eternity | hxxps://github[.]com/rxyzqc/Growtopia-Projects/releases/download/Plutonium/Plutonium[.]exe

Analysis

max time kernel
1800s
max time network
1510s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
21-06-2023 04:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/rxyzqc/Growtopia-Projects/releases/download/Plutonium/Plutonium.exe

Score

10^/10

eternity discovery spyware stealer

Malware Config

Signatures

Detects Eternity stealer 6 IoCs

stealer

resource	yara_rule
behavioral1/files/0x0006000000023160-158.dat	eternity_stealer
behavioral1/files/0x0006000000023160-563.dat	eternity_stealer
behavioral1/files/0x0006000000023160-564.dat	eternity_stealer
behavioral1/memory/3352-575-0x0000000000460000-0x000000000167C000-memory.dmp	eternity_stealer
behavioral1/memory/3352-604-0x0000000001DC0000-0x0000000001DD0000-memory.dmp	eternity_stealer
behavioral1/files/0x000300000000073f-905.dat	eternity_stealer

Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
eternity

Suspicious use of NtCreateProcessExOtherParentProcess 2 IoCs

description	pid	Process	procid_target
PID 7024 created 4820	7024	taskmgr.exe	143
PID 7024 created 4820	7024	taskmgr.exe	143

Downloads MZ/PE file

Checks computer location settings 2 TTPs 3 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000\Control Panel\International\Geo\Nation	Plutonium.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000\Control Panel\International\Geo\Nation	Plutonium.Launcher-beta.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000\Control Panel\International\Geo\Nation	GrowtopiaInstaller.exe

Drops startup file 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Plutonium.exe	Plutonium.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Plutonium.exe	Plutonium.exe

Executes dropped EXE 10 IoCs

pid	Process
3352	Plutonium.exe
884	dcd.exe
4124	Plutonium.Launcher-beta.exe
1832	7za.exe
1520	Plutonium.exe
1804	GrowtopiaInstaller.exe
2892	vc_redist.x64.exe
3312	vc_redist.x64.exe
808	Growtopia.exe
4820	Growtopia.exe

Loads dropped DLL 8 IoCs

pid	Process
1804	GrowtopiaInstaller.exe
1804	GrowtopiaInstaller.exe
1804	GrowtopiaInstaller.exe
3312	vc_redist.x64.exe
808	Growtopia.exe
4820	Growtopia.exe
4820	Growtopia.exe
7024	taskmgr.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials in Files
T1081
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Videos\Captures\desktop.ini	svchost.exe

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
4820	Growtopia.exe
4820	Growtopia.exe

Drops file in Program Files directory 2 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\a102b2f5-49a3-481f-bc06-4bd34b908642.tmp	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\20230621044051.pma	setup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Program crash 7 IoCs

pid	pid_target	Process	procid_target
1156	3352	WerFault.exe	103
3208	1520	WerFault.exe	113
1492	4820	WerFault.exe	143
3276	6828	WerFault.exe	356
7856	2304	WerFault.exe	152
2892	7904	WerFault.exe	464
564	368	WerFault.exe	9

NSIS installer 8 IoCs

installer

resource	yara_rule
behavioral1/files/0x0002000000022faa-863.dat	nsis_installer_1
behavioral1/files/0x0002000000022faa-863.dat	nsis_installer_2
behavioral1/files/0x0002000000022faa-877.dat	nsis_installer_1
behavioral1/files/0x0002000000022faa-877.dat	nsis_installer_2
behavioral1/files/0x0002000000022faa-878.dat	nsis_installer_1
behavioral1/files/0x0002000000022faa-878.dat	nsis_installer_2
behavioral1/files/0x0008000000023a50-3766.dat	nsis_installer_1
behavioral1/files/0x0008000000023a50-3766.dat	nsis_installer_2

Checks SCSI registry key(s) 3 TTPs 12 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\ConfigFlags	dwm.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000	dwm.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags	dwm.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID	dwm.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000	dwm.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\HardwareID	dwm.exe

Checks processor information in registry 2 TTPs 11 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	taskmgr.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe

Enumerates system info in registry 2 TTPs 8 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	dwm.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	dwm.exe

Modifies data under HKEY_USERS 20 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	dwm.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	dwm.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133317956569431243"	chrome.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1e\52C64B7E	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates	dwm.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2805025096-2326403612-4231045514-1000\{7684EA0F-A1C8-4641-BEAB-8A53FDFA9195}	svchost.exe
Key created	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000_Classes\Applications	crashreporter.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000_Classes\Applications\crashreporter.exe\IsHostApp = "0"	crashreporter.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000_Classes\Applications\crashreporter.exe\NoOpenWith = "0"	crashreporter.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000_Classes\Applications\crashreporter.exe\NoStartPage = "0"	crashreporter.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000_Classes\Applications\crashreporter.exe	crashreporter.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2805025096-2326403612-4231045514-1000\{DC5081B6-85F7-4A5A-9F96-E42B545C893F}	svchost.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 72498.crdownload:SmartScreen	msedge.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1612	chrome.exe
1612	chrome.exe
1520	Plutonium.exe
1520	Plutonium.exe
1520	Plutonium.exe
3032	chrome.exe
3032	chrome.exe
4820	Growtopia.exe
4820	Growtopia.exe
4032	msedge.exe
4032	msedge.exe
4252	msedge.exe
4252	msedge.exe
1572	identity_helper.exe
1572	identity_helper.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
5404	chrome.exe
5404	chrome.exe
5404	chrome.exe
5404	chrome.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
2024	OpenWith.exe
6268	taskmgr.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
1612	chrome.exe
1612	chrome.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeDebugPrivilege	3352	Plutonium.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeRestorePrivilege	1832	7za.exe
Token: 35	1832	7za.exe
Token: SeSecurityPrivilege	1832	7za.exe
Token: SeSecurityPrivilege	1832	7za.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeDebugPrivilege	1520	Plutonium.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe
Token: SeShutdownPrivilege	1612	chrome.exe
Token: SeCreatePagefilePrivilege	1612	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
1612	chrome.exe
4820	Growtopia.exe
4820	Growtopia.exe
4820	Growtopia.exe
4820	Growtopia.exe
4820	Growtopia.exe
4724	firefox.exe
4724	firefox.exe
4724	firefox.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe
7024	taskmgr.exe

Suspicious use of SetWindowsHookEx 31 IoCs

pid	Process
1804	GrowtopiaInstaller.exe
4820	Growtopia.exe
3324	OpenWith.exe
2024	OpenWith.exe
2024	OpenWith.exe
2024	OpenWith.exe
2024	OpenWith.exe
2024	OpenWith.exe
2024	OpenWith.exe
2024	OpenWith.exe
2024	OpenWith.exe
2024	OpenWith.exe
2024	OpenWith.exe
2024	OpenWith.exe
2024	OpenWith.exe
2024	OpenWith.exe
2024	OpenWith.exe
2024	OpenWith.exe
4724	firefox.exe
4724	firefox.exe
4724	firefox.exe
4724	firefox.exe
4724	firefox.exe
4724	firefox.exe
4724	firefox.exe
4724	firefox.exe
4724	firefox.exe
4724	firefox.exe
4724	firefox.exe
4724	firefox.exe
4724	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1612 wrote to memory of 4092	1612	chrome.exe	82
PID 1612 wrote to memory of 4092	1612	chrome.exe	82
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 3244	1612	chrome.exe	83
PID 1612 wrote to memory of 1088	1612	chrome.exe	84
PID 1612 wrote to memory of 1088	1612	chrome.exe	84
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85
PID 1612 wrote to memory of 4300	1612	chrome.exe	85

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" https://github.com/rxyzqc/Growtopia-Projects/releases/download/Plutonium/Plutonium.exe
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xe8,0x108,0x7ff9a8689758,0x7ff9a8689768,0x7ff9a8689778
  2⤵
  PID:4092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1776 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:2
  2⤵
  PID:3244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2240 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3196 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:1
  2⤵
  PID:684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3216 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:1
  2⤵
  PID:3120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4776 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4896 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:2556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4832 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:3088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5364 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:2028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5400 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:2568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4820 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5240 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3952 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5596 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5424 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5288 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5436 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:2912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=5340 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:1
  2⤵
  PID:1620
- C:\Users\Admin\Downloads\Plutonium.exe
  "C:\Users\Admin\Downloads\Plutonium.exe"
  2⤵
  - Checks computer location settings
  - Drops startup file
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:3352
- - C:\Users\Admin\AppData\Local\Temp\fudxgxyw.h0n\Plutonium.Launcher-beta.exe
    "C:\Users\Admin\AppData\Local\Temp\fudxgxyw.h0n\Plutonium.Launcher-beta.exe"
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    PID:4124
  - - C:\Users\Admin\AppData\Local\Temp\Plutonium\7za.exe
      "C:\Users\Admin\AppData\Local\Temp\Plutonium\7za.exe" x "C:\Users\Admin\AppData\Local\Programs\Plutonium\Plutonium.pt" -y -o"C:\Users\Admin\AppData\Local\Programs\Plutonium"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:1832
  - - C:\Users\Admin\AppData\Local\Programs\Plutonium\Plutonium.exe
      "C:\Users\Admin\AppData\Local\Programs\Plutonium\Plutonium.exe"
      4⤵
      Executes dropped EXE
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:1520
    - - C:\Windows\system32\WerFault.exe
        
        C:\Windows\system32\WerFault.exe -u -p 1520 -s 620
        5⤵
        Program crash
        
        PID:3208
- - C:\Users\Admin\AppData\Local\Temp\dcd.exe
    "C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path=""
    3⤵
    - Executes dropped EXE
    PID:884
- - C:\Windows\system32\WerFault.exe
    C:\Windows\system32\WerFault.exe -u -p 3352 -s 2484
    3⤵
    - Program crash
    PID:1156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2688 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4820 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=4704 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:1
  2⤵
  PID:2248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3184 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:2240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4000 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:3348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5228 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5800 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5472 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:3444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4440 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1300
- C:\Users\Admin\Downloads\GrowtopiaInstaller.exe
  "C:\Users\Admin\Downloads\GrowtopiaInstaller.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of SetWindowsHookEx
  PID:1804
- - C:\Users\Admin\Desktop\vc_redist.x64.exe
    C:\Users\Admin\Desktop\vc_redist.x64.exe
    3⤵
    - Executes dropped EXE
    PID:2892
  - - C:\Users\Admin\Desktop\vc_redist.x64.exe
      "C:\Users\Admin\Desktop\vc_redist.x64.exe" -burn.unelevated BurnPipe.{A4284AAC-DC37-4A71-ABAE-2A3C01AF43DB} {FE0D5F84-E5CF-4758-A912-818A58711138} 2892
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:3312
- - C:\Users\Admin\Desktop\Growtopia.exe
    "C:\Users\Admin\Desktop\Growtopia.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of NtSetInformationThreadHideFromDebugger
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of SendNotifyMessage
    - Suspicious use of SetWindowsHookEx
    PID:4820
  - - C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 4820 -s 480
      4⤵
      Program crash
      PID:1492
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://ubistatic-a.akamaihd.net/0098/5611741/GrowtopiaInstaller.exe
      4⤵
      Enumerates system info in registry
      Modifies registry class
      NTFS ADS
      Suspicious behavior: EnumeratesProcesses
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      PID:4252
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0x118,0x128,0x7ff9a7c546f8,0x7ff9a7c54708,0x7ff9a7c54718
        5⤵
        
        PID:2304
      - C:\Windows\system32\WerFault.exe
        
        C:\Windows\system32\WerFault.exe -u -p 2304 -s 964
        6⤵
        Program crash
        
        PID:7856
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 /prefetch:3
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:4032
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2188 /prefetch:2
        5⤵
        
        PID:4388
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2684 /prefetch:8
        5⤵
        
        PID:3920
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3400 /prefetch:1
        5⤵
        
        PID:3168
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3392 /prefetch:1
        5⤵
        
        PID:4276
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4616 /prefetch:1
        5⤵
        
        PID:1780
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4600 /prefetch:1
        5⤵
        
        PID:2568
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1
        5⤵
        
        PID:4024
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5224 /prefetch:1
        5⤵
        
        PID:2200
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1
        5⤵
        
        PID:2604
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=4468 /prefetch:8
        5⤵
        
        PID:4608
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6332 /prefetch:8
        5⤵
        
        PID:3260
    - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --configure-user-settings --verbose-logging --system-level --msedge --force-configure-user-settings
        5⤵
        Drops file in Program Files directory
        
        PID:1012
      - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff7b95f5460,0x7ff7b95f5470,0x7ff7b95f5480
        6⤵
        
        PID:328
    - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6400 /prefetch:8
        5⤵
        
        PID:1892
    - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6400 /prefetch:8
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:1572
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5776 /prefetch:2
        5⤵
        
        PID:5404
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6196 /prefetch:1
        5⤵
        
        PID:7056
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6084 /prefetch:1
        5⤵
        
        PID:5412
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1
        5⤵
        
        PID:4508
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:1
        5⤵
        
        PID:6220
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5688 /prefetch:1
        5⤵
        
        PID:1448
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1
        5⤵
        
        PID:6564
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3132 /prefetch:1
        5⤵
        
        PID:6560
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6208 /prefetch:1
        5⤵
        
        PID:4344
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5832 /prefetch:1
        5⤵
        
        PID:552
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3532 /prefetch:1
        5⤵
        
        PID:5528
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6140 /prefetch:1
        5⤵
        
        PID:5672
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6828 /prefetch:1
        5⤵
        
        PID:4992
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5356 /prefetch:1
        5⤵
        
        PID:7164
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4828 /prefetch:1
        5⤵
        
        PID:5208
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7000 /prefetch:1
        5⤵
        
        PID:6136
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6636 /prefetch:1
        5⤵
        
        PID:6132
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7284 /prefetch:1
        5⤵
        
        PID:6780
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7420 /prefetch:1
        5⤵
        
        PID:6036
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7564 /prefetch:1
        5⤵
        
        PID:6024
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7528 /prefetch:1
        5⤵
        
        PID:5380
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7888 /prefetch:1
        5⤵
        
        PID:4932
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8008 /prefetch:1
        5⤵
        
        PID:2708
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6588 /prefetch:1
        5⤵
        
        PID:7096
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4996 /prefetch:1
        5⤵
        
        PID:4628
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8268 /prefetch:1
        5⤵
        
        PID:6056
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7920 /prefetch:1
        5⤵
        
        PID:2568
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8248 /prefetch:1
        5⤵
        
        PID:3996
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8256 /prefetch:1
        5⤵
        
        PID:5168
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8944 /prefetch:1
        5⤵
        
        PID:4348
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8092 /prefetch:1
        5⤵
        
        PID:5228
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8044 /prefetch:1
        5⤵
        
        PID:2016
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9144 /prefetch:1
        5⤵
        
        PID:5284
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5212 /prefetch:1
        5⤵
        
        PID:6832
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9528 /prefetch:1
        5⤵
        
        PID:6748
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8484 /prefetch:1
        5⤵
        
        PID:5300
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8488 /prefetch:1
        5⤵
        
        PID:2612
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10036 /prefetch:1
        5⤵
        
