79e2728ba4c86f HTTP/1.1Host: chatgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chatgpt.com/?__cf_chl_rt_tk=OWlVE8SPcNBU.4PYac3.CvmFdPDNrnMWud3IPRv2r_k-1729772045-1.0.1.1-FaJ15L4rrWPMnphtUskDPUMNkVYePEnoZLSvDxWCI3UAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=sdHBg6oF4H6FWxQ60X.5uZVt6GdFGgW512xlAXuvvIk-1729772045-1.0.1.1-UckP2AiJT2n5xudaqhGVxhSavJQwoe38qCHkxcPijBK0X3f2tPoC_bu0LHj8Suz0I5H_pdE4EUnJAsWaGRSrKQ
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8d79e2774d442cde HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chatgpt.com/?__cf_chl_rt_tk=OMNPTxa5dcbdWDC5zF10_TTA4FAlFeYFzZm.zKDL9MY-1729772045-1.0.1.1-oGUTHZxBlovQ_gIL5xQ1jaizOH9wXBLvxoJ_1YkF2p4Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=oJoiX1NMYw6DM_ZM10iV7_U6hTYQdoaWYs_uOT9BO6Q-1729772045-1.0.1.1-Hi.Ef6VnqbNV0f6LNqlxcUCvkKrrA8_EeBgr1r5yrlAfwT4_lyZXY1IyQeOWdq10DNyC4sCh3837wjg7Vxiz4Q
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=oJoiX1NMYw6DM_ZM10iV7_U6hTYQdoaWYs_uOT9BO6Q-1729772045-1.0.1.1-Hi.Ef6VnqbNV0f6LNqlxcUCvkKrrA8_EeBgr1r5yrlAfwT4_lyZXY1IyQeOWdq10DNyC4sCh3837wjg7Vxiz4Q
Source: global traffic HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1625211542:1729702664:ZO1Pl1MsCdl5JCd-iTGVq9XUJ0ETrABYlg4qWlIqm4k/8d79e2728ba4c86f/Bf6z6i3aZvmXsh67IRrDkjru2Pn7kPeG3VRRQ9wYEBc-1729772045-1.2.1.1-AI0RlJhjkb4IECuBan0tbsoSM9D5SbozubHBKHccN023GGR2kPZuzNrzloT7IO7O HTTP/1.1Host: chatgpt.comConnection: keep-aliveContent-Length: 4576User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1CF-Challenge: Bf6z6i3aZvmXsh67IRrDkjru2Pn7kPeG3VRRQ9wYEBc-1729772045-1.2.1.1-AI0RlJhjkb4IECuBan0tbsoSM9D5SbozubHBKHccN023GGR2kPZuzNrzloT7IO7OContent-type: application/x-www-form-urlencodedAccept: */*Origin: https://chatgpt.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=PYa1QMaEAlNq8AXCZuYgo17lZguigSB142jsoN54yjA-1729772047-1.0.1.1-NXX.Lfh2DS0RB2OrlPcc6VrP3TisYFyDxW9FNDoGM9_HcK7f7_ypBkc5Ujem28EaOoCadx7umKyLOZxcOAxrDg
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=PYa1QMaEAlNq8AXCZuYgo17lZguigSB142jsoN54yjA-1729772047-1.0.1.1-NXX.Lfh2DS0RB2OrlPcc6VrP3TisYFyDxW9FNDoGM9_HcK7f7_ypBkc5Ujem28EaOoCadx7umKyLOZxcOAxrDg
Source: global traffic HTTP traffic detected: GET /turnstile/v0/g/f2bbd6738e15/api.js?onload=fSZI2&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveOrigin: https://chatgpt.comUser-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/t722o/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1625211542:1729702664:ZO1Pl1MsCdl5JCd-iTGVq9XUJ0ETrABYlg4qWlIqm4k/8d79e2774d442cde/ZvH6QH227xOm5Ypb_BANPrzG896Lp.qTZdiJPOQCE7U-1729772045-1.2.1.1-8Lu7RgPxI8Fv.3y7IFtMSEJBYFkeLP29_l0T7jWjXNEKAd9BRbPidx9nG9EW5OjN HTTP/1.1Host: chatgpt.comConnection: keep-aliveContent-Length: 4598sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"Content-type: application/x-www-form-urlencodedsec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""CF-Challenge: ZvH6QH227xOm5Ypb_BANPrzG896Lp.qTZdiJPOQCE7U-1729772045-1.2.1.1-8Lu7RgPxI8Fv.3y7IFtMSEJBYFkeLP29_l0T7jWjXNEKAd9BRbPidx9nG9EW5OjNsec-ch-ua-platform: "Windows"Accept: */*Origin: https://chatgpt.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=OQLIkE0UQBS.6z7PZMBm77fwe7cCsT7LkxFFMdDohsc-1729772049-1.0.1.1-wDshRlzskOLKjeCH9yiHP2U0OHy.z1eAe_r213OIjoP0mG39ECCixjcG4Ptq2I.xEWMO.wVaj7yVnc1rKDeubw
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=OQLIkE0UQBS.6z7PZMBm77fwe7cCsT7LkxFFMdDohsc-1729772049-1.0.1.1-wDshRlzskOLKjeCH9yiHP2U0OHy.z1eAe_r213OIjoP0mG39ECCixjcG4Ptq2I.xEWMO.wVaj7yVnc1rKDeubw
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=OQLIkE0UQBS.6z7PZMBm77fwe7cCsT7LkxFFMdDohsc-1729772049-1.0.1.1-wDshRlzskOLKjeCH9yiHP2U0OHy.z1eAe_r213OIjoP0mG39ECCixjcG4Ptq2I.xEWMO.wVaj7yVnc1rKDeubw
Source: global traffic HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1625211542:1729702664:ZO1Pl1MsCdl5JCd-iTGVq9XUJ0ETrABYlg4qWlIqm4k/8d79e2774d442cde/ZvH6QH227xOm5Ypb_BANPrzG896Lp.qTZdiJPOQCE7U-1729772045-1.2.1.1-8Lu7RgPxI8Fv.3y7IFtMSEJBYFkeLP29_l0T7jWjXNEKAd9BRbPidx9nG9EW5OjN HTTP/1.1Host: chatgpt.comConnection: keep-aliveContent-Length: 5934sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"Content-type: application/x-www-form-urlencodedsec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""CF-Challenge: ZvH6QH227xOm5Ypb_BANPrzG896Lp.qTZdiJPOQCE7U-1729772045-1.2.1.1-8Lu7RgPxI8Fv.3y7IFtMSEJBYFkeLP29_l0T7jWjXNEKAd9BRbPidx9nG9EW5OjNsec-ch-ua-platform: "Windows"Accept: */*Origin: https://chatgpt.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=ysrGvPmqhbqYx9hKvni415uvjO__4.xgdhrK.8AeKR0-1729772056-1.0.1.1-8bWYXZaq.ASgU.3ns_xLGRgw.nJpRbCVD3gnD_eHFkoSW2C_5IZScKae9.mTVh1vW8K3WRS2L8wAGhX1Kj.lVA
Source: global traffic HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1625211542:1729702664:ZO1Pl1MsCdl5JCd-iTGVq9XUJ0ETrABYlg4qWlIqm4k/8d79e2728ba4c86f/Bf6z6i3aZvmXsh67IRrDkjru2Pn7kPeG3VRRQ9wYEBc-1729772045-1.2.1.1-AI0RlJhjkb4IECuBan0tbsoSM9D5SbozubHBKHccN023GGR2kPZuzNrzloT7IO7O HTTP/1.1Host: chatgpt.comConnection: keep-aliveContent-Length: 5583User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1CF-Challenge: Bf6z6i3aZvmXsh67IRrDkjru2Pn7kPeG3VRRQ9wYEBc-1729772045-1.2.1.1-AI0RlJhjkb4IECuBan0tbsoSM9D5SbozubHBKHccN023GGR2kPZuzNrzloT7IO7OContent-type: application/x-www-form-urlencodedAccept: */*Origin: https://chatgpt.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=ysrGvPmqhbqYx9hKvni415uvjO__4.xgdhrK.8AeKR0-1729772056-1.0.1.1-8bWYXZaq.ASgU.3ns_xLGRgw.nJpRbCVD3gnD_eHFkoSW2C_5IZScKae9.mTVh1vW8K3WRS2L8wAGhX1Kj.lVA
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: chatgpt.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=h6QED80bYekZchG851gHvOE6zYYRfWLK9yqva63qtPU-1729772062-1.0.1.1-267CL1OpoTxN3FngsAh8qNaK2Q5Cle6PJJtSxSsR3gOIsdQ_pMWs1kaOcVNwe2UFtr8cdpJmpLeMfSaaVMs3tg; cf_chl_rc_m=2
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8d79e2f4cd0c8788 HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chatgpt.com/?__cf_chl_rt_tk=20txOQoVK95DoG_CQ5q6KcdMzflGfLsefy9rSRUI7iQ-1729772066-1.0.1.1-JFT1zQYUZnxXGuH4WMSvA1_NdrKhV2efJk2vSu0zPD0Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=h6QED80bYekZchG851gHvOE6zYYRfWLK9yqva63qtPU-1729772062-1.0.1.1-267CL1OpoTxN3FngsAh8qNaK2Q5Cle6PJJtSxSsR3gOIsdQ_pMWs1kaOcVNwe2UFtr8cdpJmpLeMfSaaVMs3tg; cf_chl_rc_m=2
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: chatgpt.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=h6QED80bYekZchG851gHvOE6zYYRfWLK9yqva63qtPU-1729772062-1.0.1.1-267CL1OpoTxN3FngsAh8qNaK2Q5Cle6PJJtSxSsR3gOIsdQ_pMWs1kaOcVNwe2UFtr8cdpJmpLeMfSaaVMs3tg; cf_chl_rc_m=2
Source: global traffic HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/292910351:1729702615:K3nzjQK0cRG2v-46QDcmxvg4IT5wiF0B2zJ5KAeT8R8/8d79e2f4cd0c8788/2xkr6zQwIkKrPVFmvDzbUoc4QPjOE0zHNdxAaQIUhI4-1729772066-1.2.1.1-jQNbQPmiZFHVEAQU0G1rz97qSdhiiPh4TRv0aVWRlF0HBddiUrdhcLDyqnBQAJ0q HTTP/1.1Host: chatgpt.comConnection: keep-aliveContent-Length: 4601sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"Content-type: application/x-www-form-urlencodedsec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""CF-Challenge: 2xkr6zQwIkKrPVFmvDzbUoc4QPjOE0zHNdxAaQIUhI4-1729772066-1.2.1.1-jQNbQPmiZFHVEAQU0G1rz97qSdhiiPh4TRv0aVWRlF0HBddiUrdhcLDyqnBQAJ0qsec-ch-ua-platform: "Windows"Accept: */*Origin: https://chatgpt.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=h6QED80bYekZchG851gHvOE6zYYRfWLK9yqva63qtPU-1729772062-1.0.1.1-267CL1OpoTxN3FngsAh8qNaK2Q5Cle6PJJtSxSsR3gOIsdQ_pMWs1kaOcVNwe2UFtr8cdpJmpLeMfSaaVMs3tg; cf_chl_rc_m=2
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=h6QED80bYekZchG851gHvOE6zYYRfWLK9yqva63qtPU-1729772062-1.0.1.1-267CL1OpoTxN3FngsAh8qNaK2Q5Cle6PJJtSxSsR3gOIsdQ_pMWs1kaOcVNwe2UFtr8cdpJmpLeMfSaaVMs3tg; cf_chl_rc_m=2
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8d79e300ee17ddae HTTP/1.1Host: chatgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chatgpt.com/?__cf_chl_rt_tk=8w9J9mNtfC6DhGfX8eRBt9XolDvbcfnCdeO8A7tCHUA-1729772067-1.0.1.1-MiHQPsyxieke70xcRzUl5l3hWeQrwMZQRg18duMpcgMAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: cf_chl_rc_m=2; __cf_bm=x_8nAfA8agM_jc9AVuOnIvKN5Qfjpse_HUIsiSmcTjU-1729772067-1.0.1.1-oi9k25cL6mTcxA9p1hxOBX7ownA4ggjyuQ50V34YrBypsa5sdqrkUmPavdlrj0dOcISbQYPxqWW6sist52XFcg
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: cf_chl_rc_m=2; __cf_bm=x_8nAfA8agM_jc9AVuOnIvKN5Qfjpse_HUIsiSmcTjU-1729772067-1.0.1.1-oi9k25cL6mTcxA9p1hxOBX7ownA4ggjyuQ50V34YrBypsa5sdqrkUmPavdlrj0dOcISbQYPxqWW6sist52XFcg
Source: global traffic HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/292910351:1729702615:K3nzjQK0cRG2v-46QDcmxvg4IT5wiF0B2zJ5KAeT8R8/8d79e300ee17ddae/aQO6uSl8y3ViDGoOFfVtp9_9o74X77o_dW7pR9QUBig-1729772067-1.2.1.1-rpQKt5NL_ixqyaczBylL4cNNx1TyZkCmaCXTkznmW7NJZpjOPGwN20vTXUQWR7S0 HTTP/1.1Host: chatgpt.comConnection: keep-aliveContent-Length: 4577User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1CF-Challenge: aQO6uSl8y3ViDGoOFfVtp9_9o74X77o_dW7pR9QUBig-1729772067-1.2.1.1-rpQKt5NL_ixqyaczBylL4cNNx1TyZkCmaCXTkznmW7NJZpjOPGwN20vTXUQWR7S0Content-type: application/x-www-form-urlencodedAccept: */*Origin: https://chatgpt.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: cf_chl_rc_m=2; __cf_bm=x_8nAfA8agM_jc9AVuOnIvKN5Qfjpse_HUIsiSmcTjU-1729772067-1.0.1.1-oi9k25cL6mTcxA9p1hxOBX7ownA4ggjyuQ50V34YrBypsa5sdqrkUmPavdlrj0dOcISbQYPxqWW6sist52XFcg
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: cf_chl_rc_m=2; __cf_bm=x_8nAfA8agM_jc9AVuOnIvKN5Qfjpse_HUIsiSmcTjU-1729772067-1.0.1.1-oi9k25cL6mTcxA9p1hxOBX7ownA4ggjyuQ50V34YrBypsa5sdqrkUmPavdlrj0dOcISbQYPxqWW6sist52XFcg
Source: global traffic HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/292910351:1729702615:K3nzjQK0cRG2v-46QDcmxvg4IT5wiF0B2zJ5KAeT8R8/8d79e2f4cd0c8788/2xkr6zQwIkKrPVFmvDzbUoc4QPjOE0zHNdxAaQIUhI4-1729772066-1.2.1.1-jQNbQPmiZFHVEAQU0G1rz97qSdhiiPh4TRv0aVWRlF0HBddiUrdhcLDyqnBQAJ0q HTTP/1.1Host: chatgpt.comConnection: keep-aliveContent-Length: 5760sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"Content-type: application/x-www-form-urlencodedsec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""CF-Challenge: 2xkr6zQwIkKrPVFmvDzbUoc4QPjOE0zHNdxAaQIUhI4-1729772066-1.2.1.1-jQNbQPmiZFHVEAQU0G1rz97qSdhiiPh4TRv0aVWRlF0HBddiUrdhcLDyqnBQAJ0qsec-ch-ua-platform: "Windows"Accept: */*Origin: https://chatgpt.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: cf_chl_rc_m=2; __cf_bm=x_8nAfA8agM_jc9AVuOnIvKN5Qfjpse_HUIsiSmcTjU-1729772067-1.0.1.1-oi9k25cL6mTcxA9p1hxOBX7ownA4ggjyuQ50V34YrBypsa5sdqrkUmPavdlrj0dOcISbQYPxqWW6sist52XFcg
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: cf_chl_rc_m=2; __cf_bm=x_8nAfA8agM_jc9AVuOnIvKN5Qfjpse_HUIsiSmcTjU-1729772067-1.0.1.1-oi9k25cL6mTcxA9p1hxOBX7ownA4ggjyuQ50V34YrBypsa5sdqrkUmPavdlrj0dOcISbQYPxqWW6sist52XFcg
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: chatgpt.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=cI4pbl9fadRAB9hak6.ok0tUSnANbu0oAqisaUDJ8oI-1729772075-1.0.1.1-bFKmL1M2ve3jNiJsDSXJ6BiVUVAwAuEvg9qflnjYWwQ5NCewRO91PRKpv6xvvEi4U22IOKgwEbRjhhnWiafeVA; cf_chl_rc_m=3
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=8d79e36a9d700b76 HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chatgpt.com/?__cf_chl_rt_tk=EKnr2Edcj6ZkF4pygKDOGjVV6HATs.idxv5FCSbsCFo-1729772084-1.0.1.1-EZnBSw_.oM3HtwH5C5xr5cLkdO8sOD.j5sNd_MbjkxMAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=cI4pbl9fadRAB9hak6.ok0tUSnANbu0oAqisaUDJ8oI-1729772075-1.0.1.1-bFKmL1M2ve3jNiJsDSXJ6BiVUVAwAuEvg9qflnjYWwQ5NCewRO91PRKpv6xvvEi4U22IOKgwEbRjhhnWiafeVA; cf_chl_rc_m=3
