meteor-client-1.21.8-14.jar

Sample information


0

Antivirus detections

0

IDS alerts

20

Processes

0

Http events

8

Contacted hosts

8

DNS Requests

    5.8


    Score

Current activity of this Sample



Blacklist timeline


First seen: Sat Jul 26 2025 22:00:03 GMT+0000
Last seen: Sun Jul 27 2025 21:45:18 GMT+0000
Period: a day

Hashes
Filename:
meteor-client-1.21.8-14.jar
md5:
1a8c3c2285c5008d32947d39b59c5edb
sha1:
733b6f00bab9c5c8806d9813a89aff5e7f28f596
sha256:
06891f34d6902aefbab9ef6e820559d62360b6e9af9e227ee2370db7ad329083

In depth details
Filetype:
Java archive data (JAR)
Size (Bytes):
4665913
Classification:
malicious

Dates
Indexed:
Sat Jul 26 2025 21:52:16 GMT+0000 (2 months ago)
Last modified:
Sun Jul 27 2025 21:45:19 GMT+0000 (2 months ago)

Developers can check API Specification here:


Request:

          
curl -H "Authorization: Bearer <API_KEY>" https://api.maltiverse.com/sample/06891f34d6902aefbab9ef6e820559d62360b6e9af9e227ee2370db7ad329083
        

Request:

Alternatively you can use Maltiverse Python3 Library:
          
import requests
import json

url = 'https://api.maltiverse.com/sample/06891f34d6902aefbab9ef6e820559d62360b6e9af9e227ee2370db7ad329083'
response = requests.get(url)
print(json.dumps(response.json(), indent=4, sort_keys=True))
        

Request:

          
$url = 'https://api.maltiverse.com/sample/06891f34d6902aefbab9ef6e820559d62360b6e9af9e227ee2370db7ad329083'
$headers =  @{Authorization=("Bearer {0}" -f "<API_KEY>")}
$response = Invoke-RestMethod $url -Headers $headers
Write-Output $response
        

Response:

      
{
    "blacklist": [
        {
            "count": 51,
            "description": "Generic Malware",
            "first_seen": "2025-07-26 22:00:03",
            "last_seen": "2025-07-27 21:45:18",
            "ref": [
                21745
            ],
            "source": "Hybrid-Analysis"
        }
    ],
    "classification": "malicious",
    "contacted_host": [
        "104.21.96.1",
        "172.217.12.98",
        "142.251.214.130",
        "142.251.46.170",
        "142.251.32.35",
        "142.250.189.226",
        "142.250.191.65",
        "172.217.12.100"
    ],
    "creation_time": "2025-07-26 21:52:16",
    "dns_request": [
        "ep1.adtrafficquality.google",
        "ep2.adtrafficquality.google",
        "fonts.googleapis.com",
        "fonts.gstatic.com",
        "googleads.g.doubleclick.net",
        "meteorclient.com",
        "pagead2.googlesyndication.com",
        "www.google.com"
    ],
    "filename": [
        "meteor-client-1.21.8-14.jar"
    ],
    "filetype": "Java archive data (JAR)",
    "is_alive": false,
    "is_cdn": false,
    "is_cnc": false,
    "is_distributing_malware": false,
    "is_hosting": false,
    "is_iot_threat": false,
    "is_known_attacker": false,
    "is_known_scanner": false,
    "is_mining_pool": false,
    "is_open_proxy": false,
    "is_phishing": false,
    "is_sinkhole": false,
    "is_storing_phishing": false,
    "is_tor_node": false,
    "is_vpn_node": false,
    "md5": "1a8c3c2285c5008d32947d39b59c5edb",
    "modification_time": "2025-07-27 21:45:19",
    "process_list": [
        {
            "commandline": "-jar \"C:\\meteor-client-1.21.8-14.jar\"",
            "name": "javaw.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Java\\jre1.8.0_161\\bin\\javaw.exe",
            "sha256": "8f1cb4765e30d2298792ee44687790fdf63267d2e690f10e46fb2fb4da24d8e1",
            "uid": "00000000-00000528"
        },
        {
            "commandline": "rundll32 url.dll,FileProtocolHandler https://meteorclient.com/faq/installation",
            "name": "rundll32.exe",
            "normalizedpath": "%WINDIR%\\SysWOW64\\rundll32.exe",
            "sha256": "de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81",
            "uid": "00000000-00006756"
        },
        {
            "commandline": "--single-argument https://meteorclient.com/faq/installation",
            "name": "msedge.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe",
            "sha256": "accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620",
            "uid": "00000000-00006924"
        },
        {
            "commandline": "--type=crashpad-handler \"--user-data-dir=%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=%LOCALAPPDATA%\\Microsoft\\Edge\\User Data\\Crashpad\" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=107.0.5304.110 \"--annotation=exe=%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe\" --annotation=plat=Win64 \"--annotation=prod=Microsoft Edge\" --annotation=ver=107.0.1418.56 --initial-client-data=0xc8,0xcc,0xd0,0xa4,0x160,0x7fffa743b208,0x7fffa743b218,0x7fffa743b228",
            "name": "msedge.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe",
            "sha256": "accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620",
            "uid": "00000000-00001968"
        },
        {
            "commandline": "--type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1840 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:2",
            "name": "msedge.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe",
            "sha256": "accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620",
            "uid": "00000000-00004284"
        },
        {
            "commandline": "--type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1912 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:3",
            "name": "msedge.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe",
            "sha256": "accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620",
            "uid": "00000000-00005200"
        },
        {
            "commandline": "--type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2196 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:8",
            "name": "msedge.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe",
            "sha256": "accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620",
            "uid": "00000000-00007656"
        },
        {
            "commandline": "--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --time-ticks-at-unix-epoch=-1753658463761133 --launch-time-ticks=4697560408 --mojo-platform-channel-handle=3156 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:1",
            "name": "msedge.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe",
            "sha256": "accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620",
            "uid": "00000000-00003924"
        },
        {
            "commandline": "--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --time-ticks-at-unix-epoch=-1753658463761133 --launch-time-ticks=4697843708 --mojo-platform-channel-handle=3176 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:1",
            "name": "msedge.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe",
            "sha256": "accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620",
            "uid": "00000000-00006184"
        },
        {
            "commandline": "--type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=3604 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:8",
            "name": "msedge.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe",
            "sha256": "accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620",
            "uid": "00000000-00006808"
        },
        {
            "commandline": "--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --time-ticks-at-unix-epoch=-1753658463761133 --launch-time-ticks=4699872218 --mojo-platform-channel-handle=5028 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:1",
            "name": "msedge.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe",
            "sha256": "accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620",
            "uid": "00000000-00000260"
        },
        {
            "commandline": "--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=9 --time-ticks-at-unix-epoch=-1753658463761133 --launch-time-ticks=4700843159 --mojo-platform-channel-handle=5224 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:1",
            "name": "msedge.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe",
            "sha256": "accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620",
            "uid": "00000000-00007932"
        },
        {
            "commandline": "--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=10 --time-ticks-at-unix-epoch=-1753658463761133 --launch-time-ticks=4701095093 --mojo-platform-channel-handle=5248 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:1",
            "name": "msedge.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe",
            "sha256": "accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620",
            "uid": "00000000-00004340"
        },
        {
            "commandline": "--type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5300 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:8",
            "name": "msedge.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe",
            "sha256": "accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620",
            "uid": "00000000-00003408"
        },
        {
            "commandline": "--type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5956 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:8",
            "name": "msedge.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe",
            "sha256": "accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620",
            "uid": "00000000-00001468"
        },
        {
            "commandline": "--type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6036 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:8",
            "name": "msedge.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe",
            "sha256": "accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620",
            "uid": "00000000-00007440"
        },
        {
            "commandline": "--type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6044 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:8",
            "name": "msedge.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe",
            "sha256": "accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620",
            "uid": "00000000-00004996"
        },
        {
            "commandline": "--type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6060 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:8",
            "name": "msedge.exe",
            "normalizedpath": "%PROGRAMFILES%\\(x86)\\Microsoft\\Edge\\Application\\msedge.exe",
            "sha256": "accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620",
            "uid": "00000000-00006740"
        },
        {
            "commandline": "-jar \"C:\\meteor-client-1.21.8-14.jar\"",
            "name": "javaw.exe",
            "normalizedpath": "%PROGRAMFILES%\\Java\\jre-1.8\\bin\\javaw.exe",
            "sha256": "800ed0aaa1d2cbe08703d80121c8bc57b96f6e55c550a06bc064c85df0bbd206",
            "uid": "00000000-00002040"
        },
        {
            "commandline": "%ALLUSERSPROFILE%\\Oracle\\Java\\.oracle_jre_usage /grant \"everyone\":(OI)(CI)M",
            "name": "icacls.exe",
            "normalizedpath": "%WINDIR%\\system32\\icacls.exe",
            "sha256": "ff5f1b30f739e7a6f0debcc3d8069efef1beedab53f722274d5abf7f104977eb",
            "uid": "00000000-00001224"
        }
    ],
    "score": 5.8,
    "scoring_executed_time": "2025-07-26 22:00:05",
    "sha1": "733b6f00bab9c5c8806d9813a89aff5e7f28f596",
    "sha256": "06891f34d6902aefbab9ef6e820559d62360b6e9af9e227ee2370db7ad329083",
    "size": 4665913,
    "type": "sample"
}
    