        PID:5804
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10044 /prefetch:1
        5⤵
        
        PID:4684
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10256 /prefetch:1
        5⤵
        
        PID:808
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10500 /prefetch:1
        5⤵
        
        PID:7012
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10288 /prefetch:1
        5⤵
        
        PID:2472
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8964 /prefetch:1
        5⤵
        
        PID:720
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10936 /prefetch:1
        5⤵
        
        PID:4724
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10504 /prefetch:1
        5⤵
        
        PID:2364
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11220 /prefetch:1
        5⤵
        
        PID:5568
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10664 /prefetch:1
        5⤵
        
        PID:4284
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9712 /prefetch:1
        5⤵
        
        PID:5664
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9080 /prefetch:1
        5⤵
        
        PID:6612
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5808 /prefetch:1
        5⤵
        
        PID:7044
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7512 /prefetch:1
        5⤵
        
        PID:1388
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11128 /prefetch:1
        5⤵
        
        PID:3668
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10504 /prefetch:1
        5⤵
        
        PID:3724
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10960 /prefetch:1
        5⤵
        
        PID:6676
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9108 /prefetch:1
        5⤵
        
        PID:3852
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7588 /prefetch:1
        5⤵
        
        PID:1500
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7636 /prefetch:1
        5⤵
        
        PID:5176
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11424 /prefetch:1
        5⤵
        
        PID:7132
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11684 /prefetch:1
        5⤵
        
        PID:1988
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7452 /prefetch:1
        5⤵
        
        PID:6532
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11172 /prefetch:1
        5⤵
        
        PID:2648
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11716 /prefetch:1
        5⤵
        
        PID:6532
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12112 /prefetch:1
        5⤵
        
        PID:4888
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12228 /prefetch:1
        5⤵
        
        PID:7228
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12440 /prefetch:1
        5⤵
        
        PID:7340
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7288 /prefetch:1
        5⤵
        
        PID:7484
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6540 /prefetch:1
        5⤵
        
        PID:7548
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6800 /prefetch:1
        5⤵
        
        PID:7628
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12744 /prefetch:1
        5⤵
        
        PID:7696
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12812 /prefetch:1
        5⤵
        
        PID:7776
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12916 /prefetch:1
        5⤵
        
        PID:3392
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12952 /prefetch:1
        5⤵
        
        PID:6700
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11016 /prefetch:1
        5⤵
        
        PID:7884
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=111 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12720 /prefetch:1
        5⤵
        
        PID:5056
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=113 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8124 /prefetch:1
        5⤵
        
        PID:8012
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=112 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7508 /prefetch:1
        5⤵
        
        PID:7992
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=110 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9788 /prefetch:1
        5⤵
        
        PID:7996
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=109 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6032 /prefetch:1
        5⤵
        
        PID:7984
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9820 /prefetch:1
        5⤵
        
        PID:7976
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=107 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3392 /prefetch:1
        5⤵
        
        PID:1236
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11088 /prefetch:1
        5⤵
        
        PID:7968
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=105 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12976 /prefetch:1
        5⤵
        
        PID:7964
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=104 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9780 /prefetch:1
        5⤵
        
        PID:7952
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9752 /prefetch:1
        5⤵
        
        PID:7932
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=102 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6156 /prefetch:1
        5⤵
        
        PID:7944
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=101 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1
        5⤵
        
        PID:3708
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4900 /prefetch:1
        5⤵
        
        PID:1804
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6180 /prefetch:1
        5⤵
        
        PID:4216
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12436 /prefetch:1
        5⤵
        
        PID:6420
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
        5⤵
        
        PID:3832
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9748 /prefetch:1
        5⤵
        
        PID:7928
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7908 /prefetch:1
        5⤵
        
        PID:7924
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12400 /prefetch:1
        5⤵
        
        PID:7916
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7960 /prefetch:1
        5⤵
        
        PID:7908
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12992 /prefetch:1
        5⤵
        
        PID:7044
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,4770615145192136931,7332079775122317342,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11000 /prefetch:1
        5⤵
        
        PID:7904
      - C:\Windows\system32\WerFault.exe
        
        C:\Windows\system32\WerFault.exe -u -p 7904 -s 924
        6⤵
        Program crash
        
        PID:2892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6120 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5964 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3304 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=844 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=1148 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=1668 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:1
  2⤵
  PID:5712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=5736 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:1
  2⤵
  PID:5868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3960 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4564 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5908 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5960 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6344 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1788 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5452 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6724 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6908 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5360 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:7044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7004 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:7112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6336 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6380 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7740 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7860 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8044 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6172 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6824 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2800 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6600 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6240 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:7008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8236 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:7000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7656 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8500 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8664 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8580 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8200 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6140 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8368 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3288 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7300 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8668 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7860 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8092 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7920 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:2584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8092 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3276 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6448 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:3892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6848 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5824 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6192 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6832 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3236 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8320 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7868 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7932 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2492 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8084 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6160 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7252 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6508 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6072 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7224 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3680 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7244 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4456 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7236 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7384 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7660 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:3308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8256 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6816 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8704 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7740 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7748 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8344 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7708 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8556 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8464 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:7088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7236 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8260 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7236 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7232 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5744 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6084 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5248 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8688 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5248 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7232 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8252 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8252 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:3308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8212 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:2196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3236 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6904 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6188 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6388 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1760 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:7020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6976 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7548 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:3044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5740 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:7056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7784 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7852 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7332 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8284 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4760 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8408 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7740 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7268 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6820 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:7072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6196 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7616 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6076 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:3992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6680 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7332 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:7048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7740 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:3208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7596 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8412 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7740 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7960 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8424 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6804 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6532 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6844 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:7140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8560 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:2648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5248 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4548 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6744 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5248 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6844 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:2816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8408 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:7088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8260 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7332 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7712 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6232 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8544 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3320 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:7100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7516 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:7144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3192 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:7128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3276 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7280 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:3788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6012 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6044 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6344 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:2160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8488 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7920 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:7152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7692 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8464 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6084 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:5544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7232 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6084 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8688 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6844 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7876 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5928 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3236 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8260 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5248 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7944 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7216 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7048 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7296 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7728 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6176 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6640 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7728 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8668 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5424 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:1204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6484 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:7144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7792 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:6500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5960 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:8
  2⤵
  PID:4812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=195 --mojo-platform-channel-handle=1784 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:1
  2⤵
  PID:4400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=196 --mojo-platform-channel-handle=3284 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:1
  2⤵
  PID:7872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=197 --mojo-platform-channel-handle=3300 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:1
  2⤵
  PID:1380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=198 --mojo-platform-channel-handle=8508 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:1
  2⤵
  PID:6872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=199 --mojo-platform-channel-handle=7128 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=200 --mojo-platform-channel-handle=6152 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:1
  2⤵
  PID:7924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3632 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:2
  2⤵
  PID:7352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=202 --mojo-platform-channel-handle=3236 --field-trial-handle=1812,i,7671772187292296779,2275148926548536177,131072 /prefetch:1
  2⤵
  PID:816

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1984

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 448 -p 3352 -ip 3352
1⤵
PID:1980

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 476 -p 1520 -ip 1520
1⤵
PID:4904

C:\Users\Admin\Desktop\Growtopia.exe
"C:\Users\Admin\Desktop\Growtopia.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:808

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 4820 -ip 4820
1⤵
PID:2784

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x504 0x510
1⤵
PID:916

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
PID:3736

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:3324

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Drops desktop.ini file(s)
- Checks processor information in registry
- Modifies registry class
PID:1636

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1376

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1204

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2024
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\Unconfirmed 72498.crdownload"
  2⤵
  PID:3404
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\Unconfirmed 72498.crdownload"
    3⤵
    - Checks processor information in registry
    - Modifies registry class
    - Suspicious use of SendNotifyMessage
    - Suspicious use of SetWindowsHookEx
    PID:4724
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4724.0.1115488398\2032736776" -parentBuildID 20221007134813 -prefsHandle 1780 -prefMapHandle 1772 -prefsLen 20890 -prefMapSize 232675 -appDir "C:\Program Files\Mozilla Firefox\browser" - {344f3817-4762-4372-97f2-a0a94a62ebe0} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 1916 1fcec615258 gpu
      4⤵
      PID:5020
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4724.1.909131435\1578989159" -parentBuildID 20221007134813 -prefsHandle 2312 -prefMapHandle 2308 -prefsLen 21706 -prefMapSize 232675 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {933b6ca7-58f8-426e-8ff8-c1f15dbc4560} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 2340 1fceaa41858 socket
      4⤵
      PID:5208
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4724.2.114281132\1958088343" -childID 1 -isForBrowser -prefsHandle 3348 -prefMapHandle 3344 -prefsLen 21854 -prefMapSize 232675 -jsInitHandle 1400 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c3a81cb4-ee35-4605-92e6-86d2187bcda6} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 3360 1fcef354e58 tab
      4⤵
      PID:5500
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4724.3.885168737\1165145426" -childID 2 -isForBrowser -prefsHandle 3552 -prefMapHandle 3752 -prefsLen 26519 -prefMapSize 232675 -jsInitHandle 1400 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f5ba2bad-006d-402e-a187-b2347257c21e} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 3760 1fcf0585158 tab
      4⤵
      PID:5768
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4724.4.1126711863\1218207023" -childID 3 -isForBrowser -prefsHandle 4848 -prefMapHandle 1632 -prefsLen 26578 -prefMapSize 232675 -jsInitHandle 1400 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {503a94a6-8897-45da-b248-c8f42808147b} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 4900 1fcf075d858 tab
      4⤵
      PID:5320
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4724.6.156388351\1633411622" -childID 5 -isForBrowser -prefsHandle 5188 -prefMapHandle 5308 -prefsLen 26753 -prefMapSize 232675 -jsInitHandle 1400 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {983e694a-0bae-4e13-a032-487482d0b160} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 5076 1fcf264d258 tab
      4⤵
      PID:5560
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4724.5.1074320284\181621248" -childID 4 -isForBrowser -prefsHandle 5184 -prefMapHandle 5168 -prefsLen 26753 -prefMapSize 232675 -jsInitHandle 1400 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bb5d21b2-5360-4e07-978b-c587730aad58} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 4924 1fcf1ba6358 tab
      4⤵
      PID:5416
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4724.7.917760645\720940391" -childID 6 -isForBrowser -prefsHandle 3492 -prefMapHandle 4940 -prefsLen 27114 -prefMapSize 232675 -jsInitHandle 1400 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9aff239c-12fd-4f36-b3e0-f22ee4641c37} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 2876 1fcee513058 tab
      4⤵
      PID:7120
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4724.8.1957884469\878312439" -childID 7 -isForBrowser -prefsHandle 5292 -prefMapHandle 6420 -prefsLen 27250 -prefMapSize 232675 -jsInitHandle 1400 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f49b75e8-a88a-493c-a845-dfbfcc6fb3e1} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 6428 1fcf3f86e58 tab
      4⤵
      PID:4984
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4724.9.2124352226\2146336122" -childID 8 -isForBrowser -prefsHandle 6624 -prefMapHandle 6676 -prefsLen 27250 -prefMapSize 232675 -jsInitHandle 1400 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d39d4e92-cc56-4c82-8222-612c49f5381d} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 6716 1fcef9fde58 tab
      4⤵
      PID:6828
    - - C:\Windows\system32\WerFault.exe
        
        C:\Windows\system32\WerFault.exe -u -p 6828 -s 1232
        5⤵
        Program crash
        
        PID:3276
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4724.10.1985685857\1220426335" -childID 9 -isForBrowser -prefsHandle 6784 -prefMapHandle 6788 -prefsLen 27250 -prefMapSize 232675 -jsInitHandle 1400 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3b634c2d-88d0-4e72-8050-b10fed64c099} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 6868 1fcf1044158 tab
      4⤵
      PID:6848
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4724.11.858500971\219937655" -childID 10 -isForBrowser -prefsHandle 7052 -prefMapHandle 6820 -prefsLen 27250 -prefMapSize 232675 -jsInitHandle 1400 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {24d538a4-b1b3-4664-9a62-93f2eda510b4} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 6776 1fcf6064f58 tab
      4⤵
      PID:6684
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4724.12.744119080\1143406295" -childID 11 -isForBrowser -prefsHandle 7540 -prefMapHandle 7536 -prefsLen 27250 -prefMapSize 232675 -jsInitHandle 1400 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {53fea78b-cff8-4801-9a26-fba25692e6ef} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 7524 1fcf619bb58 tab
      4⤵
      PID:5544
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4724.13.1768816765\617454772" -parentBuildID 20221007134813 -prefsHandle 7648 -prefMapHandle 3508 -prefsLen 27250 -prefMapSize 232675 -appDir "C:\Program Files\Mozilla Firefox\browser" - {908d33cd-0f4a-4390-9b22-142f21c907ac} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 6864 1fcef928758 rdd
      4⤵
      PID:4900
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4724.14.486656274\463578220" -parentBuildID 20221007134813 -sandboxingKind 1 -prefsHandle 7576 -prefMapHandle 3040 -prefsLen 27250 -prefMapSize 232675 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {26f126b4-32ae-446f-84c7-4b87c8ce65a7} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 2984 1fcf355f158 utility
      4⤵
      PID:4872
  - - C:\Program Files\Mozilla Firefox\crashreporter.exe
      "C:\Program Files\Mozilla Firefox\crashreporter.exe" "C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bozzcyfh.default-release\minidumps\51fa1952-bd5b-4dc8-a14b-7b27b07692d5.dmp"
      4⤵
      Modifies registry class
      PID:5664
    - - C:\Program Files\Mozilla Firefox\minidump-analyzer.exe
        
        "C:\Program Files\Mozilla Firefox\minidump-analyzer.exe" "C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bozzcyfh.default-release\minidumps\51fa1952-bd5b-4dc8-a14b-7b27b07692d5.dmp"
        5⤵
        
        PID:1376

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
- Suspicious use of NtCreateProcessExOtherParentProcess
- Loads dropped DLL
- Checks SCSI registry key(s)
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SendNotifyMessage
PID:7024
- C:\Windows\system32\taskmgr.exe
  "C:\Windows\system32\taskmgr.exe" /1
  2⤵
  - Checks SCSI registry key(s)
  - Suspicious behavior: GetForegroundWindowSpam
  PID:6268

C:\Windows\system32\werfault.exe
werfault.exe /h /shared Global\140fc3f9c66640e1881df13c7bdfbfa2 /t 1748 /p 4820
1⤵
PID:6964

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
- Modifies registry class
PID:7040

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 548 -p 6828 -ip 6828
1⤵
PID:7052

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 424 -p 2304 -ip 2304
1⤵
PID:7772

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 456 -p 7904 -ip 7904
1⤵
PID:1636

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
PID:6140
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  PID:2604

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 576 -p 368 -ip 368
1⤵
PID:5664

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 368 -s 3432
1⤵
- Program crash
PID:564

C:\Windows\system32\dwm.exe
"dwm.exe"
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
PID:6232