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=cI4pbl9fadRAB9hak6.ok0tUSnANbu0oAqisaUDJ8oI-1729772075-1.0.1.1-bFKmL1M2ve3jNiJsDSXJ6BiVUVAwAuEvg9qflnjYWwQ5NCewRO91PRKpv6xvvEi4U22IOKgwEbRjhhnWiafeVA; cf_chl_rc_m=3
Source: global traffic HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1274467767:1729768387:GZ03pNqdcvUyWi3tepVr5CneT2FTszG4NLRECEWjr3U/8d79e36a9d700b76/4rRr1xNn6FwY4ykYht78o1BBXfW68JsrOtAEo9iwHmg-1729772084-1.2.1.1-RT7MAMKq2U2V57BqkjG9u9lVXrrDkaCXEGYzzlcXHfOJFzVwDiiOCHaodXharcBz HTTP/1.1Host: chatgpt.comConnection: keep-aliveContent-Length: 4553sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"Content-type: application/x-www-form-urlencodedsec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""CF-Challenge: 4rRr1xNn6FwY4ykYht78o1BBXfW68JsrOtAEo9iwHmg-1729772084-1.2.1.1-RT7MAMKq2U2V57BqkjG9u9lVXrrDkaCXEGYzzlcXHfOJFzVwDiiOCHaodXharcBzsec-ch-ua-platform: "Windows"Accept: */*Origin: https://chatgpt.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=cI4pbl9fadRAB9hak6.ok0tUSnANbu0oAqisaUDJ8oI-1729772075-1.0.1.1-bFKmL1M2ve3jNiJsDSXJ6BiVUVAwAuEvg9qflnjYWwQ5NCewRO91PRKpv6xvvEi4U22IOKgwEbRjhhnWiafeVA; cf_chl_rc_m=3
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=cI4pbl9fadRAB9hak6.ok0tUSnANbu0oAqisaUDJ8oI-1729772075-1.0.1.1-bFKmL1M2ve3jNiJsDSXJ6BiVUVAwAuEvg9qflnjYWwQ5NCewRO91PRKpv6xvvEi4U22IOKgwEbRjhhnWiafeVA; cf_chl_rc_m=3
Source: global traffic HTTP traffic detected: POST /componentupdater/api/v1/update?cup2key=6:zA-fqe23Zjma7QQvbkpD4CPvwbGWRIk97MMdoDIOR7w&cup2hreq=b625a8f99262a396d9fbb0706e4777b338edb793d786e234d6b4532962ef3d58 HTTP/1.1Host: edge.microsoft.comConnection: keep-aliveContent-Length: 4921X-Microsoft-Update-AppId: oankkpibpaokgecfckkdkgaoafllipag,kpfehajjjbbcifeehjgfgnabifknmdad,ohckeflnhegojcjlcpbfpciadgikcohk,fppmbhmldokgmleojlplaaodlkibgikh,ndikpojcjlepofdkaaldkinkjbeeebkl,fgbafbciocncjfbbonhocjaohoknlaco,ahmaebgpfccdhgidjaidaoojjcijckba,ojblfafjmiikbkepnnolpgbbhejhlcim,alpjnmnfbgfkmmpcfpejmmoebdndedno,jbfaflocpnkhbgcijpkiafdpbjkedane,eeobbhfgfagbclfofmgbdfoicabjdbknX-Microsoft-Update-Interactivity: bgX-Microsoft-Update-Service-Cohort: 3521X-Microsoft-Update-Updater: msedge-117.0.2045.47Content-Type: application/jsonSec-Mesh-Client-Edge-Version: 117.0.2045.47Sec-Mesh-Client-Edge-Channel: stableSec-Mesh-Client-OS: WindowsSec-Mesh-Client-OS-Version: 10.0.19045Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-WebView: 1X-Client-Data: COrjygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, br
Source: global traffic HTTP traffic detected: OPTIONS /report/v4?s=3V7tZg8DupBWa%2Ff7S9JM8GFtlRid9dl3Bd35rdFUGaO%2BBiZk%2BKOR78XEahTbWD9%2BIghfA%2F63sNGZv9p%2ByZXnARv2Cm5zxa8K1sT6TPQCdCvn6pPPt%2FSD05VoJUqk HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveOrigin: https://chatgpt.comAccess-Control-Request-Method: POSTAccess-Control-Request-Headers: content-typeUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.95.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: unknown TCP traffic detected without corresponding DNS query: 104.18.94.41
Source: global traffic HTTP traffic detected: GET /ChatGPT/install.json HTTP/1.1accept: application/jsonconnection: closeaccept-encoding: gzip, deflateuser-agent: attohttpc/0.22.0host: lencx.github.io
Source: global traffic HTTP traffic detected: GET /lencx/ChatGPT/main/scripts/manifest.json HTTP/1.1accept: */*host: raw.githubusercontent.com
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: chatgpt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: chatgpt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8d79e2728ba4c86f HTTP/1.1Host: chatgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chatgpt.com/?__cf_chl_rt_tk=OWlVE8SPcNBU.4PYac3.CvmFdPDNrnMWud3IPRv2r_k-1729772045-1.0.1.1-FaJ15L4rrWPMnphtUskDPUMNkVYePEnoZLSvDxWCI3UAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=sdHBg6oF4H6FWxQ60X.5uZVt6GdFGgW512xlAXuvvIk-1729772045-1.0.1.1-UckP2AiJT2n5xudaqhGVxhSavJQwoe38qCHkxcPijBK0X3f2tPoC_bu0LHj8Suz0I5H_pdE4EUnJAsWaGRSrKQ
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8d79e2774d442cde HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chatgpt.com/?__cf_chl_rt_tk=OMNPTxa5dcbdWDC5zF10_TTA4FAlFeYFzZm.zKDL9MY-1729772045-1.0.1.1-oGUTHZxBlovQ_gIL5xQ1jaizOH9wXBLvxoJ_1YkF2p4Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=oJoiX1NMYw6DM_ZM10iV7_U6hTYQdoaWYs_uOT9BO6Q-1729772045-1.0.1.1-Hi.Ef6VnqbNV0f6LNqlxcUCvkKrrA8_EeBgr1r5yrlAfwT4_lyZXY1IyQeOWdq10DNyC4sCh3837wjg7Vxiz4Q
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=oJoiX1NMYw6DM_ZM10iV7_U6hTYQdoaWYs_uOT9BO6Q-1729772045-1.0.1.1-Hi.Ef6VnqbNV0f6LNqlxcUCvkKrrA8_EeBgr1r5yrlAfwT4_lyZXY1IyQeOWdq10DNyC4sCh3837wjg7Vxiz4Q
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=PYa1QMaEAlNq8AXCZuYgo17lZguigSB142jsoN54yjA-1729772047-1.0.1.1-NXX.Lfh2DS0RB2OrlPcc6VrP3TisYFyDxW9FNDoGM9_HcK7f7_ypBkc5Ujem28EaOoCadx7umKyLOZxcOAxrDg
Source: global traffic HTTP traffic detected: GET /turnstile/v0/g/f2bbd6738e15/api.js?onload=fSZI2&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveOrigin: https://chatgpt.comUser-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/t722o/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=OQLIkE0UQBS.6z7PZMBm77fwe7cCsT7LkxFFMdDohsc-1729772049-1.0.1.1-wDshRlzskOLKjeCH9yiHP2U0OHy.z1eAe_r213OIjoP0mG39ECCixjcG4Ptq2I.xEWMO.wVaj7yVnc1rKDeubw
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=OQLIkE0UQBS.6z7PZMBm77fwe7cCsT7LkxFFMdDohsc-1729772049-1.0.1.1-wDshRlzskOLKjeCH9yiHP2U0OHy.z1eAe_r213OIjoP0mG39ECCixjcG4Ptq2I.xEWMO.wVaj7yVnc1rKDeubw
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: chatgpt.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=h6QED80bYekZchG851gHvOE6zYYRfWLK9yqva63qtPU-1729772062-1.0.1.1-267CL1OpoTxN3FngsAh8qNaK2Q5Cle6PJJtSxSsR3gOIsdQ_pMWs1kaOcVNwe2UFtr8cdpJmpLeMfSaaVMs3tg; cf_chl_rc_m=2
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8d79e2f4cd0c8788 HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chatgpt.com/?__cf_chl_rt_tk=20txOQoVK95DoG_CQ5q6KcdMzflGfLsefy9rSRUI7iQ-1729772066-1.0.1.1-JFT1zQYUZnxXGuH4WMSvA1_NdrKhV2efJk2vSu0zPD0Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=h6QED80bYekZchG851gHvOE6zYYRfWLK9yqva63qtPU-1729772062-1.0.1.1-267CL1OpoTxN3FngsAh8qNaK2Q5Cle6PJJtSxSsR3gOIsdQ_pMWs1kaOcVNwe2UFtr8cdpJmpLeMfSaaVMs3tg; cf_chl_rc_m=2
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: chatgpt.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=h6QED80bYekZchG851gHvOE6zYYRfWLK9yqva63qtPU-1729772062-1.0.1.1-267CL1OpoTxN3FngsAh8qNaK2Q5Cle6PJJtSxSsR3gOIsdQ_pMWs1kaOcVNwe2UFtr8cdpJmpLeMfSaaVMs3tg; cf_chl_rc_m=2
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=h6QED80bYekZchG851gHvOE6zYYRfWLK9yqva63qtPU-1729772062-1.0.1.1-267CL1OpoTxN3FngsAh8qNaK2Q5Cle6PJJtSxSsR3gOIsdQ_pMWs1kaOcVNwe2UFtr8cdpJmpLeMfSaaVMs3tg; cf_chl_rc_m=2
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8d79e300ee17ddae HTTP/1.1Host: chatgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chatgpt.com/?__cf_chl_rt_tk=8w9J9mNtfC6DhGfX8eRBt9XolDvbcfnCdeO8A7tCHUA-1729772067-1.0.1.1-MiHQPsyxieke70xcRzUl5l3hWeQrwMZQRg18duMpcgMAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: cf_chl_rc_m=2; __cf_bm=x_8nAfA8agM_jc9AVuOnIvKN5Qfjpse_HUIsiSmcTjU-1729772067-1.0.1.1-oi9k25cL6mTcxA9p1hxOBX7ownA4ggjyuQ50V34YrBypsa5sdqrkUmPavdlrj0dOcISbQYPxqWW6sist52XFcg
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: cf_chl_rc_m=2; __cf_bm=x_8nAfA8agM_jc9AVuOnIvKN5Qfjpse_HUIsiSmcTjU-1729772067-1.0.1.1-oi9k25cL6mTcxA9p1hxOBX7ownA4ggjyuQ50V34YrBypsa5sdqrkUmPavdlrj0dOcISbQYPxqWW6sist52XFcg
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: cf_chl_rc_m=2; __cf_bm=x_8nAfA8agM_jc9AVuOnIvKN5Qfjpse_HUIsiSmcTjU-1729772067-1.0.1.1-oi9k25cL6mTcxA9p1hxOBX7ownA4ggjyuQ50V34YrBypsa5sdqrkUmPavdlrj0dOcISbQYPxqWW6sist52XFcg
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: cf_chl_rc_m=2; __cf_bm=x_8nAfA8agM_jc9AVuOnIvKN5Qfjpse_HUIsiSmcTjU-1729772067-1.0.1.1-oi9k25cL6mTcxA9p1hxOBX7ownA4ggjyuQ50V34YrBypsa5sdqrkUmPavdlrj0dOcISbQYPxqWW6sist52XFcg
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: chatgpt.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=cI4pbl9fadRAB9hak6.ok0tUSnANbu0oAqisaUDJ8oI-1729772075-1.0.1.1-bFKmL1M2ve3jNiJsDSXJ6BiVUVAwAuEvg9qflnjYWwQ5NCewRO91PRKpv6xvvEi4U22IOKgwEbRjhhnWiafeVA; cf_chl_rc_m=3
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=8d79e36a9d700b76 HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chatgpt.com/?__cf_chl_rt_tk=EKnr2Edcj6ZkF4pygKDOGjVV6HATs.idxv5FCSbsCFo-1729772084-1.0.1.1-EZnBSw_.oM3HtwH5C5xr5cLkdO8sOD.j5sNd_MbjkxMAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=cI4pbl9fadRAB9hak6.ok0tUSnANbu0oAqisaUDJ8oI-1729772075-1.0.1.1-bFKmL1M2ve3jNiJsDSXJ6BiVUVAwAuEvg9qflnjYWwQ5NCewRO91PRKpv6xvvEi4U22IOKgwEbRjhhnWiafeVA; cf_chl_rc_m=3
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=cI4pbl9fadRAB9hak6.ok0tUSnANbu0oAqisaUDJ8oI-1729772075-1.0.1.1-bFKmL1M2ve3jNiJsDSXJ6BiVUVAwAuEvg9qflnjYWwQ5NCewRO91PRKpv6xvvEi4U22IOKgwEbRjhhnWiafeVA; cf_chl_rc_m=3
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chatgpt.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Microsoft Edge";v="117.0.2045.47", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132", "Microsoft Edge WebView2";v="117.0.2045.47"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chatgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: __cf_bm=cI4pbl9fadRAB9hak6.ok0tUSnANbu0oAqisaUDJ8oI-1729772075-1.0.1.1-bFKmL1M2ve3jNiJsDSXJ6BiVUVAwAuEvg9qflnjYWwQ5NCewRO91PRKpv6xvvEi4U22IOKgwEbRjhhnWiafeVA; cf_chl_rc_m=3
Source: msedgewebview2.exe, 00000008.00000003.1738274183.00001AFC008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.1776074254.00001AFC008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1745832104.00004B50008A4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://microsoftstart.msn.cn/*https://rewards.microsoft.com/*https://www.microsoftnews.com/*https://www.facebook.com/*www.staging-bing-int.comaction.getBadgeTextColorhttps://outlook.live.com/*https://rewards.bing.com/*https://www.microsoftnews.cn/*translatorserp.bing.comhttps://translator.bing.com/*manifest:action equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 0000000C.00000002.1849691539.0000503C00874000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://microsoftstart.msn.cn/*https://rewards.microsoft.com/*https://www.microsoftnews.com/*https://www.facebook.com/*www.staging-bing-int.comaction.getBadgeTextColorhttps://outlook.live.com/*https://rewards.bing.com/*https://www.microsoftnews.cn/*translatorserp.bing.commanifest:browser_action equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 0000000B.00000003.1804650926.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1853726164.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1974438974.000023480087C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://rewards.microsoft.com/*https://www.microsoftnews.com/*https://www.facebook.com/*www.staging-bing-int.comaction.getBadgeTextColorhttps://outlook.live.com/*https://rewards.bing.com/*https://www.microsoftnews.cn/*translatorserp.bing.comhttps://translator.bing.com/*manifest:action equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 00000008.00000003.1738274183.00001AFC008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.1776074254.00001AFC008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1745832104.00004B50008A4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.facebook.com/* equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 00000008.00000002.1772769738.00001AFC002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786405657.00004B50002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1846280085.0000503C002A8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: global traffic DNS traffic detected: DNS query: raw.githubusercontent.com