Network contacts
DNS Requests
ep1.adtrafficquality.google
ep2.adtrafficquality.google
fonts.googleapis.com
fonts.gstatic.com
googleads.g.doubleclick.net
meteorclient.com
pagead2.googlesyndication.com
www.google.com
Contacted Hosts
104.21.96.1
172.217.12.98
142.251.214.130
142.251.46.170
142.251.32.35
142.250.189.226
142.250.191.65
172.217.12.100
Process list
uid
00000000-00000528
commandline
-jar "C:\meteor-client-1.21.8-14.jar"
name
javaw.exe
normalizedpath
%PROGRAMFILES%\(x86)\Java\jre1.8.0_161\bin\javaw.exe
sha256
8f1cb4765e30d2298792ee44687790fdf63267d2e690f10e46fb2fb4da24d8e1
uid
00000000-00006756
commandline
rundll32 url.dll,FileProtocolHandler https://meteorclient.com/faq/installation
name
rundll32.exe
normalizedpath
%WINDIR%\SysWOW64\rundll32.exe
sha256
de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81
uid
00000000-00006924
commandline
--single-argument https://meteorclient.com/faq/installation
name
msedge.exe
normalizedpath
%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe
sha256
accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620
uid
00000000-00001968
commandline
--type=crashpad-handler "--user-data-dir=%LOCALAPPDATA%\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=%LOCALAPPDATA%\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=107.0.5304.110 "--annotation=exe=%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=107.0.1418.56 --initial-client-data=0xc8,0xcc,0xd0,0xa4,0x160,0x7fffa743b208,0x7fffa743b218,0x7fffa743b228
name
msedge.exe
normalizedpath
%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe
sha256
accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620
uid
00000000-00004284
commandline
--type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1840 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:2
name
msedge.exe
normalizedpath
%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe
sha256
accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620
uid
00000000-00005200
commandline
--type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1912 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:3
name
msedge.exe
normalizedpath
%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe
sha256
accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620
uid
00000000-00007656
commandline
--type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2196 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:8
name
msedge.exe
normalizedpath
%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe
sha256
accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620
uid
00000000-00003924
commandline
--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --time-ticks-at-unix-epoch=-1753658463761133 --launch-time-ticks=4697560408 --mojo-platform-channel-handle=3156 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:1
name
msedge.exe
normalizedpath
%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe
sha256
accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620
uid
00000000-00006184
commandline
--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --time-ticks-at-unix-epoch=-1753658463761133 --launch-time-ticks=4697843708 --mojo-platform-channel-handle=3176 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:1
name
msedge.exe
normalizedpath
%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe
sha256
accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620
uid
00000000-00006808
commandline
--type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=3604 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:8
name
msedge.exe
normalizedpath
%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe
sha256
accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620
uid
00000000-00000260
commandline
--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --time-ticks-at-unix-epoch=-1753658463761133 --launch-time-ticks=4699872218 --mojo-platform-channel-handle=5028 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:1
name
msedge.exe
normalizedpath
%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe
sha256
accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620
uid
00000000-00007932
commandline
--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=9 --time-ticks-at-unix-epoch=-1753658463761133 --launch-time-ticks=4700843159 --mojo-platform-channel-handle=5224 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:1
name
msedge.exe
normalizedpath
%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe
sha256
accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620
uid
00000000-00004340
commandline
--type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=10 --time-ticks-at-unix-epoch=-1753658463761133 --launch-time-ticks=4701095093 --mojo-platform-channel-handle=5248 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:1
name
msedge.exe
normalizedpath
%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe
sha256
accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620
uid
00000000-00003408
commandline
--type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5300 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:8
name
msedge.exe
normalizedpath
%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe
sha256
accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620
uid
00000000-00001468
commandline
--type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5956 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:8
name
msedge.exe
normalizedpath
%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe
sha256
accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620
uid
00000000-00007440
commandline
--type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6036 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:8
name
msedge.exe
normalizedpath
%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe
sha256
accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620
uid
00000000-00004996
commandline
--type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6044 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:8
name
msedge.exe
normalizedpath
%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe
sha256
accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620
uid
00000000-00006740
commandline
--type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6060 --field-trial-handle=2024,i,6897377464835562442,11708021329636574105,131072 /prefetch:8
name
msedge.exe
normalizedpath
%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe
sha256
accd0aa3ae9f8b376215e8dd833ee762f2a7cdc6535eb27df0e670e9e689b620
uid
00000000-00002040
commandline
-jar "C:\meteor-client-1.21.8-14.jar"
name
javaw.exe
normalizedpath
%PROGRAMFILES%\Java\jre-1.8\bin\javaw.exe
sha256
800ed0aaa1d2cbe08703d80121c8bc57b96f6e55c550a06bc064c85df0bbd206
uid
00000000-00001224
commandline
%ALLUSERSPROFILE%\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
name
icacls.exe
normalizedpath
%WINDIR%\system32\icacls.exe
sha256
ff5f1b30f739e7a6f0debcc3d8069efef1beedab53f722274d5abf7f104977eb