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

T1081

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019

Filesize
53KB

MD5
2f68d945c9293cfb43dabe3f0f103d02

SHA1
6be03f8c6a685a2570d0fc71d1865f4e06bc196e

SHA256
31de1ad0f118465fb9604ebbc6568d727f825212fe6d89c9e364f78c31103124

SHA512
459494df1b765ed8abe0df152e368d84ea115db2cbacf1855eab68ef7eb237a49ca3eae06f5a86dc9b669706b401c40f1a83cf7cf8f48dbd661d4c676221cce6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a

Filesize
39KB

MD5
8877fbc3201048f22d98ad32e400ca4a

SHA1
993343bbecb3479a01a76d4bd3594d5b73a129bd

SHA256
22f8221159c3f919338da3a842d9a50171ddc5ac805be6239bd63e0db78046af

SHA512
3dfb36cd2d15347eaa3c7ae29bfa6aa61638e9739174f0559a3a0c676108ccc1a6028f58dad093d6b90cac72b4468eb1d88b6414339555c9f872a5638271d9c9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025

Filesize
37KB

MD5
5b0c0d429185ff30e04c93f67116d98f

SHA1
8eb3286fe16a5bee5a0164b131bc534fd131f250

SHA256
f1a0b957050b529afc0e94c436976326124ed8968183859c413986487623294d

SHA512
6295bcd662325172b15c476d26f23c8794c4f1454e0e8cfd43bca79b45aa03e1ae721ebdada1c52fe7699027fa97699156280ff259ce3cc476e322ccc0337902

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

Filesize
1KB

MD5
4be498a9a0375e8ee973b874ccd0639f

SHA1
4d836703e25d955802bc8497cecc80b0ff86c387

SHA256
c445c96664cceed55ddd6614fb8ec66d3aa99925cc2a52e9cde9d29b097877bc

SHA512
f5e25f183b14cef3a48ca8f77d4f729613a7f347584ffc62a66af2b56ec34d8268405f13f93b4118a10767738f0dd0ed6a855feb6e8e3e04dbadd8e877eec459

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.62.0_0\_locales\en_CA\messages.json

Filesize
851B

MD5
07ffbe5f24ca348723ff8c6c488abfb8

SHA1
6dc2851e39b2ee38f88cf5c35a90171dbea5b690

SHA256
6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c

SHA512
7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.62.0_0\dasherSettingSchema.json

Filesize
854B

MD5
4ec1df2da46182103d2ffc3b92d20ca5

SHA1
fb9d1ba3710cf31a87165317c6edc110e98994ce

SHA256
6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6

SHA512
939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
722fb6ac5e67641dc89f92ea4b880aed

SHA1
991b5817cab458c383e21a6925f8591bd7c3f6f3

SHA256
f5227ddf24ef7a007b49cde02cef686f7f8aea9b74a3ae194bd236a1da11822a

SHA512
71579a6e70a0def768d1ca633c64d23778ab888dc3ec99e74e11851c377d1e838a8dcd02b08bfc213484ef734f4a30494df846474a1f1d4cc5936640c4ea9f79

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
b6004f08bd1fb049679f87b0e77ddf3b

SHA1
743a80060ed7b26bed7e015d5d0af8ea86508f31

SHA256
78d3984f9abf736afe4721f0c86281cddee30f97c1489a41d1d3df8103481e12

SHA512
64037ffb6b260cce8a6b8d1cb32169997b3fe7b6d73e5e4fb55da849402da68b8f5d38cacde89007071e5f5b099f348b58f1ca9bef30c3bcddf26c027ab72c5d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
62e8d1bfc995616c5cda3a782b27bf70

SHA1
ef30016188f8339e9a3d14917d2aa157d56afd59

SHA256
6f826ec9bfd6e2698ef443dfeb9f21f8ff5809896b6cc09adeb060e743656d58

SHA512
8fe76e7630e965f452ec5a018cd16b77fc043d334c1330d699fe06715fa5cf05d5cc155a3e6a1a18c0fb73a84ddf9f7d828e83a62a9bdc4899032c8544d076c4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
9fbd692346a680e36c3fb858b4172fe6

SHA1
b6132584cabffb76d5f2c31e46086f0dcd17ef72

SHA256
bb89e52d01a3a6e2ac73261fda79dd6b36bb0bafddf8f56d8c16ce97ccf1e4c8

SHA512
1b126ffab6978c7a0794acdc6c34c3894a62c41e93baa336892b8fe855cb64886f05a23bdd8ccc5edc1163ab04f99305194146adafc44b15d8e98cb8119d604f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
5118fbba34ad03fb9078e616d22ad4fc

SHA1
e145eb5f94aacc93592c7af6154f1488560714a7

SHA256
895e2e2b89537757dbcaeb6d42961642c816daa54b8866f4ecb1a888efff2880

SHA512
a79c097f0bf60b9c9d50a1505d7b64e6230aeb69279ea5eff6eee872ce54906aacc7fa477b7ff69ba44c9eac20a025fee9c417d40392a9172edb51ddb473a32e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
c6dcbc560aff6ff964d9962c64a5cb53

SHA1
c923fdd49ff5de1bc6a94431a46a5b7007b5c778

SHA256
e7a02e241d711930672723419ab7dcd59f2b2ce0f92c2fb50d27dc0d05ba0db1

SHA512
9b0e46384700aeda9a080fb3e4e9ebbc774e307b310f49b7bf2ec563060fa530a7147275424fb16cd02827789d6fa1ba990fbbb516208cc3c760c8c804de9b7e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
6c22cf09f00b57ababed211000e1eded

SHA1
3591a1c691c354a52ec5e967fe7895b139cef781

SHA256
c6852531a9be93c90914f440fa42a1499638000fb60652dcf2ad8be0bbd9e453

SHA512
07729f7c2414b283cfe8b2f59e02fae21976f3e73f02239462facbb20dfcf8071a11ed02fbbd78ba178d1704ca481339a35bed0365ced9271bb30f96769068c0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
304d352557697b95073cd6dc476e55b4

SHA1
8411e4638f8418365b54686a38f1a5d6eeac77e7

SHA256
dfe830e2e8823768349900f125daeba564ff5837982353c5491210f21ab81bcd

SHA512
701b31a7755b157b5b691d93e932bf4d5c3537911f51846fcecb713ea5c716047f693933ad89962c93f90e377ba1d0ab705688e2d3f25d13c020bbcf59ce6456

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
6aa2e3669dc044f87fbe336f76518986

SHA1
d76f6dcda235a39a35bf5c5e3eba75d57dfe8126

SHA256
51705c7cdacc4d2f32222ae4d325e1e32807f314148e0d42fed5de32dea3c965

SHA512
b3794d01025f243ae42f58f0d7e6934b643292f4ef3af00315f728c4ddedb7b7af9e3719b2632772d875bb41a2d8eaf309c8690a6ef8571cddf5acbe35d13ca9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
60643c48a4fc5c2afe3e6cf597fa5491

SHA1
9308fee2607e3de2e31e4d051343c32ac79e81ce

SHA256
fbbc9424f88ea8a02b513925e07f2e0a9d90583d6395a8d50d32c14175d9d4e6

SHA512
e555dbc15b00f9ae9ea8e8b0fe81d775fe654b2646118210e40561ad2600bc63a55fb14b9f0ae6784a23a7d7cb0c49b3b4a80b5d373b1a6eca0392adf89c3df7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
538B

MD5
ac6fa1a76a4480040c8983bd771508b2

SHA1
da882d3d476ea13d253b82e7aec271b9432551f2

SHA256
6859f73b12b8eab426cfe162c815ec40c1e37fb450c587fb9ae4d306d5c0fb9a

SHA512
974177749e7ff8878617c2b2176d880e3c62dcb21cad6bf8ce9b62525063b8016b6f5bdfbf8abed5f39eb714510c383aef2ef5db7b7201e378c050d3beed8c10

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
960cf36837cbcc4d51fb73daed3704a4

SHA1
846a173a8b2f2ada96b9ab9c7151e3d02a6311fc

SHA256
2a1e2d88998a03213a933bf8d97f2fb247deb986ee08746fc48e71a34e3fbd88

SHA512
8737e9cceba1d2311c8f755f19ada49cc7f2f534864172d032c82ecb4b9129a9e129860b31c81134d7436ba6641bfd849fbe8cd5f2fb39da4559ead63e84481f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
3185815a9bf50453669f7d3c7c533802

SHA1
0736f41ea45730bd2e71454f6afc8753c2a49230

SHA256
7c640885fc205f3cf638993589151be21608db3191dd697e57deeb3c904a4d55

SHA512
aa1114e70bdfb8ec9d260335114a44ae419c4262235f2e3a834ba0294920b6875577ad77e531c266720a5551c9626c81fbbdabf3b94941495dfb313f980c3baf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
97522828118c19cbb08a92eaf9105f79

SHA1
121c8c6d0021da1add26278d1b78f61bc148fe76

SHA256
0e45094717f908168af13926b190d928926de101eb83dedccf74075f804facf0

SHA512
eb6c8fffbc27dd3eaf2a9035b38793b4b2bbd0a32fc9ba85448c727adfe1e6e9405c26e94ef04027b57e137cf015a9982a40312b5ecf527e5ea66ac713551c20

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
9a7ce8eeb212cc80199f34f380e19a80

SHA1
d6be3fef02598a13a500d4c9b77397282ccde678

SHA256
b80c68b8098d59ef33f1bed5cbaa02a8a9f485fe00b0febf2906e1c74a0a0b78

SHA512
9d7f5418212b6a3f41e70d329f8e03f27ce2eb25b975c1afd321048f09a85f3f0a4fdafaf424fa2c0dc1d09628b9af21bb5738ea1228d154784dcc54f0a3a792

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
bd3c108e1e0884fe6fa012403f4a3567

SHA1
76cefdc4050519c68687c69f438026bda2385157

SHA256
c210b6baed70ba50a1b1322b83e0bc137404536c3312a283a8c532b8cfa363ed

SHA512
f643795d9d9860f400d62fed4f46dd271443da82b2d3adab26c69797bc7bdb2d29a248ede69e5fe52efb007cac9acae40c2e5881f629825dd5ab07ae03cf5e30

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
8d7a92675efb17250dcf445b392e7b86

SHA1
1780500d5177708367a15312438c04ae3dfb6f17

SHA256
4b6683de5d5896c86a7a2e1e8c9d4f72077b6ef77478cbeb3174dce6b1228f71

SHA512
229318e7afac670149ae719f31f99e6f9c6241bb2e2c5e253d54534ee8e32f0a347dddd6a3409d59f23dfe203e6b977831aea9c21a1bae5637e88e16f6687493

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
cbdf3b016aad82d1b46df82c75ff86b4

SHA1
7983addc91c5e7866b9192bebd81946603404259

SHA256
82e768907a841585e999436f459e536d95097c26ce3be2d9efd0d31f39eb25c5

SHA512
e7fc2af544bb0db147b99e97902cebf8a03a3529df183e5f464deb49a48fd3054582a2897140b2e0fb5876aba59fc8c43d2a1dae15d3070487f253e021724c6a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
4d68b773779db652c46562ed9bd78676

SHA1
3a441c98857811301492224c3e095337dbb5447c

SHA256
124f7829dd0d5c33881baae605d5b01685716914cd6ab61552405f0924ff258c

SHA512
a554d0f6621aa3a47907fb9a7aa029744b4a6c447906d912830ef9f386394683990ab4ec626817888cf55590de4d117bc9a21377c325937807f0188311e6a6b6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
d3ac139cbc9e03ae0ce78e53b551ca80

SHA1
2176135fad04ffe812f9a7d4a5b372f680cc35bf

SHA256
b5165aa47ea0e5a02b154e302981b89a804233fa7774fabe4edd804a78a08faf

SHA512
24a964252dc2ab67742e40fd2f9d08bb020fc9bdd1280fc7caf85abc06c1fdab6eb5558f75475fc3dfa584735f4b49a53c51148c0fd21e3e0c68a1061c9372bf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\a4deb1ca-8dcf-4253-9550-bb0e0a59e923.tmp

Filesize
2KB

MD5
8576b8ecfa0f9bb538066255af1ec540

SHA1
19fb9a1f0b572636e9238795093f2093621e6d4a

SHA256
5a8fb53d2fd04e9b13da007f5325dcfdefdef07f36a62b8def7d41129877e942

SHA512
1ce07377f8d87e289306836ffae38c7fbd4ffd573f538e948f8762f1b47cc8f19025f8f0b4ef29749045cdc0cbf48cb1b23053477f24255c1dfcb2231878f134

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
129bbc2e4e136de45c3af6d57c5ce592

SHA1
79646132ed7ba2a0cd7e79a1da74049399b78278

SHA256
ac0b28ead2a50616f2a81b8ce9d3958a432a2e76ed046feedf18d0dee42228c7

SHA512
c5529b885fed6cf600ae4917687bc71c157573399c746f28aa7df78f723165895c7d8a5e8869d1ebd84c672698f84fb65bd30f9c0652a843c1dbcb5031e7be40

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
edd306a58eecfaa3bc5c2454be4fe036

SHA1
fa763203ad02eb75c0741ade4a036c13130f90a5

SHA256
6b85b4ee6278c2b9ec39ed0ac3448028e357970b7dc20c7b7342bcf7cd9a151c

SHA512
e95711bbba9bc4887a5ccde2ceb5b8bf71f1b1fd067d36d5871f96411e00c7000f00211c4cfa9fff35fd4593de56ee7253c3b9b7da77a319f39a4753b1c14d56

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
5fc9bdff6bc804b5dd55229cf2e28846

SHA1
29a884da7f265c3bca4ed0605f10bc466d8af4a7

SHA256
78527435a27d53f6e6ad1a3339e4b811598e4c7df975141d98e1a4098bbb8a25

SHA512
efb1774a86405d456de9f9c9ac6468163781087aaa5abaadcc1a07891a6aa182fcbe46a52fd68e986c3e824688a9b29bc19b7ec87e5c9ca64ecd2c180914747d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
9fe8056a28d7b7bd1742407e455f7e0a

SHA1
9b93d1538cb3b1fee68ed0452ebf4e4f5151f4f2

SHA256
8b5685e5e21717bed3afd51d49a14e9fbe741c31d9005b6fcbdc4947b76cff30

SHA512
7ed472c94f9820764a3154e7e306a6eb62874d6403e6d437d7178ff9812a97c80f0d39b2506c8cffc478e4e8e232dc2046b48f00ddbb45261587554d423102f7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
cde4f91e57169b08c459e078780011ab

SHA1
196c79178367a13977afee38a7b6c3a2638ef651

SHA256
30f265dd8f4b775b670677c79dfcbe789b14c58a1befa46b6b459bdfaa3afcc1

SHA512
579dedc1f1bca98759fd0afc12bb9a4bc34fe4b61f3438c4f587bb6dbc3166d524d7d6f3827320d9aaeb9d5cf42fa6896c3be1c0f26919b094396732ff88f026

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
be2bbf5ab021f9d38ab7686d8259f6eb

SHA1
b682bc6ff9468431b84774b742508a6c0cd7fd8b

SHA256
7c4138d2930c0c26b6a0261cdfedaf2c49aea351ef91efca0fb98323585a7858

SHA512
02f62f3bf4e83cddd8114c7df80d7bc024a2bed8ece7c2c3780a0630463542451ac7c38ab8ab4bd3da86b47f100b007e23d2ac4d6a93be3e229183dcd90526d3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
bf8cd5b3a5c2f04bb6515847af144005