Source: global traffic DNS traffic detected: DNS query: lencx.github.io
Source: global traffic DNS traffic detected: DNS query: chat.openai.com
Source: global traffic DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic DNS traffic detected: DNS query: chatgpt.com
Source: global traffic DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: unknown HTTP traffic detected: POST /dns-query HTTP/1.1Host: chrome.cloudflare-dns.comConnection: keep-aliveContent-Length: 128Accept: application/dns-messageAccept-Language: *User-Agent: ChromeAccept-Encoding: identityContent-Type: application/dns-message
Source: global traffic HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 12:14:05 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9088Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()X-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 12:14:05 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9195Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()X-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 12:14:07 GMTContent-Type: text/html; charset=UTF-8Content-Length: 10478Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()X-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 12:14:09 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9612Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()X-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 12:14:12 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9569Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()X-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 12:14:16 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9249Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()X-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 12:14:26 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9642Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()X-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 12:14:27 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9344Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()X-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 12:14:28 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9612Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()X-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 12:14:30 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9313Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()X-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 12:14:32 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9292Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()X-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 12:14:35 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9591Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()X-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 12:14:44 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9621Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()X-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 12:14:46 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9612Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()X-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 12:14:48 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9612Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()X-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731603070.000073FC00154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/1423136
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2162
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2517
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/2970
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3078
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3205
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3206
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3452
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3498
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3502
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3577
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3584
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3586
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3623
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3624
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3625
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3832
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3862
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3965
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/3970
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4324
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4384
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4405
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4428
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4551
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4633
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4722
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4836
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4901
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/4937
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731603070.000073FC00154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5007
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5055
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5061
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5281
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5371
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5375
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5421
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5430
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5535
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5658
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5750
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5881
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5901
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/5906
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6041
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6048
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6141
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6248
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6439
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6651
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6692
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6755
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6860
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6876
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6878
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6929
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/6953
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731603070.000073FC00154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7036
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7047
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7172
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7279
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7370
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7406
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7488
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7553
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7556
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731603070.000073FC00154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7724
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731603070.000073FC00154000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7760
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/7761
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/8162
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/8215
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/8229
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://anglebug.com/8280
Source: msedgewebview2.exe, 00000006.00000003.1848005938.00006CAC00434000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1850962455.00006CAC00438000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://c.pki.goog/r/gsr1.crl0
Source: msedgewebview2.exe, 00000006.00000003.1848005938.00006CAC00434000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1850962455.00006CAC00438000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://c.pki.goog/r/r4.crl0
Source: msedgewebview2.exe, 00000006.00000003.1848005938.00006CAC00434000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1850962455.00006CAC00438000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://c.pki.goog/we1/R7LgAnKD4Lk.crl0
Source: msedgewebview2.exe, 0000000A.00000003.1802968365.00006A38009F0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1806282614.0000234800B30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1804365279.0000234800B28000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://challenges.cloudflar.com/turnstile/v0/~nNEv~cLt~dFDjq~NAIph~ppgxp~ntrd~QtkSf~IdlHB~dSXgi~AjJb
Source: msedgewebview2.exe, 00000002.00000003.1872488758.00007C4400C94000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://chat.openai.com/
Source: msedgewebview2.exe, 00000008.00000002.1772684218.00001AFC0028C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1737228239.00001AFC006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1736408915.00001AFC006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1736408915.00001AFC00694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786252225.00004B500028C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743563487.00004B50006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743784283.00004B50006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743513119.00004B5000694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767877771.00006A38006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767712441.00006A38006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767654996.00006A3800694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776582239.00002348006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776334530.0000234800694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776334530.00002348006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000003.1821164869.0000503C006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000003.1821479664.0000503C006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1846186065.0000503C0028C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000003.1820993138.0000503C00694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1839921267.000057D4006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1839211956.000057D400694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1839411341.000057D4006AC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://crrev.com/c/2555698.