SHA1
d701156203894e9a22418fe84ad51c829d6b4dbd

SHA256
c038e269dcb6dbe68f4259b484d54dffca2c08f43e4549b0824ef60222ac72fa

SHA512
44b4c218c7b21a75f7b75331753489efb0ee9290ffd683d2689746030cf6df241a6de29f709b45cc73cdb87019ba6b41a40faa354bbe3033c3182340f4cc9c6f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
ce2d1d4ba1eabe741c5277ea5093e754

SHA1
7aa36aae2755926154a90866eeefede73e26ae2e

SHA256
0a4eb164bebf863098294dee774fbdd84093ccfa5afef585a42680cd955a7a89

SHA512
97ed10ac845b7bcd3e728ace6ef60f04c35b681eb2266d824ab884c62b3f86a695b8a93d6fc8364cc8241b1619d1d9124cd4f96f56a342efb098fefb3295a7ec

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
262abb7e0b7a5e97319d414ef4e2956f

SHA1
87c46d049993ad21820860144753ce24a839882d

SHA256
531311c1329e52ff722e5f7394132d2e11e8952f8064e5503e8f3759b2341b60

SHA512
701c47d3ccc87dda386a9fa42bb3435e1d8287e59ff3e9949dad1aeb983318a3650a3855c8c50ad60fa5fa591ff5075662f34be1ab99afd37408d73cd8ce59e2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
aedb77813f9d8b17786b66fbcd60e782

SHA1
f313b90ff073829d4d47bdaf33f2147f22bdc806

SHA256
374c08238145693d391ccff75e7fc72d36957b881431543fd7003a12ca9a914b

SHA512
ad082d3c7b597fb571598e1becdbb03f41d91625327a0a4497a8448e391ffb6b7489c5edcde2939735435e6d8ace206e56b6b701cecffd6689d63ad6d52062c1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
85ce222412c766b8e94d3e2099e6ef57

SHA1
7756e0837057b3d105912b1c93ee4a3f3448c760

SHA256
508e48a952556977a327f20cf6d24cc482674832dd4f0a69b88602fa07be5ea0

SHA512
3f9e773534bad1fe3f1fb5372f6528718eff3bcf3fc89cee8c8f780e312772aa88158f293e939520eb7062ff2ff8fda9a16e2fde3f0424827249aa0a74ab5b4a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
e1a972f8f16c8145cd30a5637fc2a155

SHA1
ec63d92f3116935965719d49babb6eac1db1c9c1

SHA256
f3e5a167bd61775a8b3e472f3f0ec13f4020b88e028a8f3557ab07400a401dd0

SHA512
0924bdf3ceed0c4d943c4c2cb0a76fa816928b1abf2ec1073cabdec7f9b6f30560b6dc83433fdd93a9ab7bd1d321b7e331a0e9327156cd59d99026d80c2e17f4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
157KB

MD5
b0b232958c0485da98fe340fdedb9141

SHA1
5d5261a8a2343929a00eb6830db3f2235772f8c3

SHA256
d086342c1df31a8464e49100b43ff4afb42e69c6fc50400192b979ba6de3d320

SHA512
4f5219f38dd2fd8cd48a39788c7dbbf59aa005d606e3d56bad5271f43763c494bfb9908e4aa4a1c826db08bcc622208283ab7ba66a9de062bfa1c2f329e39139

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
157KB

MD5
03057ea7905bcac61b84a2fa664508da

SHA1
efb56fa5f67fa483027eb464d2be8152cbab32d1

SHA256
fba376b3a32d4c241ce1578dfbdcf69183cee54286e6625569ca57101439f00c

SHA512
360a486c55e6ba97ce7ffb90e2c75d8be835e4625570aa2ca3a93cf6a4cbeb33d9e9af3a62ad9a8570185ecd985a9d740617d6ac615c709c936d07e78490ba2f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
157KB

MD5
bc146cee1d2bacac8b5ee30b82e8e362

SHA1
60a15d645323cddcaabe40377851f784075f62a7

SHA256
a6bd0a65de7b198b667df1b1d0c36f8991e9be4b69c4ac1d049ed8b851d4f62a

SHA512
cce88b86a9ea7f28a01d55f4a6b7d77e253078dc14a717c5b9cd047ee2df603ba6bc0123a9eafd23ffe9ebd6a012d04d9cbd16bfa23f566beb13898db0fb992e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
157KB

MD5
6982248a07208ed7f1a67c3be94adcaf

SHA1
7ee475a7a0e91a36b3cd77e7ba6dfe400cffc4ac

SHA256
0af008b0be939a3594833f48f306792dea628b3f7e2f5579110d6f8cf8b35a98

SHA512
c275f883e0186e40f61303724e0cdabf19f1b4bbf9aa13046a450906447a67ae60845a91bb1da44ed01c258d09a3799da1277da0684bae56ca8dcf810a3218a4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
115KB

MD5
12eee31e47b625dce0212ce476519108

SHA1
ad8d6063408cf7d81568f46ce41ca60f8223b324

SHA256
dab397e294d134d4a2fbdaa9056263105d3a420708e3773da9e85c0456189065

SHA512
2fc99dca2738c7a4b67376446071bc8cba820b75ad2ca43378787e33c8a728fab6c55ae656e0a67b7b170838cae3c2dd89ae4202f1896f092669495c34817afb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe577705.TMP

Filesize
110KB

MD5
18bf638c00b2811f6e4f39d89b28eecf

SHA1
0a3a2dcc49ff52bc980fe10d1ca67fe7c3be15ce

SHA256
adf0ffa19ba48ec6f2bfa18e593516d6b11ff0dff14592f09b6a24507f4fe372

SHA512
c0c68fbc549835862109f2f921d9ef8b67fb7a572c17ed5b10e612a768df51f0aa4024991c65a005a5fd8d2f4f601099b1425eeb3709844f66309d1f13c8ce4a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

Filesize
264KB

MD5
74b8c62a70dcc1be70e1d77a79b48ec9

SHA1
2fa1c30bc7b61627e42986c9bfd90e9387956a26

SHA256
fb8dfe05b5b1b5b79d5c5a25822168050a46acb65932e9a480396c86e5a93ba0

SHA512
1729ccdc082780ab6e0017f3917737ff54a2f4f03e57d3a9b5434f87e0567b16b99720d8db32b5083a626b3c4d9cb5e81fe994aa086c17c205ee697bbffd278e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\log.txt

Filesize
706B

MD5
13edfd57406450632b84493c67ef5d44

SHA1
7a73801e828790d2b19822d8f3e595e030cc8131

SHA256
6d9c992f2b6f9e24a42a40618640bcf827551869a0d168c483f4ca1af482092e

SHA512
dbbc840c50024a0088b47cb72fc80efdbd060367bd5546db3492073c988d2ac81de18467c0a1c3a2ce515b4ad07b0d66b5ed62a408b44392d6e2e459cb396a2a

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\log.txt

Filesize
1KB

MD5
ae9fb808629a7fca60ac751f52888d4f

SHA1
4c51fd43389190c79649764c6eeae3938e789bb7

SHA256
d9009f157f7262c447ff7f78532ed26f784fe4af4a8866d519c3b49c870c7996

SHA512
e9edbd5a9b2dc97de9f43d040560dd6e04f2537231f91b79e84c6bac029de326758456156c00619393b55479e0a01eb7bcc0b0a463822c5078311e6634f73853

Download Submit
C:\Users\Admin\AppData\Local\Growtopia\log.txt

Filesize
1KB

MD5
0fb58f6b18f7b1539a2aa87ada74071a

SHA1
e22939b7798b1e9ce64d485b801434ea092acc85

SHA256
f0558ac442a5dd3895935968ad78bf092968cf3749bf22cf52f29cce8914a9ff

SHA512
5dd12e3abf2be405ecfd597c29a2e3430e55fd99f5e7203aa1237a3b79cff89b648d0ca9dd4865dd21bcb40497c2ef2816be595af3ee10b4b530c307a921d23a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
5a10efe23009825eadc90c37a38d9401

SHA1
fd98f2ca011408d4b43ed4dfd5b6906fbc7b87c0

SHA256
05e135dee0260b4f601a0486401b64ff8653875d74bf259c2da232550dbfb4f5

SHA512
89416a3f5bf50cd4a432ac72cd0a7fb79d5aeb10bdcc468c55bbfa79b9f43fab17141305d44cb1fe980ec76cc6575c27e2bcfcbad5ccd886d45b9de03fb9d6d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c1a3c45dc07f766430f7feaa3000fb18

SHA1
698a0485bcf0ab2a9283d4ebd31ade980b0661d1

SHA256
adaba08026551b1b8f6c120143686da79f916d02adbef4a8d1c184e32a19fd48

SHA512
9fc93f01ab4b14f555791d757ffe881787cc697102547c61847552e597e206e70c6d35fedff559c72a0a67d1b95e769095ecb0a8a7d4f07cf58a7a0d57d3e9f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
21KB

MD5
f0d11cde238eb54a334858a3b0432a3f

SHA1
7c764fe6f00cab8058caeba38eb7482088a378f4

SHA256
579adf148a5905868140df9075b90a2ff33c9070dfd35b3ab869a2d9aacd9a96

SHA512
b3e590c88b462004b29ced18027f640addd1ea6ce9ae584820054ca508ce7d626acb3bd729e3693b50ccdc5e4694b1aa400cb33a315a475de47f5b25ed964d02

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
69KB

MD5
9b13f2a8f8de9e8da40c4e3e1392574e

SHA1
864fb91867e4c429d8ab821763bf11ce15fba384

SHA256
66094d65d176790840968a73dec5c88cb77d1d573a9cf8c32da223fffe41cba6

SHA512
9e40798ff8b457b8089c26b5745b99cb64dd125f0210894fea156346c767858e71b30af383ba8819bff54a0f9d1319bef0466b3d283fcf310d36570e4cf69806

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
64KB

MD5
d6b36c7d4b06f140f860ddc91a4c659c

SHA1
ccf16571637b8d3e4c9423688c5bd06167bfb9e9

SHA256
34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

SHA512
2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
88KB

MD5
0243d388e8b9f0f12f7d2b67e719cf73

SHA1
39bd292a8a602c774ce189103b51cbdbee85c14e

SHA256
f7a8bf314a7a54ef1a2ce6d2ed661c6ed9c41dcf756783254739cf72416c0c73

SHA512
c5dbfb863e46ecb046727f23444f1748b24085618e423d00a936ce6870a00a670c9fad389d5b95a1527713c987a73432b43973a30439c59b4f137388b544acde

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
85KB

MD5
45a177b92bc3dac4f6955a68b5b21745

SHA1
eac969dc4f81a857fdd380b3e9c0963d8d5b87d1

SHA256
2db3b6356f027b2185f1ca4bc6b53e64e428201e70e94d1977f8aab9b24afaeb

SHA512
f6a599340db91e2a4f48babd5f5939f87b907a66a82609347f53381e8712069c3002596156de79650511c644a287cbd8c607be0f877a918ae1392456d76b90ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
1.0MB

MD5
90777172ecc7d21d15d5b5dc1fff417e

SHA1
7fd6cbc721d89d42878a8405c1e11e727dac2753

SHA256
0c41dd93a15589332be17cb2ae6174a3227bb5481e8319992769c5a8595237c0

SHA512
0198c7dd1481128591329362635fdb058852ef7c520e45257c0e6825d3cb184cf652226ade0a5e68755046a5b42efaf7258c4697db44dcd7ae470149e5d6d654

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
45KB

MD5
ed41906b0ddc2618580f06d717a3d285

SHA1
54fa871fc6dfa89e1da0e7d81df893e9f45f037d

SHA256
a491fbd67ddab379a67223dc67f3ad88da3b4bdc472b83db0d98eeb1245fef7e

SHA512
a9fe8bd101bc4bd217378f3a5525d27ef7c21d2365cd43110e63632906ba0df0dc7cf9f9976d98b20c38e016657d30e4370be070c4f17a4ed62a5dc85e511124

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\00a87941ae1f2e23_0

Filesize
3KB

MD5
97f09263b52efa5ffc62a809039ea88a

SHA1
e8b33e907da7dda2bb9e1987fe73821d7f64e280

SHA256
d5f26e4fc8537fc3688bd98f726c827a8f10734cecdb0e0a3733a2c86b3313c7

SHA512
1ba5e95857bd5e21de0e5aea64ef5b6af5b44d7663074b37301016e9c9a6dad593b3a776dd1ba3c1f0caafd9307880079c5268c90d47e351f67e9ccd693b2da9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\04556f63cb82ee3e_0

Filesize
289KB

MD5
230f60da771dcf6ae1cca8aba5a22fd4

SHA1
b762d809101a7c27b9843fb0545a88db847a0ba9

SHA256
0f6b1ad62ddb091bbdea4b4d2fbf0920ccb8e66a8f3576daf80910f203b0f00c

SHA512
a92137b42513cf2bcff27e14734ada19c1685e03904018c92b0813f2b5f6198a280a7ab02281fa10e7da20c1feecc205760093964be41c1b99b70bc88e1ebfd9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0bd8629916c3cf89_0

Filesize
9KB

MD5
26ce1ca39c9576d3a50b4aa815cdabc6

SHA1
46db9cf09c69e1c5ba9f3df3a9381c4c9759697c

SHA256
d313ca09fadc6b05ff68d1b0d507990488ad3f45b0437613f04d107e22f737fb

SHA512
dc2bbacb86d7aaf7dc49141539b8a151e8fe11d8b495bef348d100ca3b95930af78fad6bcbae2ed280c27f7c68719469bbffa62788b16fe1ea66e44d8c355640

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\10a60a2cc281c452_0

Filesize
262B

MD5
56d7d7786de3673bc729f9de0aa74fff

SHA1
b3426c4a7fa1c891f48624e24902bdbe562f4741

SHA256
4616719ada387bb982b2907b40982de8c9288c5c7c99c301d49ba73e3c0facae

SHA512
4495240d4d86ef2830427c2a44911ff8671795c163b23efea06ebeca79a74e665183289b6ec7a40e1cd4e06ab87c8cdf0b90fb168c9ce42159dd3bd9c322049c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\186a34ab13c00db2_0

Filesize
2KB

MD5
1207cf446bc9b54c1359638a7bee39f4

SHA1
adde377ad2433728034f73b51a13ada5095b2497

SHA256
8c1745a46b8be4bc3aff55a7aa46e1654524ecbe324877a8b31f3dd911cd0bca

SHA512
2cc2f1718cf5d34fa5b1e2037033e6d2acb59ebbd5a1a64b233ec31ec3cbffad084ef519a853717a5de46dfcdae5b411ce1875972999d23137365171494c7f94

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\32c0c884236c3f32_0

Filesize
25KB

MD5
c2bb7c4ed90e31466a1904182afbf60e

SHA1
95c3d633c9c0625e8b17b67eb09a3a579354b53e

SHA256
051d3a10996ee08a36d1e78862da23ddff50d633472e8a56b8cac476af3d9ca6

SHA512
8bb9ac7e2b4c99756dfd8c67dcb360db41c3ef48b66d27e4da37721abd64213550286ca360b25f5f9c89617f9a098926a51ebd4a7d2d4475ab1a4a76def1e3a9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

Filesize
1KB

MD5
b9cba9993e61b5a6b276bda29c39c4e0

SHA1
bf693fd13fdb036803e940b8789e61df38c58103

SHA256
bc37bc481e2216720191b56d2d25b685dcf817128bf26f141d6e021d9eef80fd

SHA512
e0a045efe1f0ea62048fb58564333533323ce1f1cfb913bd2a8c388a2243b199cf34f4b2609ca0febe5221c6235b2ac17201169eb11ed82ba1706d729e2aa682

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5173d41355a06d2e_0

Filesize
28KB

MD5
b86e602b819394d61305fa2a529c7182

SHA1
301243509d65f856bd3ab718767484942ff8814a

SHA256
a186d35bb9773245a277e32c2185647dc1445c64db49138181eaff82e3918ba6

SHA512
32b59ef11766aa23590e4d7288e6c92242f8656bc3aa432786cbae161c5cae8b7b35a396c4ee41ec0f98837bf374855a9c88e6d8d54f33f31660fbc3ab006301

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5211b524ad913a15_0

Filesize
1KB

MD5
5bc199ebd85be39c9ecca61f818c988e

SHA1
e1f93da9cf4c5b8316f3ce07835dd8e1adb87f08

SHA256
37e660b73f4f43fb512293fd56ce01482d37f3a6f6291ce37562833a5add88c4

SHA512
485aef801f4ebdb08bb7a64ea55c870df416a221fba1777e9996fdcd2e2f598abdf7b5c045ffd3f950eebc6d0fe65ca5deb8d1dc17986704befb92bda3376261

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5c53167000f2b9c6_0

Filesize
27KB

MD5
32e7769af043ee743f823fecf2dff435

SHA1
0854e3f1cb605cef142cfb951a7862cc5b8a68e0

SHA256
0183bd6a86ab616ae817f39ea9f0cd7bbd9bcd325bcb4fa66fd0f51ab5881992

SHA512
398a0816ca7a1c633e49129298577f0bb448b5f738d71e65451ca28fb266418f2bf1cefe172ab8268ca600af90aa93ee122b2fe477c377257b496e2159f4579f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\62c0d191c42347f5_0

Filesize
4KB

MD5
453fcfb6d96fc4881c2fa613edbe8faf

SHA1
e8fe48e7bff3f22dc52f263d73d64aa90d705b12

SHA256
50f4516911577e33ba25ee5b77c1c79b5b0a8a1d2bde97aae30b6d3cd62a40a1

SHA512
8fa112de362fcf5b0c0f383005ec57aa0d07bf898ae1ef0e9d39c4df3dc6435f5b5c15b8836f6e23efb309130ab89a3fc2d5a6ab6694e625ccf61a2561e937c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7054c7b6ffc9b6c4_0

Filesize
6KB

MD5
991c13457da0aefa1119f16b3dc6b832

SHA1
7e9626c7cc38a5000e085002d82a55b37af427f5

SHA256
b271fba37fab99591f616ee753ad5d0815409e4d4d9c72eab961ebb0a5d297de

SHA512
8c38317d1459c91dffdcb08a20076fa15d932cf03f96a7542934ae2ee9bf0b3c00d345ae0d39ac188b7767a7072a5666d910884dba5b37f461b0477885cbace1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

Filesize
1KB

MD5
e0b1a0814ce46a7a2ef182662b3b9afb

SHA1
8f25f5f78a2e2d707b2b0649363ef25b5d01ae71

SHA256
efcbd4d98365fd5c5f3da55b965e1efd9214a0e4ce06769aadba2ff8ddd97f4f

SHA512
aac8ba79702d0debb6d562174f50acc6b89eb18446fb67a42fa8eac3c0b908b36f785cd559db9f1c01fef655c3064bdbc5b91bf5766d3b3af1cbe945b9c5d202

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7e17667ce8ba0abb_0

Filesize
1KB

MD5
3625abccfc1b2256c6c8256c3d0e376f

SHA1
56d5cd73ead0c953ddc64452239394dfe3231c2e

SHA256
28d794a3100855d722089d8d9d0ff480b660a5b71e1431d03484ab595b626071

SHA512
6a97bd39c5132e6d6dbc3ed3c52313d967d7cae086cde2d128045b05a2cba4a027a646018c99753c0e6c10badc04ffed1979714a5bff941a7f2c7aa0c4b7cf84

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\834054908d262d98_0

Filesize
14KB

MD5
647c9776cb38a42987143450b81c30af

SHA1
ae9a27e1673b5b36adaeaad000691e354947d254

SHA256
efa576407ce8aa3d6e0340ebe16b34351b78f29b5d12351cabe22d74d3de1a6f

SHA512
e4917513992ae9b62bc2223230ed04505a709784059c94023287548ec3e3f53c326f796af4123db06364a6545aabea2d75e6e17a6200c4fd94fbb775508871ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8aa83ce3a1c3b096_0

Filesize
2KB

MD5
a69aa0ee9e3ca5f3bf97a0ae243260f3

SHA1
7bf9ce7cfef71846d7fb5664b92d4447f4821b91

SHA256
d2b8a04f59db93c1e402585d4974430aa212d98d3d3d3b217173d99dd4911bd1

SHA512
9dd8c40b59232e9beee56b996d1d9a9df84ddafe939597b35aa4427fc2c3392df329cc60d3c29d57c8196fb6d20baf5c73403289d17ef44c4daaaab9178a1007

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8aaedf7fb3c68b02_0

Filesize
436KB

MD5
aacc81e209c3b114ebb910e217e7dfdc

SHA1
76172cd8169c17afe85c3dd43a464bc6586c3c1d

SHA256
d9a28864e49ccebc2b3e93fffdfd6593bb2bcbea85dd7aaaf0cf6174a70b4852

SHA512
9286ee6c59a4611c4d4cfd98c52d6f26aefd350f8f6cfb3c46c474b04370bdaa2e142ee8c29a5bca9352ee8e598cd28bac328d35e11be3274d51e59a07f80642

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e908dfab08a5484_0

Filesize
262B

MD5
fa26ff2cad8df4d392bcc8e4eb43c0d7

SHA1
4b5dd773957fc40e40ac112d24d4db7c34c31c6f

SHA256
52d216afc90cdc833c3853438052cce85fa9a48ee6636e6c9fd2b041bf0ecd0e

SHA512
69a7504f6b1ffb3156a01b013806fb270f661a5b17b768613610370559bad3d84aad30ed2fa34ed90c60fd850bf48141c8b2615c7ac8b05cfd7a80a2b5928024

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\91fd980ca12d3d04_0

Filesize
14KB

MD5
a78963aa9060f581b0fe9b6807ab1e44

SHA1
d0a284da2ea64a0b1a078fa64c8d1d8a43ba8e1a

SHA256
e9906033e2f63df4d977dc7f90579b19a90697d5f178c64a998e2055999f7646

SHA512
3533944444cbae0ec8275cc70207f91cc40590f3ee793847ed99f6fc7c37a41fc5d889589580aa10240161cfbb5c493055bdd77462b1522714084946d81bf9ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\933aea86c8800b23_0

Filesize
2KB

MD5
98c39f68ad061fd937cd67eaaadbcd01

SHA1
8ec79b4cb03cc8e357cae8530aedbdc9e6941ff4

SHA256
8e3f2f1eb1c52fa1bbc3f0fe1aede164e7eeb632da612271f23c0153f47ce59d

SHA512
fd70db422265281ba1631122fb0b9a5c88205b14cb32f62775098c525e025b28b001336330c751760ba05e409deb5798b3ea422b5ec251d501477d80ef4797b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\94ebe1630900d094_0

Filesize
7KB

MD5
4cbbd8dbe76e6af1fdd3cb997e64cf7d

SHA1
9885e52770f3a8a06890b2916ca5edbf59deea91

SHA256
bf267bf25bf94e02996e12e672b524fb25d9a2c190606f0586af532a2898e876

SHA512
6e5759a01762815f59ba4bcfc95e2596f2b40a6dd485bee5c5a509cb26436e1af5d2868380e0168886edaf5bc6a9fc787a2ac725d9d6c37f3d75721f9dd3704a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\958bd1750d5630ce_0

Filesize
277KB

MD5
03a877347b4bae2aafead3510ee91428

SHA1
a077fce288f87b4998ac43c6aa29eab0195327a5

SHA256
b92ea526b04edaa09b0d88b3c4843b4903c5838d1437394c6b6a58a335505141

SHA512
a8bb4215ee5242970666efeefe13496b304fee1990c0aa298a679eef35965763b35ad2cb325d3be86153f42ab2f226ff0dbf192b7d06de7289438478954d4564

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac9b40a0411376f7_0

Filesize
1KB

MD5
130dd6527d7f9d7a8f9842b321258b97

SHA1
179b06525fd3c2d4d41b82e8e185f679f3c4eab7

SHA256
b9b815776b6c23c884057f8394919310c9b938a4fc2a0f419a63e97cbdcaedfd

SHA512
43c95f088d1cace64efc41f416574a9e9eef95db920935dbe68332c8a79a5793318f3d49c78723e0d9adb5cc9f22ca6c57c33e15c1c2192f079b6198fc071a48

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b9caf8d6b33159d1_0

Filesize
1KB

MD5
733e5fa33c6cd6118391ab4a112aa30e

SHA1
035062abd0f310b65e0635b5cd9e4fac60321a94

SHA256
4b2b7c5a89a053813203e94f534ea2c6553047e15e23413e117baa595490a2b7

SHA512
bdadb95001b02c449add055fc3b313eaf4e16045682b425932ab5ac2ce7a6a26b6fe3d4c601e4f5a7cb14d5fb753635523208e15f2c9e408f8860f314e1d3f17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c964b2e78d272a25_0

Filesize
7KB

MD5
9918c4aa0e49f557bc8d1db7f3b38055

SHA1
8f4468ce66618249525f36c87a1a7b2d3689995a

SHA256
52750c0fe82b7f5aed50e4f060245c1a6b4164bc7cdd73ba022c4f276f4fd860

SHA512
15004c423e2cc21b41c2cf041d0d3c7cf37d62016791dfa6e2aa46ac80c3d87228164b2a6704ff8c8de14092a9e56e89bc8b78f250e1a81bad8b3882875ad535

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cc10b10051c7b97a_0

Filesize
2KB

MD5
c0dded58ed1b37fcae30f6c8ce70bd03

SHA1
9041a453b2b9e98e13d2c8148235caefec9ed5cd

SHA256
8fe8adf053fb3bb4afba2a4f7896d96fe68925531f68f1ab22f8028a63d74397

SHA512
dde84e2ceef1a92afc7c183bae7fde794a3e9c0bababa244f24af506ba97f4cf62c0000583493be2dfb39f246ac7791c9b5dc5962f4f7ae00b38730461be4499

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cd547dfc46ae03f1_0

Filesize
6KB

MD5
559b641de7230afa3f0cff2c97e20e02

SHA1
c6781fd36d748232bfa9e05096951f0aeade3c6c

SHA256
b9101c3395997d1a73f0f950700174ab34949d2790f15f952f463242f15c9efd

SHA512
6851326ce09948212d3ac2186870303e3f6f2f73f7d998cfed8aea67821609fb128b3851e64e3c6180a9ab9d0e5623b5be4517115b2d26adfa87f0a340eb5159

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d6988dfdfaa8af42_0

Filesize
4KB

MD5
a0d2cac63ced32924ecba25a1b6fe749

SHA1
a61db17faea68772866ba268dbeeaa04c9a57f48

SHA256
2d03b8fc5a8444c6b02b278053b582b9852f40c21de1266ac4efeaacb47d215c

SHA512
9ee0bc450bb483e16b6d0a8bd5fd1360c749ca482de5f2424e3f23248c38c479b0b7e4fa11bfe28f2312cfa7450b7c89b322423e5dc78ebebfd53507d323739c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7a29efad91a1117_0

Filesize
262B

MD5
602d42e3a295582400d7e364e15014d1

SHA1
3b049ab4065e67686296dffcfdb077ed7b8fa2a8

SHA256
bfba620febfe8569025df9f44aa2b96b17bf021bcfc50d3c481398fe23a20586

SHA512
fa5ce14651ed4ecbd39db1cd9c41893062d56408e25da5442db2d3f92728c73cb0d51cdb04372dcf575e2d6276d4e221ec065b36e7ce57aa30f5d9376ee41e9d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f89251fac2b69325_0

Filesize
3KB

MD5
f7a8173aae0c5eebf0b6170b8726516b

SHA1
d0ffbf91d06f579df84a11be9aac5f2a2f09e5de

SHA256
9c42bd165c159b26de08cdea5c8d0ed37d0bb4c61bdafef133dd11035a76b487

SHA512
8cee37f3c587a8586774db10e9b5918bb505145f840f7a1843d4691a02d558722bf603950ce3ea7303467d04d970d9ddf6078668205f6289666fb2988a166df8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

Filesize
70KB

MD5
e5e3377341056643b0494b6842c0b544

SHA1
d53fd8e256ec9d5cef8ef5387872e544a2df9108

SHA256
e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25

SHA512
83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk

Filesize
2KB

MD5
1470f917f1d458c599da322056697847

SHA1
a2d2b20cda50d8184d1eca2a576c2ab3ecc5278f

SHA256
e8517ba0b0be67c318727dbea25e298c3833c833991d239302ad7d45b570893a

SHA512
c198649b6c5f808cee790f1c54dbbc18f69d75eb21c30291ddcc1ff3762a5674e926da33f1fa30fc78ce23d3c88fa33d2cc4f71e2c7b4dd187e117099d983188

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
315B

MD5
b10ba3b0580383a6ed4a89adcb4472a1

SHA1
f62d5df6f1f357fcb1183f35843dc36599a0236c

SHA256
7f4b06c6a050c444058da3bf8e44a7f8a7ce7933ce63a386f31c88b193a27ada

SHA512
658b17ffe30059cba3aa2788cdf7799c85f294186b5374998e733961d2d7d88c689502d7e0f6bf128a97a39858e105797e46d50129b062d10aca93024c3873a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
42803de3799a16d2e9e2952f6d307318

SHA1
49e298f854ffa233a1b391335dbf14e2474fd343

SHA256
14d1557716b48f06064db36db20aa9ac2041e97146040b1f5b084f800f85e997

SHA512
0f932d9715a18e08cc15271c9f2bc7b59419b484142537750e6539b38438ae65ca43929f87618578bd61d4992cc744b8b4ac4d8be2bc04f81647e840bbbcca6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
4KB

MD5
ad2d0e661381ad31436fc4785576a2e2

SHA1
e27eb723bdaf9eb2f76758a30aa294264d1ef0b0

SHA256
2b9de7347a4b4338cafc9b70b928bad91cbbf45dedb475e2c2cc590ec682aa9e

SHA512
fe121e990c0bcdaaeeefa1d2ea88dc3fe6b5bc12701be9791cba1644aab4c1c2c60aec57fa243640cdaf4aa0e78b0a3b2a4ef0a310ba6717bff68954d9d6df63