Source: msedgewebview2.exe, 00000006.00000003.1848005938.00006CAC00434000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1850962455.00006CAC00438000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://i.pki.goog/gsr1.crt0-
Source: msedgewebview2.exe, 00000006.00000003.1848005938.00006CAC00434000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1850962455.00006CAC00438000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://i.pki.goog/r4.crt0
Source: msedgewebview2.exe, 00000006.00000003.1848005938.00006CAC00434000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1850962455.00006CAC00438000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://i.pki.goog/we1.crt0A
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://issuetracker.google.com/200067929
Source: I8R24VDCOi.exe, 00000000.00000003.1704732916.0000024345D3C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1748253318.0000024343C31000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1760721524.0000216C0036C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704732916.0000024345D39000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1739085077.0000216C0036C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747831195.0000024343C20000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704655122.0000024345D3A000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704249172.0000024343C66000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704790070.0000024345D63000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704249172.0000024343C48000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1703945377.0000024343C63000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1739053435.0000216C0035C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704454549.0000024345D5F000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704849226.0000024343C3F000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1760679045.0000216C0035C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1778471419.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1767118507.00007C4402380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2012363893.00007C44012F8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772368109.00007C4402438000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775809723.00007C4402604000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://jaywcjlove.github.io/hotkeys
Source: msedgewebview2.exe, 0000000E.00000002.2036646483.000057D400E0C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://lists.w3.org/Archives/Public/public-svg-wg/2008JulSep/0347.html
Source: msedgewebview2.exe, 00000006.00000003.1848005938.00006CAC00434000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1850962455.00006CAC00438000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://o.pki.goog/s/we1/Bmk0%
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747225787.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://opensource.org/licenses/mit-license
Source: msedgewebview2.exe, 0000000E.00000002.2018239308.000057D400978000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://permanently-removed.invalid/
Source: msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://permanently-removed.invalid/https://permanently-removed.invalid/
Source: msedgewebview2.exe, 00000008.00000002.1772531187.00001AFC00248000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786051128.00004B5000248000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://permanently-removed.invalid/v1/accountcapabilities:batchGet
Source: msedgewebview2.exe, 00000008.00000002.1772531187.00001AFC00248000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786051128.00004B5000248000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://permanently-removed.invalid/v1/accountcapabilities:batchGethttps://permanently-removed.invali
Source: msedgewebview2.exe, 0000000E.00000003.1869073304.000057D40078C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.fpdf.org/en/script/script37.php
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.myersdaily.org/joseph/javascript/md5.js
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.phpied.com/rgb-color-parser-in-javascript/
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2058242805.00007C44015B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2060887372.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.yworks.com
Source: msedgewebview2.exe, 0000000E.00000003.1871028901.000057D400AFC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1871754042.000057D400B28000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1871297301.000057D400B08000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://wwww3.org/2000/svg~jExMT~YiJe~Xcamz~tXayg~requesturnstileResults~
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/4830
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/4966
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/5845
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/6574
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7161
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7162
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7246
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7308
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731618986.000073FC00164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7319
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7320
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7369
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731658560.000073FC00184000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731642896.000073FC00178000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7382
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7489
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7604
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7714
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7847
Source: msedgewebview2.exe, 00000002.00000003.1737759021.00007C4400F1C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1735981689.00007C4400DC4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731754935.000073FC001A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://anglebug.com/7899
Source: msedgewebview2.exe, 00000009.00000003.1759030203.00004B5000E7C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1869374465.000057D400D4C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/pdfobject/2.1.1/pdfobject.min.js
Source: msedgewebview2.exe, 0000000B.00000003.1994646124.0000234801A6C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chalenges.cloudflare.com/tunstile/v0/~BhMzQ~charAtgqWdW0~auIQt~jkaZY~KWFj~cRay~zkJjx~flex~JC
Source: msedgewebview2.exe, 0000000B.00000003.2060634859.00002348010D4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges-staging.cloudflare.com
Source: msedgewebview2.exe, 0000000A.00000003.2016079331.00006A38010BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2016769558.00006A38010C4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges-stging.cloudflare.com
Source: msedgewebview2.exe, 00000006.00000003.2009457662.00006CAC00460000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1847937240.00006CAC00460000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudfl
Source: msedgewebview2.exe, 0000000E.00000002.1993293333.000057D400238000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com
Source: msedgewebview2.exe, 0000000E.00000002.2002905272.000057D40065C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/
Source: msedgewebview2.exe, 0000000E.00000002.1959660669.0000016D1ADE7000.00000004.10000000.00040000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/574d0e21-42e1-473e-9075-8701e4d77dbe
Source: msedgewebview2.exe, 0000000E.00000002.2005792754.000057D400718000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/ad748dc4-a1bc-4bb8-843c-7d558ae2b953
Source: msedgewebview2.exe, 0000000E.00000002.1993293333.000057D400238000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
Source: msedgewebview2.exe, 0000000E.00000002.2005792754.000057D400718000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1a
Source: msedgewebview2.exe, 00000006.00000003.2008782160.00006CAC00124000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1895393915.00006CAC00124000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.2008143550.00006CAC00124000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2006382579.000057D40074C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1937375013.000057D401F55000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2053790954.000057D401FEC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1959660669.0000016D1ADE7000.00000004.10000000.00040000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1449939122:1729702709:uPA6
Source: msedgewebview2.exe, 0000000E.00000002.1999483596.000057D4002DC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?
Source: msedgewebview2.exe, 0000000E.00000002.1999483596.000057D4002DC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ay=8d79e2982
Source: msedgewebview2.exe, 0000000E.00000002.1999483596.000057D4002DC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8d79
Source: msedgewebview2.exe, 0000000E.00000002.1999483596.000057D4002DC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8d792982
Source: msedgewebview2.exe, 0000000E.00000002.1959660669.0000016D1ADE7000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1877913111.000057D400B28000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8d79e298
Source: msedgewebview2.exe, 0000000E.00000002.1959660669.0000016D1ADE7000.00000004.10000000.00040000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8d79e2a7
Source: msedgewebview2.exe, 0000000E.00000002.2044241908.000057D401E52000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1959660669.0000016D1ADE7000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1993293333.000057D400238000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1998160424.000057D40028C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/71fm5/0
Source: msedgewebview2.exe, 0000000E.00000002.1998160424.000057D40028C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/t722o/0
Source: msedgewebview2.exe, 00000002.00000003.2035491750.00007C4400FAC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/tdjl9/0
Source: msedgewebview2.exe, 0000000E.00000002.1976124638.0000017600802000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/g/f2bbd6738e15/api.js?onload=fSZI2&render=explicit
Source: msedgewebview2.exe, 0000000A.00000003.2006946826.0000036E000C2000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/g/f2bbd6738e15/api.js?onload=fSZI2&render=explicit5
Source: msedgewebview2.exe, 00000002.00000003.2010755038.00007C4402A64000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2007919575.00007C4402A44000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2010425017.00007C4402A74000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2010596739.00007C44013CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2008280451.00007C44012DC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2009263855.00007C4402A34000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2010049191.00006A38013EC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2010211364.00006A3800E68000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2009035456.00006A38008D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2009610159.00006A380141C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2010428156.00006A380129C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1987505274.0000234800A9C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1987074436.0000234801AF8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1987179056.0000234801AE8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1986865251.000023480086C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1987412262.0000234801478000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.2060634859.00002348010D4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/g/f2bbd6738e15/api.js?onload=fSZI2&render=explicitaDb
Source: msedgewebview2.exe, 0000000B.00000003.1845928593.00002348010E8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/~nNEvE~cLt~dFDjq~NAIph~ppgxp~Hntrd~QtkSf~IdlHB~dSXgi~
Source: msedgewebview2.exe, 0000000E.00000002.1976124638.0000017600282000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.com5EF8AE74674958E1E29E59F8762B744C
Source: msedgewebview2.exe, 0000000E.00000002.1973884400.00000176001C2000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.comA872D276C863E280F343B2B82F337928
Source: msedgewebview2.exe, 0000000E.00000002.2002905272.000057D40065C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.comA872D276C863E280F343B2B82F337928a)
Source: msedgewebview2.exe, 0000000E.00000002.2047730627.000057D401F14000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflare.comdlerukm.mojom.UkmRecorderInterface
Source: msedgewebview2.exe, 00000006.00000003.2009457662.00006CAC00460000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1847937240.00006CAC00460000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://challenges.cloudflre.com/
Source: I8R24VDCOi.exe, 00000000.00000003.1748253318.0000024343C31000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1706344899.0000024343CA5000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704691262.0000024343C5A000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1748549375.0000024343CA2000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1706104098.0000024343C8C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747831195.0000024343C20000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747791460.0000024343C90000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1748699375.0000024343C38000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://chat.openai.com
Source: I8R24VDCOi.exe, 00000000.00000003.1704691262.0000024343C5A000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749153857.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1803204721.00007C440242C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772623177.00007C440242C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772597009.00007C44005B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1829959849.00007C4400FAC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1803172044.00007C44005B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1872488758.00007C4400C94000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1803899706.00007C4400F70000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1871213536.00007C4400FAC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1856439662.00007C4400FAC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1789640257.00006CAC0011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1780369782.00006A380082C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1989905166.00002348003B4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chat.openai.com/
Source: I8R24VDCOi.exe, 00000000.00000003.1748253318.0000024343C59000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://chat.openai.com/4
Source: I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://chat.openai.com/Ctrl
Source: msedgewebview2.exe, 00000002.00000003.1872488758.00007C4400C94000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chat.openai.com/Just
Source: msedgewebview2.exe, 00000002.00000003.1872488758.00007C4400C94000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chat.openai.com/R
Source: I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749153857.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://chat.openai.com/a
Source: msedgewebview2.exe, 00000002.00000003.1829850323.00007C4400294000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2009695159.00007C4400297000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1829645081.00007C440060C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1986083817.00007C4400297000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2009695159.00007C4400294000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2045080087.00007C440060C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1829850323.00007C4400297000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1986083817.00007C4400294000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1829645081.00007C440060F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.2008782160.00006CAC00120000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1813818090.00006CAC001AB000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1848005938.00006CAC00434000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.2009457662.00006CAC00460000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1820612855.00006CAC00460000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1848166981.00006CAC00424000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1813941609.00006CAC0042C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1819137114.00006CAC0041C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1848102403.00006CAC00428000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.2052244026.00006CAC0042C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1814053490.00006CAC00124000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1847937240.00006CAC00460000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com
Source: msedgewebview2.exe, 0000000E.00000002.1959660669.0000016D1ADE7000.00000004.10000000.00040000.00000000.sdmp String found in binary or memory: https://chatgpt.com/
Source: msedgewebview2.exe, 00000002.00000003.2010213550.00007C44013F0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2081278119.00006A38010A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2003062297.00006A38013A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2072657471.00006A38010A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2059503225.00006A38010A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2066320612.00006A38010A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.2021151842.00002348012E8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1967219071.0000234800CE4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1975389350.0000234801A2C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1973422712.0000234801222000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com/(
Source: msedgewebview2.exe, 0000000A.00000003.2057723069.00006A3800B02000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com/63ebe155-3532-44fd-be66-a30d2958c46f
Source: msedgewebview2.exe, 0000000B.00000003.1946035046.000002E600B42000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com/6cd9228f-9052-4c37-96fa-fcbdab4bfb6d
Source: msedgewebview2.exe, 0000000A.00000003.2017318459.00006A3800B04000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com/?__cf_chl_rt_tk=8w9J9mNtfC6DhGfX8eRBt9XolDvbcfnCdeO8A7tCHUA-1729772067-1.0.1.1-M
Source: msedgewebview2.exe, 00000002.00000003.1872488758.00007C4400C94000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com/?__cf_chl_rt_tk=OMNPTxa5dcbdWDC5zF10_TTA4FAlFeYFzZm.zKDL9MY-1729772045-1.0.1.1-o
Source: msedgewebview2.exe, 00000002.00000003.1872488758.00007C4400C94000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com/?__cf_chl_rt_tk=OWlVE8SPcNBU.4PYac3.CvmFdPDNrnMWud3IPRv2r_k-1729772045-1.0.1.1-F
Source: msedgewebview2.exe, 00000002.00000003.1872488758.00007C4400C94000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com/Just
Source: msedgewebview2.exe, 0000000B.00000003.1989905166.00002348003B4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com/Report-To:
Source: msedgewebview2.exe, 00000002.00000003.1829850323.00007C4400294000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1829645081.00007C440060C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1986083817.00007C4400297000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1829850323.00007C4400297000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1986083817.00007C4400294000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1828799314.00007C4402538000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1829645081.00007C440060F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1813818090.00006CAC001AB000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1848005938.00006CAC00434000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1820612855.00006CAC00460000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1848166981.00006CAC00424000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1813941609.00006CAC0042C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1848102403.00006CAC00428000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1814053490.00006CAC00124000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1847937240.00006CAC00460000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.2035401877.00006CAC00378000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.2008782160.00006CAC00124000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1895393915.00006CAC00124000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.1813818090.00006CAC001A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000006.00000003.2008143550.00006CAC00124000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1835861336.00006A3800F5F000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1625211542:1729702664:ZO1Pl1MsCdl5JCd-iT
Source: msedgewebview2.exe, 0000000A.00000003.2052235382.00006A3800ADE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com/cdn-cgi/challenge-platform/h/g/flow/ov1/292910351:1729702615:K3nzjQK0cRG2v-41
Source: msedgewebview2.exe, 0000000A.00000003.2017318459.00006A3800B04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2066320612.00006A38010A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.2038808362.0000234800CA4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.2083275643.0000234800CA4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.2009808433.0000234800CD6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.2076671172.0000234801548000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.2016289815.0000234801338000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com/cdn-cgi/challenge-platform/h/g/flow/ov1/292910351:1729702615:K3nzjQK0cRG2v-46QDc
Source: msedgewebview2.exe, 0000000A.00000003.2070386278.00006A38010F4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8d79e300ee17ddae
Source: msedgewebview2.exe, 0000000A.00000003.2017318459.00006A3800B04000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com/e3c6b8ce-fd30-4198-a0b2-c7dd34aa8257
Source: msedgewebview2.exe, 00000002.00000003.1856678237.00007C440264C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1830577977.00007C440255C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1842037284.00007C440255C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2007580090.00007C440255C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1871213536.00007C4400FAC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1805684165.0000234800AB6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com/favicon.ico
Source: msedgewebview2.exe, 0000000B.00000003.1805684165.0000234800AB6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com/favicon.icohttps://chatgpt.com/favicon.ico8(
Source: msedgewebview2.exe, 0000000A.00000003.2006946826.0000036E000C2000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chatgpt.com5
Source: msedgewebview2.exe, 0000000E.00000002.1994781361.000057D400264000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chrome.google.com/webstore
Source: msedgewebview2.exe, 00000009.00000002.1786141195.00004B5000264000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chrome.google.com/webstoreP
Source: msedgewebview2.exe, 00000008.00000002.1772571547.00001AFC00264000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chrome.google.com/webstorePI8