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f7cc97a7da1b81b9df36d67c5762992e

SHA1
9302c5bc7c0124794f95929fcee80f972c7b74b1

SHA256
8cc8eacccbacc7ab24aeb54acf0f405042fbe78bee83b5a2652b9dec7a1f09b1

SHA512
fe9ff2ced7c3833ea168e8149f3448fa43aa25ab3d2c231cc3a6726acc28e45aa1ee600798da2a39247fdec93dd9eda1dafcaeb7ca0574afb8539e61d151f4a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
403233abf099040591a096bd41fe2303

SHA1
ccb5b4bb0fc0ad84c3188e0667285dd487251f96

SHA256
c187d819a8481138194626b7a42e73dbb104f517fd0c69ef5a7b9f5147fd180c

SHA512
580abc4a11eda9c6b0f3cf3677bca3d5af2247d596477e46085063394dadcb5f9b7077c08d1a04ba00b258d9802917e804b4bda40a5e771fc9c9b1283635d787

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c7b00b5695220d62a70a5eff3bc60a46

SHA1
98c24abf82d28c9d023ea136c125f4764980870a

SHA256
ebded52209347438d51977e44dea750e4c2bd26ecbc674d30425c1016f49091c

SHA512
5743a2994335708daaff40bbdd03b0b2fc3513b473bbd2eb6d5940dcb6656aff58b921cfcca2f75cef93c182fbb81e32b017f5e22bb0d2b1bfc4f93e4094c03b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1b5e5dfd12e79d277d6bd52bffc712af

SHA1
7b89385871def0339926e6ecbd8b28b601e01815

SHA256
6e571933280f0ea2c45003d03e458a8dbb114fd6a36a51518a148a16fb5ec53d

SHA512
8587b8f56964a6e60186465b116df3b212f4d99a3b41f6ad819ba01b3b43d49359c9230c4bda05046d15fac21e2533b81e626f26e678e0b38cb6270bd40b68ba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
5edab6d3ffbeee247ccb4423f929a323

SHA1
a4ad201d149d59392a2a3163bd86ee900e20f3d9

SHA256
460cddb95ea1d9bc8d95d295dd051b49a1436437a91ddec5f131235b2d516933

SHA512
263fa99f03ea1ef381ca19f10fbe0362c1f9c129502dc6b730b076cafcf34b40a70ee8a0ee9446ec9c89c3a2d9855450609ec0f8cf9d0a1b2aebdd12be58d38c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
784a51387993e9aeb34d4ad4ed93ab48

SHA1
1cbf9ea1b6c2ea18c8670f26ebf9c11d7d245bc4

SHA256
567af49b26f4676e8c8ad07b34db13ae7a9e19ba01e6bd1af390a611b44413f8

SHA512
ba34c55cea5840723b16f09f0a790f823a5a65657f8163018cbfcbc3a13c83b1b4b6a1f8ca0fe188c1ba7d78cc9319889235c0f6042a2013755fc6d820e4b9e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
d81166e54684239f22a714f50e48c879

SHA1
5183b563fa9e9b892a733d977ac0c6ff0904eaee

SHA256
c172f6e68df6b152c3d17c2e0afa4d3a222fd87076a9d07f20f1f136139a6036

SHA512
6384de36e92df634663aafe1c5547a71c96f60b9d920dc75ba553c9434b11206738941f193848b5261f3caf686f21dfa7572cbfb44af5204474cb6ac1f4c502c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
4152e5b1db451baf15c01567a742dca4

SHA1
1e80456926021caa948987fa8883ad2408b9c9fb

SHA256
9cd33f6c5c0a035452e632f4a0134006775e6c34945cd01c8899c8d72800d1b9

SHA512
8758e9782f394178a1e7984b12e87ce876ace6905cfca5719f17c8e336a68aaf9853b6612cb57ce2aa3bcc1bb2cc2f0548cec3218aee801962ba5a025761bc17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5f9b9d.TMP

Filesize
370B

MD5
b70a1beb36135bafc3da2a7ad20a424a

SHA1
8e5cf8bb11dbe8ab85e1bb771d1f8df88f9aac60

SHA256
2887c9bf90c42247f945365d61b6e4c2309aeaaae57cddd3f7d8b875d3ddc954

SHA512
5bdfe29d4fcab33024c2ed30a1c8ddc3a8a172ae69424e516bc23d59fa703f50b4d118c3a2287ccb56c0ecf83bd5b99bc2905101af3daebed2ff3630b36e314d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cdccd442-59ef-4d82-a75a-06d77b5912a1.tmp

Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
9KB

MD5
2e97048e7c4b0960d0c8f6ddf218bb64

SHA1
55dce6b32027fa75168773d6ab1a08af7ba14740

SHA256
6966d8652a58952d83a07b0605441428e9c5b9717fcfc4fd5b22c7b5af1ddbb5

SHA512
6a331c99184247b84e0c6036db5a2d9fc8cb7437410b96a2381d03773dcfe6b17ebb8a4a550f48086f619f16397a8f1865700ebbe7a803efaca4cbfc22eaf06b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
d3ebea73b605356d704c6bc2f1d741b3

SHA1
aa38f935c2ece8bcf691dea1a7f49fa92b5c345a

SHA256
36b9f26c0a1fbca726d20ffc8af5e9293870a3a29994ece45a3214d7f7ff73ec

SHA512
09e843bf8db4a7c79c5799593804de6e3c425f83bd1e8ebdf7ba6df7fdedb16d36d0956e7ffacf664f23517d0bd3b68341f473e912275a54165c551d82f89c9a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
626e95be1930ba9b51e9c6ecff8c7d49

SHA1
212cac0561a0be669d56baa14ffb744549f34abb

SHA256
07898edc412a620ecf70a583eb236f84d1f9b7a7c1bf9a0dff3d8210ce05610c

SHA512
8ad3dd015998a177c58ffc394565a03816b9e6e10c5489a4e9c34f60f81056de408bef9efb59362fd1fb91223bea07636fe4a1073352bdc74aa43fbb7894ca55

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
e6d83e864813156f7a740963b0a00598

SHA1
233d74fcfc8402348e2922612bdb2f8ddc8a5868

SHA256
3edceb693f41abf09c0a796b3c57af9868e89aaa07e0e53388106bb01e180d38

SHA512
f07a0fd3db28d4616cf911e530d39c3e9e9272f92d1baab5c4b25c6fc74413a7c55c4d603042a3e37e3bac0b7983631c9018fc2bba9fc0fd048d5d62f94fe7a1

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\activity-stream.discovery_stream.json.tmp

Filesize
149KB

MD5
e1c8a6bd89f3736c3fd4a326d257b5a9

SHA1
71a0e632373bc90f5e4ce62dec6f281f9f9597f0

SHA256
af99f490790fd67ab621c4441b3ab21ff12f9d9e2b300ee6c8c91e379ae29b34

SHA512
039b246a9f64a7b8b209c90df19648b54cedf06203da9925241a81721f74dadc71631b22019e288ac4f600d535c23852e8f5116468bf5a3fd25c8494df99c123

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\doomed\10034

Filesize
58KB

MD5
043b190a758c3624837e89ccd91b4faf

SHA1
3804132f23bd58468b55b4254417ef70dfcb7460

SHA256
2678655cb8c1a208f35704d55006695222873475f57990a00c281ea3de819cfc

SHA512
77cb2f508d1bc6b3d4994c142542dbb860ef8e637131a2632eebb717fbecb65091ba2b7f3931d8ec7432106b3eb6ab9d9655d9a3fa6874895d42be5ccb957b39

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\doomed\11511

Filesize
15KB

MD5
3576a920909fac7d9b9727362577e683

SHA1
d207a88d4061878d24e028ec1cc039f4233809af

SHA256
ae798b134909f16e5c6a2bbee22ec2883df045b88ad779b12b7900eb0de3cedd

SHA512
ca4db84003bafe554a9974cffc4ae67bd905f7c8bb55b740e18d02eb6fcd7c8136ef6a51ef603f6c35676e8644c8aea406085239486b36bdb06a4c3c21be46cc

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\doomed\16641

Filesize
15KB

MD5
fdb5370b16e19712538ba4da2563741c

SHA1
d7698e6cbdaff3b290621b395f8bbf9007d25654

SHA256
705d2ba6601bde4aa4ca5bb1354978ca96b42572f9cd67007d4e0275e9194af6

SHA512
ac5cd2ee5df89aff3e270c35669822618562cc998c37d283e42ca2a478cd3baf1376ed2ae9afd614a99964a64cc7000661a9fbd1a42ca07fa224142413d4974b

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\doomed\22489

Filesize
15KB

MD5
f6d745535f2b0f04ae9c4cc632f2adc4

SHA1
db5f963303f5d5498d8993db7cb56be4cdd8a41a

SHA256
f4cfa9924c7c7c9b972fdad29916b42ba846990292578a9e59350b35de404d91

SHA512
44c6ef8092797f9eb336d6fb9fcdeed6fab253f4f2035d90828960fba9b633d8feacb860f5bc2ba092839d50f3e08790963c987f3eec60dbfceae3831483a535

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\doomed\25997

Filesize
15KB

MD5
264eb54b7dcfea0928c4b2cb924ac9a6

SHA1
34acea24d5fbf95c7807405e96c2069b9290743f

SHA256
1d610d909b00e5d90d1caf054c35b574d5ff35b21392f38f21ea6b6d1ba5bde0

SHA512
e188e3a59d0522e766355c5a1f8fe153a709f8ea4f10b7af05fb164421890d58c8f538f8cd61a594eead6d588992384c485892285bd4006ff7824293f3fbc158

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\doomed\27177

Filesize
16KB

MD5
52c8ba7f5be9ce92171835b1855146c0

SHA1
c66a62cf782151468e0467aa62e0aaa813b196a5

SHA256
4ab65fe0106cec1c6ce48b9065b6e5f0ec6f13c3c4963b2e04e5f71b596b54ed

SHA512
4622bca74155c8377ca5d70efd58430d534ae8a0061f931126c601ef5eadcf5d48e1f87b7aa412dea90f73915b558a568806b8d190af446954d7245e243a2b87

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\doomed\29700

Filesize
16KB

MD5
5fcb20f3ee206f0e7020ad82fe853dfa

SHA1
315bd61d5ec66571d2e00a989ec06e371a11ac1c

SHA256
8abbae2a92a1bc68a894c9f3463c09dfe84dbd6cafd0ddd7aa5cd14e12524a06

SHA512
eb11cedc697c333875dd3a69a350278e297c2b0bdf5dfff3460ff46e211cde54ec2268de015cdd2ad83e85e1465a251c3bca4cf7d0528b9e5b80bc92dc4bec82

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\doomed\29721

Filesize
58KB

MD5
6e142778304e1e272616dfe57e15bc48

SHA1
9226b28b0ca8d4c224922fb11c4fbf77efaa30b2

SHA256
56803a973ec2ab2db50e1b1b267d4df8ba1628edc1f8a94aca4d9a4479cd25ab

SHA512
05e4ec26cf484d2eda7ef6ac45316ec66c42529bef8541318ade47fa6abcea2370626d80f03f7a717b88bd28ac3cb67af961665a459c7885ba60ad18649d4ee4

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\doomed\32678

Filesize
142KB

MD5
f5d5008a784aea14e58a99727d588241

SHA1
c0f0ffd57e8bd1360fb4ec9d57f1c79ec91a4b5b

SHA256
318ce599d09066a8132189a775e064fdc0521950e221a95cf838c20da7aad565

SHA512
0a1421f0781c47065673ac30e337e42dce356a8d3ee16f3f10103637c8cf3c4ebed4661683f0edd6082554397ada817f8faeb9073f4a2e5b2680d230ca4730e9

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\doomed\3579

Filesize
15KB

MD5
c31102511de692af5534742861e08830

SHA1
202c224be44cb65f553308489f652ab306889113

SHA256
918fe4b4c23bb9d5b87285e61139bd238c69cadceefb63a5014b1a8cbd8f8bb1

SHA512
b7ef621df3de6992b7be6bac6cf7d1b5b72cf0a4f2f01c4e3636f79f00335ca8ca4cdff2efbb657077b5d624cce22b02b25f4f4d2b3cffdcf76bbbe23d6da24f

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\doomed\3762

Filesize
16KB

MD5
4555da57088201376be4dd40f0f1812e

SHA1
8b283da4a1d48d2c6b5fedcb718663c5a6db0ce2

SHA256
861e6cf109e39a0382cceb604bc936289a4e03c057c660b9f6790f356edf08ca

SHA512
6152099ef34c034a90d45dd3d5785a1e81e608d2d59362cb710472fa2c49950929e56c22082f0648de10c5e0f56a76d27b77b05781f259c9cc31df0c51c0c5c5

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\doomed\676

Filesize
58KB

MD5
df6dea9467aece8d0e1dc8cd6c9d3aeb

SHA1
92e74c804be3121ad2b8916cdfcb522620c75820

SHA256
e1806a0afa575b9a644ba54777d03b07c046c37168173248a8a5471529348da2

SHA512
fca85131441076ad6d3c5b8862a931b4577bd0a42e47ebc6d4e1506c18a32c7810cd1490293fb953c573526d22b2113882d589792c1261cfd945db8d24f45e0c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\doomed\8798

Filesize
16KB

MD5
929bf95a902ff0c284f717b46975d35e

SHA1
11fb41545253f49e14cedbf47f387aaf91152789

SHA256
d490fa7e535c4c4358402265105c39c77bf1a075d6ae9e22caf7154919ec8728

SHA512
e270d349021366ff752081d18c7776f9e20195ab3403fab791477c3119effa62b1681b6117f51fe18d953f431821d1b341cb307186c5d601bd2d09459c4b6867

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\entries\1D3C039C0D80EA43959980467B5C8EA468BBF8AF

Filesize
1003KB

MD5
6387ecf8348f2aea75bbf8a79a936597

SHA1
f3815df110ac1d072c7aaaa5dc0378dd8773fafc

SHA256
a9aef4b86c06c34501df477d191aeb21fa79fd9af508ef72fa7f301c0f220be6

SHA512
3ddb8a585b40e11168e1782eb535a3b54d010a7377ad7f9b03cccb33b9bb60d31c1365d5ff50f0931c9dd0915f6bebd67dc4c2daa56f73c7ba0a13036dd8d7f8

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\entries\1D54EBF2995AEBA87FABC67BC263E1D8236DE8C1

Filesize
76KB

MD5
eb094c2625c667d1063f8d3ced4a667f

SHA1
f5aa8fc26cf83e647d04788a12f7a6fe73a9a2d4

SHA256
72224d83137e59cd22fa6b104a0b6c9973e16149c0a328edd9b092c441fac034

SHA512
9b021b2b2a44aaf08edcde9dc44aa1d78e62c845da65900e234c877f07493d9a7309af6eae694bd379b71d7e912bb3ca113a80ab52bc782d753034dfdc42efa1

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\entries\388BA4DC0633D278FDC4E0ACA5539559F78543DF