Source: msedgewebview2.exe, 00000008.00000002.1772571547.00001AFC00264000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786141195.00004B5000264000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1845958344.0000503C00264000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1994781361.000057D400264000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chromewebstore.google.com/
Source: msedgewebview2.exe, 00000008.00000002.1772571547.00001AFC00264000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786141195.00004B5000264000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1845958344.0000503C00264000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1994781361.000057D400264000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://chromewebstore.google.com/6EAED1924DB611B6EEF2A664BD077BE7EAD33B8F4EB74897CB187C7633357C2FE8
Source: msedgewebview2.exe, 00000008.00000002.1772769738.00001AFC002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786405657.00004B50002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1846280085.0000503C002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1998846771.000057D4002A8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-supportCalling
Source: msedgewebview2.exe, 0000000B.00000003.1945543839.000002E600702000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://docs.rs/tauri/1/tauri/scope/struct.IpcScope.html#method.configure_remote_access
Source: I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp String found in binary or memory: https://docs.rs/tauri/1/tauri/scope/struct.IpcScope.html#method.configure_remote_accessO
Source: msedgewebview2.exe, 0000000A.00000003.1802968365.00006A38009F0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://docs.rs/tauri/1/tauri/scope/struct.IpcScope.html#method.configure_remote_accessj8
Source: msedgewebview2.exe, 0000000E.00000002.2036646483.000057D400E0C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://drafts.csswg.org/css-color-adjust-1/#forced-colors-properties
Source: msedgewebview2.exe, 0000000C.00000002.1849691539.0000503C00883000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://easyauth.edgebrowser.microsoft-falcon.io/
Source: msedgewebview2.exe, 0000000C.00000002.1849691539.0000503C00883000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://easyauth.edgebrowser.microsoft-staging-falcon.io/
Source: msedgewebview2.exe, 0000000C.00000002.1849691539.0000503C00883000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://easyauth.edgebrowser.microsoft-testing-falcon.io/
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/Flamenco
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/Gavvers
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1862949768.00007C4401674000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/HackbrettXXX
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2058242805.00007C44015B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2060887372.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/MrRio/jsPDF
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747225787.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2019066149.00007C4400804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017826494.00007C4401C6C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/Pantura
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1862949768.00007C4401674000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/acspike
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/chris-rock
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747225787.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2019066149.00007C4400804000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/deanm/omggif
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/diegocr
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/dollaruw
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/fjenett
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/foliojs/pdfkit/blob/master/lib/security.js
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2019066149.00007C4400804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017826494.00007C4401C6C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/jamesbrobb
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/jmorel
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/juanpgaviria
Source: msedgewebview2.exe, 00000009.00000002.1787584538.00004B5000614000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/
Source: I8R24VDCOi.exe, 00000000.00000003.1747831195.0000024343C6E000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1748253318.0000024343C31000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747831195.0000024343C20000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1748699375.0000024343C38000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1778471419.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1767118507.00007C4402380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772368109.00007C4402438000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775809723.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772495053.00007C440240C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773662339.00007C44024B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772661503.00007C4400EF0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1767070645.00007C4402368000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772799612.00007C4400804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775639917.00007C4402804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1768524684.00007C4402398000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775988532.00007C4400804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.1779275334.00001AFC0099C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790448604.00004B50009A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1781299183.00000201851C7000.00000004.10000000.00040000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT
Source: I8R24VDCOi.exe, 00000000.00000003.1760394206.0000216C0035C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704691262.0000024343C5A000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1760422029.0000216C0036C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1706104098.0000024343C8C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747831195.0000024343C20000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1703872872.0000024343C19000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1778471419.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2012156883.00007C4400690000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775809723.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773615460.00007C4402368000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773662339.00007C44024B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760947268.00007C4400DB8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773662339.00007C44024A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1858390761.00007C4402308000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772799612.00007C4400804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1857564572.00007C44022E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760841396.00007C4400690000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1831240400.00007C4402308000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1973408230.00007C44022E4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/issues/185
Source: I8R24VDCOi.exe, 00000000.00000003.1760485089.0000216C0034C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1748594287.0000024343C78000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704691262.0000024343C5A000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1738809816.0000216C00354000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1738750299.0000216C0034C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1706104098.0000024343C8C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1760514898.0000216C00324000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747831195.0000024343C20000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1748253318.0000024343C77000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1703872872.0000024343C19000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1760542910.0000216C00354000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1739230784.00007C440060C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1778471419.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1856584132.00007C440060C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772368109.00007C4402438000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775809723.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773615460.00007C4402368000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2062978726.00007C4400FEC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772495053.00007C440240C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/issues/54
Source: I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749153857.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/release
Source: I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749153857.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/releases/download/v1.1.
Source: I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749153857.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/releases/download/v1.1.0/ChatGPT_1.1.0_
Source: I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749153857.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/releases/download/v1.1.0/ChatGPT_1.1.0_Q
Source: I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749153857.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/releases/download/v1.1.0/ChatGPT_1.1.0_linux_x86_64.App
Source: I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345DB8000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345DB0000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/releases/download/v1.1.0/ChatGPT_1.1.0_linux_x86_64.AppImage.tar.gz
Source: I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749153857.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/releases/download/v1.1.0/ChatGPT_1.1.0_macos_aarch64.app.tar.gzn
Source: I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749153857.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/releases/download/v1.1.0/ChatGPT_1.1.0_macos_aarch64.app.tar.gznC
Source: I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345DB8000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345DB0000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749153857.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/releases/download/v1.1.0/ChatGPT_1.1.0_macos_x86_64.app.tar.gz
Source: I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345DB8000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345DB0000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749153857.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/releases/download/v1.1.0/ChatGPT_1.1.0_windows_x86_64.msi.zip
Source: I8R24VDCOi.exe, 00000000.00000003.1755849373.0000024345D44000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747225787.0000024345D44000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/releases/download/v1.1.0/ChatGPT_1.1.0_windows_x86_64.msi.ziphHZUNL
Source: I8R24VDCOi.exe, 00000000.00000003.1749153857.0000024345D8E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/releases/download/v1.1.0/ChatGPT_1.1.0_windows_x86_64.msi.zipz
Source: I8R24VDCOi.exe, 00000000.00000003.1747544593.0000024345DB4000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1703872872.0000024343C19000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/tree/main/scripts
Source: I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/tree/main/scripts)
Source: I8R24VDCOi.exe, 00000000.00000003.1704691262.0000024343C5A000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1706104098.0000024343C8C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1738838959.0000216C0033C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1760572172.0000216C0033C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747791460.0000024343C90000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1703872872.0000024343C19000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1778471419.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772368109.00007C4402438000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1985952360.00007C4402314000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775809723.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1831398753.00007C4402314000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772495053.00007C440240C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773662339.00007C44024B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773662339.00007C44024A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772661503.00007C4400EF0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772799612.00007C4400804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775639917.00007C4402804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1768524684.00007C4402398000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1761151099.00007C4402314000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/tree/main/scripts/chat.js
Source: I8R24VDCOi.exe, 00000000.00000003.1760485089.0000216C0034C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1748594287.0000024343C78000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704691262.0000024343C5A000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1738809816.0000216C00354000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1738750299.0000216C0034C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1706104098.0000024343C8C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1760514898.0000216C00324000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1748253318.0000024343C77000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747791460.0000024343C90000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1703872872.0000024343C19000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1760542910.0000216C00354000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1739230784.00007C440060C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1778471419.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1856584132.00007C440060C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772368109.00007C4402438000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775809723.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773615460.00007C4402368000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2062978726.00007C4400FEC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772495053.00007C440240C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/tree/main/scripts/cmd.js
Source: I8R24VDCOi.exe, 00000000.00000003.1747831195.0000024343C55000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1738636921.0000216C00320000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1746309694.0000216C00318000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1746358511.0000216C00320000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1746281921.0000216C0030C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1748594287.0000024343C88000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1748253318.0000024343C4E000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1738586299.0000216C00318000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704849226.0000024343C4E000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1748253318.0000024343C59000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749249393.0000024343C8A000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1778471419.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1932762189.00007C44028CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1767118507.00007C4402380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2011260687.00007C44013C4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772368109.00007C4402438000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772661503.00007C4400F10000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775809723.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772495053.00007C440240C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/tree/main/scripts/core.js
Source: I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1703872872.0000024343C19000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/tree/main/scripts/dalle2.js
Source: I8R24VDCOi.exe, 00000000.00000003.1760394206.0000216C0035C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704691262.0000024343C5A000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1760422029.0000216C0036C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1706104098.0000024343C8C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747831195.0000024343C20000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1703872872.0000024343C19000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1778471419.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2012156883.00007C4400690000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775809723.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773615460.00007C4402368000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773662339.00007C44024B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760947268.00007C4400DB8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773662339.00007C44024A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1858390761.00007C4402308000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772799612.00007C4400804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1857564572.00007C44022E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760841396.00007C4400690000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1831240400.00007C4402308000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1973408230.00007C44022E4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/tree/main/scripts/export.js
Source: I8R24VDCOi.exe, 00000000.00000003.1704691262.0000024343C5A000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1760456045.0000216C0038C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1706104098.0000024343C8C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1755999446.0000024345C98000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1703872872.0000024343C19000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1778471419.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1857849003.00007C44025CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775809723.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773615460.00007C4402368000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773662339.00007C44024B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773662339.00007C44024A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772799612.00007C4400804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775639917.00007C4402804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775988532.00007C4400804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2007580090.00007C440255C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1772743955.00004B5000730000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786211309.00004B5000284000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776000485.0000234800804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1777215891.0000234800A04000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/tree/main/scripts/markdown.export.js
Source: I8R24VDCOi.exe, 00000000.00000003.1748253318.0000024343C31000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1739027148.0000216C00320000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747831195.0000024343C20000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1748699375.0000024343C38000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1703872872.0000024343C19000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1778471419.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772368109.00007C4402438000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775809723.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773615460.00007C4402368000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772495053.00007C440240C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773662339.00007C44024B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773662339.00007C44024A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772661503.00007C4400EF0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772799612.00007C4400804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1740195097.00007C440102C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1858250598.00007C44026B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775639917.00007C4402804000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/tree/main/scripts/popup.core.js
Source: I8R24VDCOi.exe, 00000000.00000003.1747831195.0000024343C20000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/lencx/ChatGPT/tree/main/scripts/popup.core.jsH
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/lifof
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/lsdriscoll
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1862949768.00007C4401674000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/pablohess
Source: I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp String found in binary or memory: https://github.com/rust-windowing/tao
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/stefslon
Source: I8R24VDCOi.exe, 00000000.00000003.1748253318.0000024343C31000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1760721524.0000216C0036C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704454549.0000024345D59000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1739085077.0000216C0036C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704249172.0000024343C50000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747831195.0000024343C20000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704249172.0000024343C66000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704790070.0000024345D63000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1703945377.0000024343C5D000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704083076.0000024343C4D000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1703945377.0000024343C63000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1739053435.0000216C0035C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704612509.0000024345D3E000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704454549.0000024345D5F000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704849226.0000024343C3F000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1703945377.0000024343C57000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1760679045.0000216C0035C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704454549.0000024345D51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1778471419.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1767118507.00007C4402380000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/tauri-apps/tauri/issues/2549#issuecomment-1250036908
Source: msedgewebview2.exe, 00000008.00000003.1737898546.00001AFC003BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1737228239.00001AFC006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1736505514.00001AFC006A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1736408915.00001AFC006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1736408915.00001AFC00694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1745426723.00004B50003AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743563487.00004B50006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743784283.00004B50006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743513119.00004B5000694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743563487.00004B50006A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767877771.00006A38006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767712441.00006A38006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767654996.00006A3800694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767712441.00006A38006A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1768357109.00006A380085C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776582239.00002348006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1777604272.00002348003E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776406346.00002348006A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776334530.0000234800694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776334530.00002348006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000003.1821164869.0000503C006AC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/6939#issuecomment-1016679588
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/warrenweckesser
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1862949768.00007C4401674000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://github.com/willowsystems
Source: msedgewebview2.exe, 0000000B.00000003.2010752345.0000234800B74000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1992968659.0000234800B74000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hallenges-staging.cloudlare.com
Source: I8R24VDCOi.exe, 00000000.00000003.1748940948.0000024345DD2000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1746907874.0000216C00754000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704691262.0000024343C5A000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1746817404.0000216C0071C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1746990445.0000216C006E4000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749276207.0000024345CA3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747140767.0000216C0078C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747183905.0000216C006AC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1746723391.0000216C006AC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1746990445.0000216C0071C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1778471419.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2056734488.00007C4401584000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2020816491.00007C440174C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2014918827.00007C44014E8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1979034007.00007C440160C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1748488835.00007C440144C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://hertzen.com
Source: msedgewebview2.exe, 00000008.00000003.1737898546.00001AFC003BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1737228239.00001AFC006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1736505514.00001AFC006A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1736408915.00001AFC006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1736408915.00001AFC00694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1745426723.00004B50003AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743563487.00004B50006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743784283.00004B50006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743513119.00004B5000694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743563487.00004B50006A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767877771.00006A38006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767712441.00006A38006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767654996.00006A3800694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767712441.00006A38006A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1768357109.00006A380085C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776582239.00002348006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1777604272.00002348003E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776406346.00002348006A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776334530.0000234800694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776334530.00002348006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000003.1821164869.0000503C006AC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://html.spec.whatwg.org/C/#the-details-and-summary-elements
Source: msedgewebview2.exe, 00000008.00000003.1737898546.00001AFC003BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1737228239.00001AFC006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1736505514.00001AFC006A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1736408915.00001AFC006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1736408915.00001AFC00694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1745426723.00004B50003AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743563487.00004B50006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743784283.00004B50006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743513119.00004B5000694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743563487.00004B50006A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767877771.00006A38006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767712441.00006A38006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767654996.00006A3800694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767712441.00006A38006A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1768357109.00006A380085C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776582239.00002348006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1777604272.00002348003E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776406346.00002348006A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776334530.0000234800694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776334530.00002348006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000003.1821164869.0000503C006AC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://html.spec.whatwg.org/multipage/rendering.html#flow-content-3
Source: msedgewebview2.exe, 00000008.00000003.1737898546.00001AFC003BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1737228239.00001AFC006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1736505514.00001AFC006A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1736408915.00001AFC006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1736408915.00001AFC00694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1745426723.00004B50003AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743563487.00004B50006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743784283.00004B50006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743513119.00004B5000694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1743563487.00004B50006A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767877771.00006A38006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767712441.00006A38006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767654996.00006A3800694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1767712441.00006A38006A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1768357109.00006A380085C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776582239.00002348006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1777604272.00002348003E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776406346.00002348006A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776334530.0000234800694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1776334530.00002348006AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000003.1821164869.0000503C006AC000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://html.spec.whatwg.org/multipage/rendering.html#hidden-elements
Source: I8R24VDCOi.exe, 00000000.00000003.1748940948.0000024345DD2000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1746907874.0000216C00754000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704691262.0000024343C5A000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1746817404.0000216C0071C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1746990445.0000216C006E4000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749276207.0000024345CA3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747140767.0000216C0078C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747183905.0000216C006AC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1746723391.0000216C006AC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1746990445.0000216C0071C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1778471419.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2056734488.00007C4401584000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2020816491.00007C440174C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2014918827.00007C44014E8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1979034007.00007C440160C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1748488835.00007C440144C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://html2canvas.hertzen.com
Source: msedgewebview2.exe, 00000008.00000002.1772769738.00001AFC002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.1776199283.00001AFC008BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1789376629.00004B50008BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786405657.00004B50002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1846280085.0000503C002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1849963028.0000503C0089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1998846771.000057D4002A8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://int.msn.cn/
Source: msedgewebview2.exe, 00000008.00000002.1772769738.00001AFC002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.1776199283.00001AFC008BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1789376629.00004B50008BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786405657.00004B50002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1846280085.0000503C002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1849963028.0000503C0089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1998846771.000057D4002A8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://int.msn.com/
Source: msedgewebview2.exe, 00000008.00000002.1772769738.00001AFC002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.1776199283.00001AFC008BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1789376629.00004B50008BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786405657.00004B50002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1846280085.0000503C002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1849963028.0000503C0089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1998846771.000057D4002A8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://int1.msn.cn/
Source: msedgewebview2.exe, 00000008.00000002.1772769738.00001AFC002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.1776199283.00001AFC008BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1789376629.00004B50008BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786405657.00004B50002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1846280085.0000503C002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1849963028.0000503C0089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1998846771.000057D4002A8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://int1.msn.com/
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/161903006
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/166809097
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/184850002
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/187425444
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/220069903
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/229267970
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/250706693
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/253522366
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/255411748
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/258207403
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/274859104
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/284462263
Source: msedgewebview2.exe, 00000005.00000003.1731701830.000073FC001B8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://issuetracker.google.com/issues/166475273
Source: I8R24VDCOi.exe, 00000000.00000003.1760394206.0000216C0035C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704691262.0000024343C5A000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1760422029.0000216C0036C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1706104098.0000024343C8C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747831195.0000024343C20000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1703872872.0000024343C19000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1778471419.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2012156883.00007C4400690000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1775809723.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773615460.00007C4402368000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773662339.00007C44024B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760947268.00007C4400DB8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1773662339.00007C44024A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1858390761.00007C4402308000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772799612.00007C4400804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1857564572.00007C44022E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760841396.00007C4400690000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1831240400.00007C4402308000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1973408230.00007C44022E4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://jsfiddle.net/xtraeme/x34ao9jp/13/
Source: I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp String found in binary or memory: https://labs.openai.com
Source: msedgewebview2.exe, 0000000E.00000003.1861652465.000057D4008B4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://localhost.msn.com/
Source: msedgewebview2.exe, 00000002.00000003.1775142876.000002210F4D2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://login.windows.local
Source: msedgewebview2.exe, 00000002.00000003.1775142876.000002210F4D2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://login.windows.local/
Source: msedgewebview2.exe, 0000000E.00000003.1861652465.000057D4008B4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://microsoftstart.msn.cn/
Source: msedgewebview2.exe, 0000000E.00000002.2000885647.000057D400373000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://microsoftstart.msn.com/
Source: msedgewebview2.exe, 0000000E.00000002.1976124638.0000017600442000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1971793494.0000017600082000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://no-reply.private-token.research.cloudflare.com/requestID/
Source: msedgewebview2.exe, 00000008.00000002.1772769738.00001AFC002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.1776199283.00001AFC008BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1789376629.00004B50008BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786405657.00004B50002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1846280085.0000503C002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1849963028.0000503C0089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1998846771.000057D4002A8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://ntp.msn.cn/
Source: msedgewebview2.exe, 00000008.00000002.1772769738.00001AFC002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.1776199283.00001AFC008BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1789376629.00004B50008BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786405657.00004B50002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1846280085.0000503C002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1849963028.0000503C0089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1998846771.000057D4002A8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://ntp.msn.com/
Source: msedgewebview2.exe, 0000000E.00000003.1861652465.000057D4008B4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://ntp.www.office.com/
Source: msedgewebview2.exe, 00000008.00000002.1772769738.00001AFC002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786405657.00004B50002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1846280085.0000503C002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1998846771.000057D4002A8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://outlook.com/
Source: msedgewebview2.exe, 00000008.00000003.1738274183.00001AFC008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.1776074254.00001AFC008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1745832104.00004B50008A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1789311413.00004B50008A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1749232523.00004B5000894000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1756381853.00004B5000894000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1813938602.00006A38008E0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1837131216.00006A38008E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2009035456.00006A38008E0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1981353171.00006A38008E2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2063156873.00006A38008E0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1814531275.00006A38008E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1805525574.00006A38008DF000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1937629185.00006A38008E2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1794897204.00006A38008E0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1804650926.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1853726164.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1974438974.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1839196830.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.2016004232.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1952666333.000023480087B000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://outlook.live.com/
Source: msedgewebview2.exe, 00000008.00000002.1779173482.00001AFC00980000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2018239308.000057D400978000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/
Source: msedgewebview2.exe, 00000008.00000002.1779438930.00001AFC009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1871028901.000057D400AFC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2026560348.000057D400B00000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/AddSession
Source: msedgewebview2.exe, 00000008.00000002.1772531187.00001AFC00248000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786051128.00004B5000248000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/GetCheckConnectionInfo
Source: msedgewebview2.exe, 00000008.00000002.1772531187.00001AFC00248000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786051128.00004B5000248000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/ListAccounts?json=standard
Source: msedgewebview2.exe, 00000008.00000002.1779173482.00001AFC00980000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1871028901.000057D400AFC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2026560348.000057D400B00000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/Logout
Source: msedgewebview2.exe, 00000008.00000002.1779438930.00001AFC009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1871028901.000057D400AFC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2026560348.000057D400B00000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/MergeSession
Source: msedgewebview2.exe, 00000008.00000002.1779438930.00001AFC009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1871028901.000057D400AFC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2026560348.000057D400B00000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/OAuthLogin
Source: msedgewebview2.exe, 00000008.00000002.1779438930.00001AFC009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1871028901.000057D400AFC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2026560348.000057D400B00000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/RotateBoundCookies
Source: msedgewebview2.exe, 00000008.00000002.1779173482.00001AFC00980000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1871028901.000057D400AFC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2026560348.000057D400B00000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/chrome/blank.html
Source: msedgewebview2.exe, 00000008.00000002.1779173482.00001AFC00980000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/chrome/blank.htmlhttps://permanently-removed.invalid/LogoutYxABs
Source: msedgewebview2.exe, 00000008.00000002.1772531187.00001AFC00248000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786051128.00004B5000248000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/embedded/reauth/chromeos
Source: msedgewebview2.exe, 00000008.00000002.1772531187.00001AFC00248000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786051128.00004B5000248000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/embedded/setup/chrome/usermenu
Source: msedgewebview2.exe, 00000008.00000002.1772531187.00001AFC00248000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786051128.00004B5000248000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/embedded/setup/kidsignin/chromeos
Source: msedgewebview2.exe, 00000008.00000002.1772531187.00001AFC00248000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786051128.00004B5000248000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/embedded/setup/kidsignup/chromeos
Source: msedgewebview2.exe, 00000008.00000002.1772531187.00001AFC00248000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786051128.00004B5000248000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/embedded/setup/v2/chromeos
Source: msedgewebview2.exe, 00000008.00000002.1772531187.00001AFC00248000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786051128.00004B5000248000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/embedded/setup/windows
Source: msedgewebview2.exe, 00000008.00000002.1772531187.00001AFC00248000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786051128.00004B5000248000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/embedded/xreauth/chrome
Source: msedgewebview2.exe, 00000008.00000002.1772531187.00001AFC00248000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/embedded/xreauth/chromehttps://permanently-removed.invalid/embed
Source: msedgewebview2.exe, 00000008.00000002.1772531187.00001AFC00248000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786051128.00004B5000248000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/encryption/unlock/desktop
Source: msedgewebview2.exe, 00000008.00000002.1772769738.00001AFC002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786405657.00004B50002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1998846771.000057D4002A8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxAB
Source: msedgewebview2.exe, 00000009.00000002.1786405657.00004B50002A8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxABKP
Source: msedgewebview2.exe, 00000008.00000002.1779173482.00001AFC00980000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/https://permanently-removed.invalid/
Source: msedgewebview2.exe, 00000008.00000002.1779173482.00001AFC00980000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2018239308.000057D400978000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/https://permanently-removed.invalid/https://permanently-removed.