Filesize
223KB

MD5
52b42008771760b2cb16860029d09296

SHA1
b364ab280217defa130a13d38dc371d429e222c2

SHA256
79031c29036258baedceb91135f3916449aeac5d7b8e2a566b48f53abb4d8d4d

SHA512
23ec0a672f5afc7a4da6cb4f65e9334b211305b68117756f12a8f58ab6abfd8df085125b2584a14882a70a04519019a048bc57470d4df460519d81b085a6ec11

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\entries\42E54B839CBC5197FD35A06A3BDFA2BDAA2A917B

Filesize
78KB

MD5
09aa2836b099a886ce1096642ac99613

SHA1
d1b16616a2d9892b625eef1c4c0c07c945e1329a

SHA256
c5e3484eb92752d6678fa1c9b98898968682197c79bac7c458cfdba2dcf876d2

SHA512
9fc62712b43703dd88229be98a1d8f19b680c0ccd394f0702ef8998cdcac8483907185d2e1681697636cd5864666d6bd738d57b377c768ce731f59f98c917169

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\entries\4BFFBEFA0C24C10A328A7A291D42D1C0950B7A54

Filesize
20KB

MD5
7d8ad3c600dbab306cabdd0ceee6dea0

SHA1
b79d873b441d362f2f0f2614134c7d03b9c0af46

SHA256
52c515e1726be66921883244407765a62b2618dabac2b9564c11cd00793cd273

SHA512
632553291732eb2c24e5833705f324fdae782c710ea3fea0f6e098d76a90306d1a66586364bed730367c9dd09ac8019135cf0c7dcf676d8d5c6ff8d9acc729c6

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\entries\70D0CFD09964EA2B455A334495032B8A7C568FFE

Filesize
343KB

MD5
5a9721d69880a85dbae76b1d882958ca

SHA1
e68dd70159104971980e628d24dfc31705a13118

SHA256
60952b4d922b3e9af5082b0908b86a5ff7c1024f85aec77d9442d417a0a8364d

SHA512
ff7e66f0b1269c178b283d6b7b34b52ab0194e39eb67c5796f059a474d2e4b8a91bba433ca791c0c217c944e309ae61111ab74be7a23f61560a13b4ee6d642ec

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\entries\917816C0461E5ECC3EA5EC447AAB61007A4129C5

Filesize
1.0MB

MD5
cd08fb1a9bf3eb9c7d0d11dc021f5e01

SHA1
3711a6a632271c63c680018ae6e805bb6c5e00c6

SHA256
b7438004d630c6df8d159e6ccd39b1d8e8438fa15ab1200dd1904707832c4a8e

SHA512
9b1b734822d640d6370172cbca31bfca44304148ad7a85f95fdf8aa7e9bdd729ec49a1a828afe3ee129167e6f56d132fd9d6ab3fde5ba8f35d2f9589ebf3bb5c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\entries\92A2BEFEFCB3EB50185267ECA3CCFC373875DC15

Filesize
178KB

MD5
490b1c14152b5c451f4b1227abeace9f

SHA1
d54cd855205956f41e0fc10c111c56b5e619135a

SHA256
0c65e9bf69ccc50dcc91f894dba4c6d3dec916525a7edd173362d2abc03bffcb

SHA512
597e015c3495a695b94b2a9e397929bd2b35a0b165015e1ddc57e9a47c7911eaa652cf0838e81fbafb9633974da26a002bade9dca6e23251d83c85e63387f55c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\entries\9F1E5F86691263DFD27757FE477D0D579AE1C9A2

Filesize
21KB

MD5
123561e63f32630feee5683ac760dcbf

SHA1
13be5089cfa921e6906d8f5197c41c95a107d7d1

SHA256
bd12adc339adbf1b6ac30d3ec20eb5c41253e9e908f9a324907d24d1dd577115

SHA512
6f76b8db9be21cb26d25251bfcf68ce211591121f32dda8094dfb3753b888a5bc08a4be999607585476e4b3739e1d3074f5ebf2179cc9097ae3004df1e422600

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\entries\B69667E14877ADEAB16058A8ABBF61708D0FC49B

Filesize
22KB

MD5
4d62e229bb4a06dffebd78ea3a2a1dd7

SHA1
2214a89909b60d1913f18b450c4af0de527d6e05

SHA256
7d8c9314fe3f4ba6135761051426e19645d4d247197ff919cf7985613e5861c8

SHA512
25121a2258ce1145b1c7b82ab46e8af09a1eb7575a780d6b2e54d10fddfa973f0cd66624b2ff6303ae38e8bd7f5ee0dd6142d255a038eff61ded0f54ffc55e07

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\entries\C5DF24E4367B0E5117F8FC79C1668384FDCBF17A

Filesize
760KB

MD5
b4519b301251cd851904f4c1e2fdaf79

SHA1
222e98bfa51db42651263ad90108d560d7194278

SHA256
baff11dbc99fa44f76259b779cdef271187a53ad5f5594c3436ba2168f03485b

SHA512
36d3713a477ee7958238630c423422e5dc7fa21894e847ce7c8f250c67877cf84310f1191c7ae2789b313690e539633502d82c5c474abb814ef0e110f28dd59d

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\entries\E052DEE61E6FD9700125F864C52FEEBE3242F6B1

Filesize
95KB

MD5
a17ff56c48b443234ab68a25d3ec81f6

SHA1
03e83bd90ee7e85d5ebc10c704d5055cc66f1d00

SHA256
9c8b8e0c8bb1b93bc2a96947005ca4e240780347f2c1359b7a5396fea276afd9

SHA512
8da3cae0595bbc3f7287dc9ea67a8cd612429918b0ab33076d4fea964f558eec8abfdcc821db49b22deae8bf8de6091d546e638f88f6d7f8deaffa1b56ea4a2b

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\cache2\entries\F96A1A8368D3C3DD1FA81D170326E6C1C65D342F

Filesize
30KB

MD5
59b79d8034d4c2c220c94862fb05c531

SHA1
affe01c110ea1ba4a646cc1978d3fd1005a1c591

SHA256
8b3d4be57c1a74f475290f7751d0bcdc5d610e3cfdb458d0cedc3d9b03aa5124

SHA512
a2e9c838220f676b75c341cc040621e7962b9f1c595428110b41b2e6d8a31f5dac973df7ee3dcdbdea99d0b0cd0414de194d2ce577758d944da85b7d760d1925

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\bozzcyfh.default-release\safebrowsing-updating\ads-track-digest256-1.vlpset

Filesize
54KB

MD5
4f9ef3d3a71d4cb49e623e3f4b7b1162

SHA1
c2d65973b44b051d043475e9387fa7100514acbd

SHA256
48ae004f3c542ac764dd5a1e894918ec4b250b5c1f7209256c191cae13106b1f

SHA512
f7017204ad37ceedbff4e8b58ab4edac75748d2f36693e59ea9d9157f637d29b53c6405d994ac9fc62712f2574013e95c4817ff49229c78dcc23cac805b13ed7

Download Submit
C:\Users\Admin\AppData\Local\Programs\Plutonium\Plutonium.exe

Filesize
64.4MB

MD5
7c7fad19ca063dc164700f3a616d9455

SHA1
2429e0925cef643a5afb099fef6e0ec042c86bb5

SHA256
bf8c67473dce75c1fcd30063435b88fa0799c643988c7ead875cb891dc0be4da

SHA512
b2c6aaa28507fc5888956c31446abf8a3866928a73b1471adc90ab06b0ceddbf92dc55ef05dddb566a83a7158e90e8c6abbe6960e61973799e5dd2d33768d328

Download Submit
C:\Users\Admin\AppData\Local\Programs\Plutonium\Plutonium.exe

Filesize
64.4MB

MD5
7c7fad19ca063dc164700f3a616d9455

SHA1
2429e0925cef643a5afb099fef6e0ec042c86bb5

SHA256
bf8c67473dce75c1fcd30063435b88fa0799c643988c7ead875cb891dc0be4da

SHA512
b2c6aaa28507fc5888956c31446abf8a3866928a73b1471adc90ab06b0ceddbf92dc55ef05dddb566a83a7158e90e8c6abbe6960e61973799e5dd2d33768d328

Download Submit
C:\Users\Admin\AppData\Local\Programs\Plutonium\Plutonium.pt

Filesize
28.4MB

MD5
6f295a1b6fbd3aa01c06e7dcac51457f

SHA1
4ec9022d1f4142206c7153e27b52de5fb3371819

SHA256
121041a983f73f33646dd5937d5d127560c57098374518605e32e5b7a516712b

SHA512
2e23740bea8a2563d09592873680ee28d36a8df4ea1c48b5b24d48d5a4f6d4f2d7af158f912786d3f9639776c4d94dbd4837c25f2508f5bb06a995acee9f1219

Download Submit
C:\Users\Admin\AppData\Local\Temp\Plutonium\7za.exe

Filesize
1.2MB

MD5
71dfb0de05c1d6bc433caa9a36af87af

SHA1
6030bc29379cfc218fe0eba42bc072981f21ef1e

SHA256
22709ad7f3ec4c27517fc360194e174394bfa3f09ccff5e013521ec306dc2df9

SHA512
01504c0cd80bd7b4fa1e63f592939bcba9595d3d2ec63935a3e089a19fc1ab575dd85e81dea441f43ab436d6cf0b1deca34e3c353670236417091fd51ede8911

Download Submit
C:\Users\Admin\AppData\Local\Temp\dcd.exe

Filesize
227KB

MD5
b5ac46e446cead89892628f30a253a06

SHA1
f4ad1044a7f77a1b02155c3a355a1bb4177076ca

SHA256
def7afcb65126c4b04a7cbf08c693f357a707aa99858cac09a8d5e65f3177669

SHA512
bcabbac6f75c1d41364406db457c62f5135a78f763f6db08c1626f485c64db4d9ba3b3c8bc0b5508d917e445fd220ffa66ebc35221bd06560446c109818e8e87

Download Submit
C:\Users\Admin\AppData\Local\Temp\dcd.exe

Filesize
227KB

MD5
b5ac46e446cead89892628f30a253a06

SHA1
f4ad1044a7f77a1b02155c3a355a1bb4177076ca

SHA256
def7afcb65126c4b04a7cbf08c693f357a707aa99858cac09a8d5e65f3177669

SHA512
bcabbac6f75c1d41364406db457c62f5135a78f763f6db08c1626f485c64db4d9ba3b3c8bc0b5508d917e445fd220ffa66ebc35221bd06560446c109818e8e87

Download Submit
C:\Users\Admin\AppData\Local\Temp\fudxgxyw.h0n\Plutonium.Launcher-beta.exe

Filesize
8.6MB

MD5
e1104415b77754b95179febf911ad442

SHA1
ced87ce3bdf0a34d506aae0b4d729b964f66cb22

SHA256
e82e5fdf1344be72b2f655dbd02fbebf15416d0c12147823a9a4d9ecb357de76

SHA512
4f9c81c17e93d2e98d255ac42ab205c10dfa72bb9951c6bc94c2281b5f92d5b0bff0ebc0f3304261b49aaa7e63b3469b4f8bb1ac91216e267d1a44333c79aaa6

Download Submit
C:\Users\Admin\AppData\Local\Temp\fudxgxyw.h0n\Plutonium.Launcher-beta.exe

Filesize
8.6MB

MD5
e1104415b77754b95179febf911ad442

SHA1
ced87ce3bdf0a34d506aae0b4d729b964f66cb22

SHA256
e82e5fdf1344be72b2f655dbd02fbebf15416d0c12147823a9a4d9ecb357de76

SHA512
4f9c81c17e93d2e98d255ac42ab205c10dfa72bb9951c6bc94c2281b5f92d5b0bff0ebc0f3304261b49aaa7e63b3469b4f8bb1ac91216e267d1a44333c79aaa6

Download Submit
C:\Users\Admin\AppData\Local\Temp\fudxgxyw.h0n\Plutonium.Launcher-beta.exe

Filesize
8.6MB

MD5
e1104415b77754b95179febf911ad442

SHA1
ced87ce3bdf0a34d506aae0b4d729b964f66cb22

SHA256
e82e5fdf1344be72b2f655dbd02fbebf15416d0c12147823a9a4d9ecb357de76

SHA512
4f9c81c17e93d2e98d255ac42ab205c10dfa72bb9951c6bc94c2281b5f92d5b0bff0ebc0f3304261b49aaa7e63b3469b4f8bb1ac91216e267d1a44333c79aaa6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw9244.tmp\InstallOptions.dll

Filesize
14KB

MD5
3e277798b9d8f48806fbb5ebfd4990db

SHA1
d1ab343c5792bc99599ec7acba506e8ba7e05969

SHA256
fe19353288a08a5d2640a9c022424a1d20e4909a351f2114423e087313a40d7c

SHA512
84c9d4e2e6872277bffb0e10b292c8c384d475ad163fd0a47ca924a3c79077dfde880f535a171660f73265792554129161d079a10057d44e28e2d57ebc477e92

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw9244.tmp\InstallOptions.dll

Filesize
14KB

MD5
3e277798b9d8f48806fbb5ebfd4990db

SHA1
d1ab343c5792bc99599ec7acba506e8ba7e05969

SHA256
fe19353288a08a5d2640a9c022424a1d20e4909a351f2114423e087313a40d7c

SHA512
84c9d4e2e6872277bffb0e10b292c8c384d475ad163fd0a47ca924a3c79077dfde880f535a171660f73265792554129161d079a10057d44e28e2d57ebc477e92

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw9244.tmp\System.dll

Filesize
11KB

MD5
3f176d1ee13b0d7d6bd92e1c7a0b9bae

SHA1
fe582246792774c2c9dd15639ffa0aca90d6fd0b

SHA256
fa4ab1d6f79fd677433a31ada7806373a789d34328da46ccb0449bbf347bd73e

SHA512
0a69124819b7568d0dea4e9e85ce8fe61c7ba697c934e3a95e2dcfb9f252b1d9da7faf8774b6e8efd614885507acc94987733eba09a2f5e7098b774dfc8524b6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw9244.tmp\System.dll

Filesize
11KB

MD5
3f176d1ee13b0d7d6bd92e1c7a0b9bae

SHA1
fe582246792774c2c9dd15639ffa0aca90d6fd0b

SHA256
fa4ab1d6f79fd677433a31ada7806373a789d34328da46ccb0449bbf347bd73e

SHA512
0a69124819b7568d0dea4e9e85ce8fe61c7ba697c934e3a95e2dcfb9f252b1d9da7faf8774b6e8efd614885507acc94987733eba09a2f5e7098b774dfc8524b6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw9244.tmp\System.dll

Filesize
11KB

MD5
3f176d1ee13b0d7d6bd92e1c7a0b9bae

SHA1
fe582246792774c2c9dd15639ffa0aca90d6fd0b

SHA256
fa4ab1d6f79fd677433a31ada7806373a789d34328da46ccb0449bbf347bd73e

SHA512
0a69124819b7568d0dea4e9e85ce8fe61c7ba697c934e3a95e2dcfb9f252b1d9da7faf8774b6e8efd614885507acc94987733eba09a2f5e7098b774dfc8524b6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw9244.tmp\ioSpecial.ini