Source: msedgewebview2.exe, 00000008.00000002.1779438930.00001AFC009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1871028901.000057D400AFC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2026560348.000057D400B00000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/o/oauth2/revoke
Source: msedgewebview2.exe, 0000000E.00000003.1871028901.000057D400AFC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2026560348.000057D400B00000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/o/oauth2/revokehttps://permanently-removed.invalid/RotateBoundCo
Source: msedgewebview2.exe, 00000008.00000002.1779438930.00001AFC009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1871028901.000057D400AFC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2026560348.000057D400B00000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/oauth/multilogin
Source: msedgewebview2.exe, 00000008.00000002.1779438930.00001AFC009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1871028901.000057D400AFC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2026560348.000057D400B00000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/oauth2/v1/userinfo
Source: msedgewebview2.exe, 00000008.00000002.1779438930.00001AFC009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1871028901.000057D400AFC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2026560348.000057D400B00000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/oauth2/v2/tokeninfo
Source: msedgewebview2.exe, 00000008.00000002.1779438930.00001AFC009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1871028901.000057D400AFC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2026560348.000057D400B00000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/oauth2/v4/token
Source: msedgewebview2.exe, 00000008.00000002.1779438930.00001AFC009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1871028901.000057D400AFC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2026560348.000057D400B00000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/reauth/v1beta/users/
Source: msedgewebview2.exe, 00000008.00000002.1772531187.00001AFC00248000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786051128.00004B5000248000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/signin/chrome/sync?ssp=1
Source: msedgewebview2.exe, 00000008.00000002.1779438930.00001AFC009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1871028901.000057D400AFC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2026560348.000057D400B00000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/v1/issuetoken
Source: msedgewebview2.exe, 00000008.00000002.1779438930.00001AFC009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1790369256.00004B5000988000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1871028901.000057D400AFC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2026560348.000057D400B00000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://permanently-removed.invalid/v1/issuetokenhttps://permanently-removed.invalid/reauth/v1beta/u
Source: I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp String found in binary or memory: https://raw.githubusercontent.com/lencx/ChatGPT/main/scripts/
Source: msedgewebview2.exe, 0000000E.00000002.2036646483.000057D400E0C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://svgwg.org/svg2-draft/single-page.html#render-OverflowAndClipProperties
Source: I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp String found in binary or memory: https://tauri.app/docs/api/config#tauri.allowlist)
Source: msedgewebview2.exe, 0000000B.00000003.1945543839.000002E600702000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://tauri.app/v1/api/config/#securityconfig.dangerousremotedomainipcaccess
Source: I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://tauri.localhost/
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747225787.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2019066149.00007C4400804000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017826494.00007C4401C6C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://webpjs.appspot.com
Source: msedgewebview2.exe, 0000000C.00000002.1847251058.0000503C0037C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2000885647.000057D400373000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://windows.msn.cn/
Source: msedgewebview2.exe, 0000000E.00000003.1861652465.000057D4008B4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://windows.msn.com/
Source: msedgewebview2.exe, 0000000E.00000002.2008656035.000057D4007C4000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.cloudflare.com/products/turnstile/?utm_source=turnstile&utm_campaign=widget
Source: msedgewebview2.exe, 0000000E.00000003.1864531065.000057D400CA0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.cloudflare.com/products/turnstile/?utm_source=turnstile&utm_campaign=widget~chlApiLangua
Source: msedgewebview2.exe, 0000000A.00000003.2006946826.0000036E000C2000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.cloudflare.com?utm_source=challenge&utm_campaign=m
Source: msedgewebview2.exe, 0000000E.00000003.1864531065.000057D400CA0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.cloudflare.com?utm_source=challenge&utm_campaign=~ALufD~content-type~input~GxJsd~Ykxht~h
Source: msedgewebview2.exe, 0000000B.00000003.1845928593.00002348010E8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.cloudflare.com?utm_source=challenge&utm_campaign=~style~createObjectURL~FDsHE~CBqpP~UKSG
Source: msedgewebview2.exe, 0000000B.00000003.1994646124.0000234801A6C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.cludflare.com?utm_source=hallenge&utm_campaign=~uOQQ~YFsKP5~address_chaged~application/j
Source: I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345E03000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750612321.0000216C00A0C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00A6C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751293957.0000216C00B8C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749893972.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750375244.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp, I8R24VDCOi.exe, 00000000.00000003.1749737841.0000024345CAB000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747364623.0000024345DD3000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1751294262.0000024345E5C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750131532.0000216C00ACC000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1750268104.0000216C00B2C000.00000004.00000800.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1705410513.0000024345CA9000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1704997020.0000024345C51000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2017128558.00007C4401A6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.2023762949.00007C440220C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1772991172.00007C4402604000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1755740421.00007C4401E0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760089922.00007C4401CCC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1760229903.00007C44020CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000002.00000003.1863741937.00007C440200C000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.cs.cmu.edu/~dst/Adobe/Gallery/anon21jul01-pdf-encryption.txt
Source: msedgewebview2.exe, 00000008.00000003.1738274183.00001AFC008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.1776074254.00001AFC008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1745832104.00004B50008A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1789311413.00004B50008A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1749232523.00004B5000894000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1756381853.00004B5000894000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1813938602.00006A38008E0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1837131216.00006A38008E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2009035456.00006A38008E0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1981353171.00006A38008E2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2063156873.00006A38008E0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1814531275.00006A38008E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1805525574.00006A38008DF000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1937629185.00006A38008E2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1794897204.00006A38008E0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1804650926.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1853726164.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1974438974.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1839196830.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.2016004232.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1952666333.000023480087B000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.microsoftnews.cn/
Source: msedgewebview2.exe, 00000008.00000003.1738274183.00001AFC008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.1776074254.00001AFC008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1745832104.00004B50008A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1789311413.00004B50008A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1749232523.00004B5000894000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1756381853.00004B5000894000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1813938602.00006A38008E0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1837131216.00006A38008E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2009035456.00006A38008E0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1981353171.00006A38008E2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.2063156873.00006A38008E0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1814531275.00006A38008E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1805525574.00006A38008DF000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1937629185.00006A38008E2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000003.1794897204.00006A38008E0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1804650926.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1853726164.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1974438974.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1839196830.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.2016004232.000023480087C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1952666333.000023480087B000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.microsoftnews.com/
Source: msedgewebview2.exe, 00000008.00000002.1772769738.00001AFC002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786405657.00004B50002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1846280085.0000503C002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1998846771.000057D4002A8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.msn.cn/
Source: msedgewebview2.exe, 00000008.00000002.1772769738.00001AFC002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.1786405657.00004B50002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000C.00000002.1846280085.0000503C002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.1998846771.000057D4002A8000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.msn.com/
Source: msedgewebview2.exe, 0000000C.00000002.1847251058.0000503C0037C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2000885647.000057D400373000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://www.staging-bing-int.com/
Source: msedgewebview2.exe, 0000000A.00000003.1802968365.00006A38009F0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1806282614.0000234800B30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000B.00000003.1804365279.0000234800B28000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: https://wwwcloudflare.com?utm_soure=challenge&utm_campaig=~style~createObjectURLFDsHE~CBqpP~UKSGi~fS
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown HTTPS traffic detected: 185.199.109.153:443 -> 192.168.2.4:49731 version: TLS 1.2
Installs a raw input device (often for capturing keystrokes)
Source: I8R24VDCOi.exe, 00000000.00000000.1701252284.00007FF7DFFDA000.00000002.00000001.01000000.00000003.sdmp Binary or memory string: RegisterRawInputDevices memstr_5be5457f-a
Source: classification engine Classification label: clean6.winEXE@28/181@12/9
Source: C:\Users\user\Desktop\I8R24VDCOi.exe File created: C:\Users\user\.chatgpt Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Mutant created: NULL
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File created: C:\Users\user\AppData\Local\Temp\3db037e2-dc9d-40cc-ac31-4d9e85acc57a.tmp Jump to behavior
Source: I8R24VDCOi.exe Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File read: C:\Windows\System32\drivers\etc\hosts Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File read: C:\Windows\System32\drivers\etc\hosts Jump to behavior
Source: unknown Process created: C:\Users\user\Desktop\I8R24VDCOi.exe "C:\Users\user\Desktop\I8R24VDCOi.exe"
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-GB --mojo-named-platform-channel-pipe=7128.6536.1550348927669786693
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffdfb2e8e88,0x7ffdfb2e8e98,0x7ffdfb2e8ea8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1776 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=2840 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:3
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=3308 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5636010885 --mojo-platform-channel-handle=3552 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5637143084 --mojo-platform-channel-handle=4000 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5639600820 --mojo-platform-channel-handle=4116 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5640359025 --mojo-platform-channel-handle=4364 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5644726732 --mojo-platform-channel-handle=3900 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5646187664 --mojo-platform-channel-handle=3876 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5649044302 --mojo-platform-channel-handle=3892 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5663800043 --mojo-platform-channel-handle=4900 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=5208 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffdfb2e8e88,0x7ffdfb2e8e98,0x7ffdfb2e8ea8 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1776 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=2840 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:3 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=3308 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:8 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5636010885 --mojo-platform-channel-handle=3552 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5637143084 --mojo-platform-channel-handle=4000 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5639600820 --mojo-platform-channel-handle=4116 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5640359025 --mojo-platform-channel-handle=4364 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5644726732 --mojo-platform-channel-handle=3900 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5646187664 --mojo-platform-channel-handle=3876 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5649044302 --mojo-platform-channel-handle=3892 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5663800043 --mojo-platform-channel-handle=4900 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=5208 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2 Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: secur32.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: dwmapi.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: explorerframe.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: mswsock.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: rasadhlp.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: fwpuclnt.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: textshaping.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: schannel.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: dataexchange.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: d3d11.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: dcomp.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: dxgi.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: twinapi.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: edputil.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: mskeyprotect.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: ntasn1.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: ncrypt.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: ncryptsslp.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: gpapi.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: cryptnet.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: dbghelp.dll Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Section loaded: twinapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: version.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.system.profile.platformdiagnosticsandusagedatasettings.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: policymanager.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msvcp110_win.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kbdus.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.system.profile.platformdiagnosticsandusagedatasettings.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: policymanager.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msvcp110_win.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: gpapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mdmregistration.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mdmregistration.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msvcp110_win.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: omadmapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: powrprof.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dmcmnutils.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: iri.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: umpdc.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dsreg.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msvcp110_win.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: powrprof.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: umpdc.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dpapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: nlaapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dhcpcsvc6.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dhcpcsvc.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.ui.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windowmanagementapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: inputhost.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: twinapi.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: twinapi.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wtsapi32.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winsta.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mscms.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: coloradapterclient.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.security.authentication.web.core.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: onecorecommonproxystub.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: devobj.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dataexchange.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: d3d11.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dcomp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dxgi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: uiautomationcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: atlthunk.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: oleacc.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: directmanipulation.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dxgi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: resourcepolicyclient.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mf.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mfplat.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: rtworkq.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: hevcdecoder.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dolbydecmft.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mfperfhelper.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dwmapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: d3d11.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: d3d10warp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dxcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dcomp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: policymanager.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msvcp110_win.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dbghelp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dbghelp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dbghelp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dbghelp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dbghelp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: vaultcli.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: aadwamextension.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.web.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: microsoftaccountwamextension.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dbghelp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: hevcdecoder.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: tenantrestrictionsplugin.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: netprofm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: npmproxy.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msacm32.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: msdmo.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmmbase.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmmbase.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mmdevapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.system.userprofile.diagnosticssettings.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dbghelp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dwrite.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wevtapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: secur32.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dbghelp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: bitsproxy.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dhcpcsvc6.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dhcpcsvc.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: nlaapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mswsock.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: rasadhlp.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: ncrypt.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: ntasn1.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: ncryptprov.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: windows.storage.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: wldp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: profapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dxgi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: resourcepolicyclient.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: d3d11.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: d3d11.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dxcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mf.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mfplat.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: rtworkq.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: hevcdecoder.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dolbydecmft.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: mfperfhelper.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: d3d12.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: d3d12.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: d3d12core.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: d3d10warp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: dxilconv.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: d3dscache.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: userenv.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Section loaded: twinapi.appcore.dll
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}\InProcServer32 Jump to behavior
Source: I8R24VDCOi.exe Static PE information: Virtual size of .text is bigger than: 0x100000
Source: I8R24VDCOi.exe Static PE information: Image base 0x140000000 > 0x60000000
Source: I8R24VDCOi.exe Static file information: File size 10587136 > 1048576
Source: I8R24VDCOi.exe Static PE information: Raw size of .text is bigger than: 0x100000 < 0x4e3a00
Source: I8R24VDCOi.exe Static PE information: Raw size of .rdata is bigger than: 0x100000 < 0x4d9a00
Source: I8R24VDCOi.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: I8R24VDCOi.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: I8R24VDCOi.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: I8R24VDCOi.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: I8R24VDCOi.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: I8R24VDCOi.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT
Source: I8R24VDCOi.exe Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Source: I8R24VDCOi.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: I8R24VDCOi.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: I8R24VDCOi.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: I8R24VDCOi.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: I8R24VDCOi.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: I8R24VDCOi.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata
PE file contains sections with non-standard names
Source: I8R24VDCOi.exe Static PE information: section name: _RDATA
Uses code obfuscation techniques (call, push, ret)
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC3190AD9 push edx; ret 14_2_00007FFDC3190C96
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC3190AD9 push edx; ret 14_2_00007FFDC3190E25
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC3190AD9 push edx; ret 14_2_00007FFDC3190F41
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC3190AD9 push edx; ret 14_2_00007FFDC3191081
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC3190AD9 push edx; ret 14_2_00007FFDC31911B1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC3190AD9 push edx; ret 14_2_00007FFDC3191325
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC318DB12 push ecx; ret 14_2_00007FFDC318DB3F
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC318E6AC push ecx; ret 14_2_00007FFDC318E6D9
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E6D63 push edx; retf 14_2_00007FFDC31E6D64
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E3175 push esi; ret 14_2_00007FFDC31E3177
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E1BCB push esi; ret 14_2_00007FFDC31E1BCD
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E49DC push esi; ret 14_2_00007FFDC31E49DE
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E17DB push esi; ret 14_2_00007FFDC31E17DD
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E39AA push esi; ret 14_2_00007FFDC31E39AC
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E37A1 push esi; ret 14_2_00007FFDC31E37A3
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E25BC push esi; ret 14_2_00007FFDC31E25BE
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E2006 push esi; ret 14_2_00007FFDC31E2008
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E300D push esi; ret 14_2_00007FFDC31E300F
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E3610 push esi; ret 14_2_00007FFDC31E3612
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E33F4 push esi; ret 14_2_00007FFDC31E33F6
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E2A3E push esi; ret 14_2_00007FFDC31E2A40
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E7054 pushad ; iretd 14_2_00007FFDC31E7055
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E1E3A push esi; ret 14_2_00007FFDC31E1E3C
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E2C89 push esi; ret 14_2_00007FFDC31E2C8B
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E2282 push esi; ret 14_2_00007FFDC31E2284
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E247E push esi; ret 14_2_00007FFDC31E2480
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E1A8D push esi; ret 14_2_00007FFDC31E1A8F
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E567B push F6FFFFFFh; ret 14_2_00007FFDC31E5687
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E2E78 push esi; ret 14_2_00007FFDC31E2E7A
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E28D9 push esi; ret 14_2_00007FFDC31E28DB
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Code function: 14_2_00007FFDC31E3AD3 push esi; ret 14_2_00007FFDC31E3AD5
Monitors certain registry keys / values for changes (often done to protect autostart functionality)
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Registry key monitored for changes: HKEY_CURRENT_USER_Classes Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Registry key monitored for changes: HKEY_CURRENT_USER_Classes Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Registry key monitored for changes: HKEY_CURRENT_USER_Classes Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Registry key monitored for changes: HKEY_CURRENT_USER_Classes Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX
Queries keyboard layouts
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\d0010809 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File Volume queried: C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Default\Code Cache\js FullSizeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File Volume queried: C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Default\Code Cache\wasm FullSizeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File Volume queried: C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Default\blob_storage\4230c95c-a28b-487e-a436-0143a82b46ea FullSizeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File Volume queried: C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Default\Cache\Cache_Data FullSizeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File Volume queried: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47 FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File Volume queried: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47 FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File Volume queried: C:\Users\user\AppData\Local\Temp FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File Volume queried: C:\Users\user\AppData\Local\Temp FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File Volume queried: C:\Users\user FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File Volume queried: C:\Users\user FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Default\Network\fa060d0f-39c1-4b0a-b653-5e7aa71261e2.tmp Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\ Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Default\ Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\ Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Default\Network\Network Persistent State Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe File opened: C:\Users\user\ Jump to behavior
Source: I8R24VDCOi.exe, 00000000.00000003.1706104098.0000024343C8C000.00000004.00000020.00020000.00000000.sdmp, I8R24VDCOi.exe, 00000000.00000003.1747791460.0000024343C90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAWlass%SystemRoot%\system32\mswsock.dllmatch(/.*language-(\w+)/)[1];
Source: I8R24VDCOi.exe, 00000000.00000003.1706104098.0000024343C8C000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAWh
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process information queried: ProcessInformation
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Memory allocated: page read and write | page guard Jump to behavior
Creates a process in suspended mode (likely to inject code)
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffdfb2e8e88,0x7ffdfb2e8e98,0x7ffdfb2e8ea8 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1776 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=2840 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:3 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=3308 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:8 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5636010885 --mojo-platform-channel-handle=3552 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5637143084 --mojo-platform-channel-handle=4000 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5639600820 --mojo-platform-channel-handle=4116 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5640359025 --mojo-platform-channel-handle=4364 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5644726732 --mojo-platform-channel-handle=3900 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5646187664 --mojo-platform-channel-handle=3876 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5649044302 --mojo-platform-channel-handle=3892 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5663800043 --mojo-platform-channel-handle=4900 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView" --webview-exe-name=I8R24VDCOi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=5208 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI /prefetch:2 Jump to behavior
Very long cmdline option found, this is very uncommon (may be encrypted or packed)
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=mswebooui,mspdfooui,mssmartscreenprotection --enable-features=mojoipcz --lang=en-gb --mojo-named-platform-channel-pipe=7128.6536.1550348927669786693
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview\crashpad --annotation=isofficialbuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=win64 "--annotation=prod=edge webview2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffdfb2e8e88,0x7ffdfb2e8e98,0x7ffdfb2e8ea8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=waaaaaaaaadgaaamaaaaaaaaaaaaaaaaaabgaaaaaaa4aaaaaaaaaaaaaaaeaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaagaaaaaaaaaayaaaaaaaaaagaaaaaaaaacaaaaaaaaaaiaaaaaaaaaa== --mojo-platform-channel-handle=1776 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:2
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.networkservice --lang=en-gb --service-sandbox-type=none --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=2840 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:3
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.storageservice --lang=en-gb --service-sandbox-type=service --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=3308 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --first-renderer-process --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5636010885 --mojo-platform-channel-handle=3552 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5637143084 --mojo-platform-channel-handle=4000 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5639600820 --mojo-platform-channel-handle=4116 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5640359025 --mojo-platform-channel-handle=4364 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5644726732 --mojo-platform-channel-handle=3900 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5646187664 --mojo-platform-channel-handle=3876 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5649044302 --mojo-platform-channel-handle=3892 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5663800043 --mojo-platform-channel-handle=4900 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=waaaaaaaaadoaaamaaaaaaaaaaaaaaaaaabgaaaaaaa4aaaaaaaaaaaaaabeaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaagaaaaaaaaaayaaaaaaaaaagaaaaaaaaacaaaaaaaaaaiaaaaaaaaaa== --mojo-platform-channel-handle=5208 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:2
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview\crashpad --annotation=isofficialbuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=win64 "--annotation=prod=edge webview2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffdfb2e8e88,0x7ffdfb2e8e98,0x7ffdfb2e8ea8 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=waaaaaaaaadgaaamaaaaaaaaaaaaaaaaaabgaaaaaaa4aaaaaaaaaaaaaaaeaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaagaaaaaaaaaayaaaaaaaaaagaaaaaaaaacaaaaaaaaaaiaaaaaaaaaa== --mojo-platform-channel-handle=1776 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:2 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.networkservice --lang=en-gb --service-sandbox-type=none --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=2840 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:3 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.storageservice --lang=en-gb --service-sandbox-type=service --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --mojo-platform-channel-handle=3308 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:8 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --first-renderer-process --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5636010885 --mojo-platform-channel-handle=3552 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5637143084 --mojo-platform-channel-handle=4000 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5639600820 --mojo-platform-channel-handle=4116 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5640359025 --mojo-platform-channel-handle=4364 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5644726732 --mojo-platform-channel-handle=3900 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5646187664 --mojo-platform-channel-handle=3876 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5649044302 --mojo-platform-channel-handle=3892 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-nacl --disable-gpu-compositing --lang=en-gb --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_ch" --time-ticks-at-unix-epoch=-1729766404493892 --launch-time-ticks=5663800043 --mojo-platform-channel-handle=4900 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:1 Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "c:\program files (x86)\microsoft\edgewebview\application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="c:\users\user\appdata\local\com.lencx.chatgpt\ebwebview" --webview-exe-name=i8r24vdcoi.exe --webview-exe-version=1.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=waaaaaaaaadoaaamaaaaaaaaaaaaaaaaaabgaaaaaaa4aaaaaaaaaaaaaabeaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaagaaaaaaaaaayaaaaaaaaaagaaaaaaaaacaaaaaaaaaaiaaaaaaaaaa== --mojo-platform-channel-handle=5208 --field-trial-handle=1780,i,11054171514797172,5936391161486530060,262144 --enable-features=mojoipcz --disable-features=mspdfooui,mssmartscreenprotection,mswebooui /prefetch:2 Jump to behavior
Queries the volume information (name, serial number etc) of a device
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\chat.conf.json VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\chat.conf.json VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\chat.conf.json VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\chat.conf.json VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\chat.conf.json VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts\main.js VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts\core.js VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts\cmd.js VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts\chat.js VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts\popup.core.js VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts\main.js VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts\core.js VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts\popup.core.js VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts\export.js VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts\markdown.export.js VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts\cmd.js VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts\chat.js VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\AppData\Local\com.lencx.chatgpt VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts\manifest.json VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\I8R24VDCOi.exe Queries volume information: C:\Users\user\.chatgpt\scripts\manifest.json VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\Trust Protection Lists\manifest.json VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\WidevineCdm\manifest.json VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\System32\spool\drivers\color\sRGB Color Space Profile.icm VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\cour.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\cour.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\couri.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\couri.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\courbd.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\courbd.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\courbi.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\courbi.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Default\Code Cache\js\daea56c943a1bb91_0 VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\MEIPreload\preloaded_data.pb VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Default\Code Cache\js\daea56c943a1bb91_0 VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Default\Code Cache\js\daea56c943a1bb91_0 VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\l_10646.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\l_10646.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\pala.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\pala.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\palai.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\palab.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\palab.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\palabi.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\palabi.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\malgunsl.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\malgunsl.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\malgun.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\malgun.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\malgunbd.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\Fonts\malgunbd.ttf VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Queries volume information: C:\Users\user\AppData\Local\com.lencx.chatgpt\EBWebView\Default\Network\SCT Auditing Pending Reports VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1541157 Sample: I8R24VDCOi Startdate: 24/10/2024 Architecture: WINDOWS Score: 6 28 raw.githubusercontent.com 2->28 30 lencx.github.io 2->30 7 I8R24VDCOi.exe 19 2->7         started        process3 dnsIp4 32 raw.githubusercontent.com 185.199.108.133, 443, 49730 FASTLYUS Netherlands 7->32 34 lencx.github.io 185.199.109.153, 443, 49731 FASTLYUS Netherlands 7->34 10 msedgewebview2.exe 34 225 7->10         started        process5 file6 22 C:\...\the-real-index~RF570018.TMP (copy), x86 10->22 dropped 24 C:\Users\user\...\the-real-index (copy), x86 10->24 dropped 26 C:\Users\user\AppData\Local\...\temp-index, x86 10->26 dropped 13 msedgewebview2.exe 21 10->13         started        16 msedgewebview2.exe 10->16         started        18 msedgewebview2.exe 10->18         started        20 10 other processes 10->20 process7 dnsIp8 36 204.79.197.239, 443, 49829 MICROSOFT-CORP-MSN-AS-BLOCKUS United States 13->36 38 a.nel.cloudflare.com 35.190.80.1, 443, 49738, 49741 GOOGLEUS United States 13->38 40 6 other IPs or domains 13->40
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
172.64.155.209
 chatgpt.com United States
13335 CLOUDFLARENETUS false
162.159.61.3
 chrome.cloudflare-dns.com United States
13335 CLOUDFLARENETUS false
185.199.108.133
 raw.githubusercontent.com Netherlands
54113 FASTLYUS false
104.18.94.41
 unknown United States
13335 CLOUDFLARENETUS false
204.79.197.239
 unknown United States
8068 MICROSOFT-CORP-MSN-AS-BLOCKUS false
35.190.80.1
 a.nel.cloudflare.com United States
15169 GOOGLEUS false
185.199.109.153
 lencx.github.io Netherlands
54113 FASTLYUS false
104.18.95.41
 unknown United States
13335 CLOUDFLARENETUS false
172.64.41.3
 unknown United States
13335 CLOUDFLARENETUS false

Contacted Domains

Name IP Active
chatgpt.com 172.64.155.209 true
chrome.cloudflare-dns.com 162.159.61.3 true
a.nel.cloudflare.com 35.190.80.1 true
raw.githubusercontent.com 185.199.108.133 true
lencx.github.io 185.199.109.153 true
chat.openai.com unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://chatgpt.com/ false
    		unknown
    https://chatgpt.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8d79e2728ba4c86f false
      		unknown
      https://chatgpt.com/favicon.ico false
        		unknown
        https://chatgpt.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8d79e2f4cd0c8788 false
          		unknown