Filesize
773B

MD5
5327d451722fd9c615ed6715fb25b9a0

SHA1
4b32683bf7d8d7680a9920a69ac1d62573dd3260

SHA256
9dd8cc47122422aa5388e62378753d06e4fd8c401ae70c2d963117b6641d2db0

SHA512
7379d65e100c50aeacbf7794221ecc642f3587b327cd8687ad5766122199b6ef5ea53d46e5f8d92f374e92d9dad382d5f8578cddc207fe00aac47caeeb5a5b17

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw9244.tmp\ioSpecial.ini

Filesize
803B

MD5
6ac07442fa25d505e7400600be141681

SHA1
8bda4ce6b7b2af837c26be412cca6ed6382dd220

SHA256
061ead3ec3b35435598ccde12b7d7ebfce1a50a728c8fc5a9c8393ff01a1aab8

SHA512
4af3c021bc856de87d0cf2cae29d54fd723dd94b25dc0dba6d49b8b59d5744907ebe0db647b4c22d1616a1dcb565d8cef5e1e59af071b2854dad670c1b7ffee0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsw9244.tmp\ioSpecial.ini

Filesize
565B

MD5
9df65a5d223e0d7e22d21a38bf56acfc

SHA1
2740ab40f6e3e2ecf2d84133e4aeeba92aeca143

SHA256
1366ea68688941bb550769bdf671a5154a83327f94c02cfdab8cee1ba87ecf56

SHA512
b77b573d9ed2efc0d3332b5bb1c6a7b4b8fc411d01ac820d228e6f2756f70edd03d1bb63574830fa627b80b51640778b4e9fbe5803d2e0000f9d313b44beb7b3

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir1612_1380381506\2b37cebf-1373-48b1-80f7-f6512915b9c3.tmp

Filesize
88KB

MD5
2cc86b681f2cd1d9f095584fd3153a61

SHA1
2a0ac7262fb88908a453bc125c5c3fc72b8d490e

SHA256
d412fbbeb84e2a6882b2f0267b058f2ceb97f501e440fe3f9f70fac5c2277b9c

SHA512
14ba32c3cd5b1faf100d06f78981deebbbb673299a355b6eaec88e6cb5543725242c850235a541afa8abba4a609bb2ec26e4a0526c6b198016b08d8af868b986

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir1612_1380381506\CRX_INSTALL\_locales\en_CA\messages.json

Filesize
711B

MD5
558659936250e03cc14b60ebf648aa09

SHA1
32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825

SHA256
2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b

SHA512
1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727

Download Submit
C:\Users\Admin\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\logo.png

Filesize
1KB

MD5
d6bd210f227442b3362493d046cea233

SHA1
ff286ac8370fc655aea0ef35e9cf0bfcb6d698de

SHA256
335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef

SHA512
464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\wixstdba.dll

Filesize
118KB

MD5
4d20a950a3571d11236482754b4a8e76

SHA1
e68bd784ac143e206d52ecaf54a7e3b8d4d75c9c

SHA256
a9295ad4e909f979e2b6cb2b2495c3d35c8517e689cd64a918c690e17b49078b

SHA512
8b9243d1f9edbcbd6bdaf6874dc69c806bb29e909bd733781fde8ac80ca3fff574d786ca903871d1e856e73fd58403bebb58c9f23083ea7cd749ba3e890af3d2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bozzcyfh.default-release\prefs-1.js

Filesize
6KB

MD5
b7d676989763b4343032a6884e90fe3d

SHA1
1b515a7d2e701e3f6abecdf4958dcf69818f4213

SHA256
8ef7d236120162f5aa1848d4ea9f115cd542c1b5a9ccd49edc479ed0d399c3a5

SHA512
32a9d353d44415e1ce635cc0ab419f2c3bb9ccaaece710af98f1f1a91e1733f22cbd8ba9370de017b9aafc4f1053c51d314248c767139ca68169cec8ee9759ff

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bozzcyfh.default-release\prefs-1.js

Filesize
7KB

MD5
ca9784b7aed8177d8d3b775d374e09d0

SHA1
782758c83e88e8b3f48ac320395d59c587853495

SHA256
a3a2f7a52f0121ce377cfc537681c91c0372daee130034866e82af5c6ebca8e4

SHA512
88439e90d8067221f9a159b2fa634e8a15cb6cc2e910582965b212915b34c30d483f0d2ade693b4de0a78e5fcfcc482ce97c529cf3740b1b1cd33fbead54be87

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bozzcyfh.default-release\prefs.js

Filesize
6KB

MD5
fcd5f37e5e4066f7cffe8eb106b6ce19

SHA1
b0a1c4d3d5c96271429fb09cb71055d177c13402

SHA256
38dbdb91f24f8e138803d71d0f7e4758fbb78e7f657208325fe30a501e225c67

SHA512
afdf7697bc784c3c85f30a8a1e4caa32459cf7f19c1ffacde04f62f089218ff1899ffe69fc465677d719546c8f91bea0d04807b13d58096f79aeba8eef0a0a15

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bozzcyfh.default-release\prefs.js

Filesize
6KB

MD5
91402bacc3a26edcec342aa6427f2438

SHA1
c9738f2df93a0c7c125306a841b27db95dc124da

SHA256
28a5b70e6de4318e2a355ac991aac0c396fb0b4f49ae303ae059d20f87df397f

SHA512
3fcd52aeafc989a7de8fb5e96d78f501abe42eb44bf827715e39fe1c4cb4248a23399f105c4afadf4393ef385415a9f3b308e915b9f6c688d0f045c71ffe92c8

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bozzcyfh.default-release\prefs.js

Filesize
6KB

MD5
385d3ea0db60a83c6bd537d9c54219fd

SHA1
4bfa86934c1545301cf01ef457d1540bd0cc42f1

SHA256
4e8b5fe66deddb3238fbe74eaa0fb3352a40e847be03650701d7e1e7e0e65596

SHA512
494863efdfab3917f6e9a3fc052ebbda6075194dc4f1244b90989b000376686aeeb69c0e2b4b23eccdb8847bd39258b94ccc16c522040c9db1ca4f33b04ad687

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bozzcyfh.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
1KB

MD5
0c2704910228fa3c95c6ff263123520d

SHA1
5f31e8c7ca90c4368fc6800ef1f551ea1f2e6654

SHA256
f0678c484694468a40cd1119ee6e1fdba139d31ffaa7ed083f0c556e36498d77

SHA512
83f0fdeb713f314a2839969efcb411ac3d5d9936cd38ecfaf6a0df175f4ca73bacb8c1d45eb857e08e24efdc682a893ab46a5061cf13f0c6d02a3fbfd05d8682

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bozzcyfh.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
1KB

MD5
51c0be44212a89d29a32426bb4f2f828

SHA1
8b6c80b50cae965d07c153d9566d702834bd5b56

SHA256
50c6e48e0a7e88c7a2f7e222a01dea74be82fe4a78b051744e594d642f4e57c2

SHA512
78a2ec44388ba01402963435399697054fa7e7e7bf04eab4c99b013fb7869f62c48d05eb2ab04f551665578d1d1c453a104ba17309102830a77e3ab8dc25c9ff

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bozzcyfh.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
1KB

MD5
8d181a221cfb53226d92801af1cdabc4

SHA1
01da68b0bb10f585198ff2bdbb42c1dacf1c2ada

SHA256
d345eaaa765cb9d9f7f240ff065133b606059fb07473172470730b21f06afd71

SHA512
8c6c06c68c0bb7cb47276122dc28088bcf29fcdb2befab96d962b98ca0b33adafd44902d08e50f01cd04ca26254dd0c82f32f37800615cf9e5533901df51f46d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bozzcyfh.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
1KB

MD5
04e9887d734b545d8c096027dcecd3f1

SHA1
fb373978496bba9623c40491feca63c7995edfb1

SHA256
218afdf638fbd88cc2049f198043aa7ff661157e11210f0a359cb6a9ead6a477

SHA512
df64c88c2034f82917989a93423acb4324d0f2833284d38adeb5137bf4f65815a1f24660db0f763849c27520b2c9c74160145087e027e4c1021e0d033815c05c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bozzcyfh.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
1KB

MD5
217989e47c5de0a2c4f3988c6bda2b3f

SHA1
e74bf057c81dfd46f226493c5fe2277774ee6925

SHA256
369ae7c8119c230fdd83b3097ee71084787cae14f6ef1586ffc5cc7deb4c7321

SHA512
c829d999d3374acc9206807fc0ccbef3fa82e1c689396c5094af437fad8767086f3af4db903a5e3ad284ae8a6cdc83ccc7ff6bb45d32415ddd2d756280e2461e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bozzcyfh.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
9KB

MD5
9d912c800d5d2f8cff36735a143e4ada

SHA1
6284e55c44603f253d9916dad59189a8da04b3d6

SHA256
f367cefa681e7fe2e776fa7763def13a58cfc8166cfb960916dd9cf05849709e

SHA512
196ad83e6200c076a3d3ee68e3dbf9aeb84a08bcb31a17038598d17542f1ef08f4a0acb56494e1038798d26e8c846d96507f2b9ab08d7ece5087b50a8e46c30d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bozzcyfh.default-release\storage\default\https+++www.youtube.com^partitionKey=%28https%2Cgoogle.com%29\idb\2171031483YattIedMb.sqlite

Filesize
48KB

MD5
a28cd3eb83848856756bba45f3c95952

SHA1
dc87124cfa4aefce0109bc37ab67487780c157db

SHA256
c1cfdd5315b54bff742d3fd1b2474f091c779aca37bc6f90283998c507c1f9c1

SHA512
527271efac87be2531a3da06de1bc6946b5c1c19ed98f2530f78b02a9c7fea090b68c4d60b3796a23901a5a11808d41f23010d96e4fe434c8579071699c44679

Download Submit
C:\Users\Admin\Desktop\Growtopia.exe

Filesize
19.6MB

MD5
bc0a694d0bd1b02ea41cbe6a2ea8e255

SHA1
4056b7a5cdab04cc09f022d3d5d8e5447ccebdad

SHA256
a5b11c9c85abc21c691454756ba99880b5efc29c8e9278fee417236fe2a392d0

SHA512
452ab7c0806f5aec8f30fe2d64c330184008421f763a04dae75799e6e1907ca5785bcb83d60db22fd05ce79200b4450d87f92346617e966bb03983c01153f4f8

Download Submit
C:\Users\Admin\Desktop\Growtopia.exe

Filesize
19.6MB

MD5
bc0a694d0bd1b02ea41cbe6a2ea8e255

SHA1
4056b7a5cdab04cc09f022d3d5d8e5447ccebdad

SHA256
a5b11c9c85abc21c691454756ba99880b5efc29c8e9278fee417236fe2a392d0

SHA512
452ab7c0806f5aec8f30fe2d64c330184008421f763a04dae75799e6e1907ca5785bcb83d60db22fd05ce79200b4450d87f92346617e966bb03983c01153f4f8

Download Submit
C:\Users\Admin\Desktop\Growtopia.exe

Filesize
19.6MB

MD5
bc0a694d0bd1b02ea41cbe6a2ea8e255

SHA1
4056b7a5cdab04cc09f022d3d5d8e5447ccebdad

SHA256
a5b11c9c85abc21c691454756ba99880b5efc29c8e9278fee417236fe2a392d0

SHA512
452ab7c0806f5aec8f30fe2d64c330184008421f763a04dae75799e6e1907ca5785bcb83d60db22fd05ce79200b4450d87f92346617e966bb03983c01153f4f8

Download Submit
C:\Users\Admin\Desktop\SecureEngineSDK64.dll

Filesize
28KB

MD5
023ca3f56ce9d9aff9e4839301e82c82

SHA1
fec3bca7c4f43c9c44ffcfca1f41b5a480cba78b

SHA256
9387fedbd201f2886a28f32d1ec155a69ac86ea78e331381f6db521f8b4b5a11

SHA512
18bea9d3fde048dbd7ed0f039d44c36ccb112334b4188632772c35de06042e6d4077e1dc68ce6ac4f3a8fc4d1134940d24216a9451c79a813cd0ac33c56d354b

Download Submit
C:\Users\Admin\Desktop\SecureEngineSDK64.dll

Filesize
28KB

MD5
023ca3f56ce9d9aff9e4839301e82c82

SHA1
fec3bca7c4f43c9c44ffcfca1f41b5a480cba78b

SHA256
9387fedbd201f2886a28f32d1ec155a69ac86ea78e331381f6db521f8b4b5a11

SHA512
18bea9d3fde048dbd7ed0f039d44c36ccb112334b4188632772c35de06042e6d4077e1dc68ce6ac4f3a8fc4d1134940d24216a9451c79a813cd0ac33c56d354b

Download Submit
C:\Users\Admin\Desktop\SecureEngineSDK64.dll

Filesize
28KB

MD5
023ca3f56ce9d9aff9e4839301e82c82

SHA1
fec3bca7c4f43c9c44ffcfca1f41b5a480cba78b

SHA256
9387fedbd201f2886a28f32d1ec155a69ac86ea78e331381f6db521f8b4b5a11

SHA512
18bea9d3fde048dbd7ed0f039d44c36ccb112334b4188632772c35de06042e6d4077e1dc68ce6ac4f3a8fc4d1134940d24216a9451c79a813cd0ac33c56d354b

Download Submit
C:\Users\Admin\Desktop\fmod64.dll

Filesize
1.7MB

MD5
29b36598d48261aec75b1eee69dab669

SHA1
ae3143a5603badeed76a36f5f2429999ce4e7015

SHA256
e5fa4e47ae9ac18d7d2927651130a1630bfff97546f01646792384b9f3552f79

SHA512
6f316cfd68b3b9294e5ae929eeac1fee317ca17c64f3dda9e6e8504a16a8022ad19ca0169b4088fe91697cc48c33d8fb9c25558c5a364602e1511ed440ada5c0

Download Submit
C:\Users\Admin\Desktop\fmod64.dll

Filesize
1.7MB

MD5
29b36598d48261aec75b1eee69dab669

SHA1
ae3143a5603badeed76a36f5f2429999ce4e7015

SHA256
e5fa4e47ae9ac18d7d2927651130a1630bfff97546f01646792384b9f3552f79

SHA512
6f316cfd68b3b9294e5ae929eeac1fee317ca17c64f3dda9e6e8504a16a8022ad19ca0169b4088fe91697cc48c33d8fb9c25558c5a364602e1511ed440ada5c0

Download Submit
C:\Users\Admin\Desktop\interface\large\store_buttons14.rttex

Filesize
67B

MD5
1896385b19daa70f512320ba52a1fdf6

SHA1
63f2954b2cd949e45d02c4f1d4c3f35063aec757

SHA256
71fa2aa665788dff80d37cc26db1f6845685d7542bcdac61779a95a51bf95309

SHA512
f23b50c201e0cf1ff42e4e543e6ae856573cec3e11fa6cec66a8ca661fe69f3cbb4728b3d0e4e2762cd9f2b98e44297d9969ba1a93224dedf8e8e044d37febc1

Download Submit
C:\Users\Admin\Desktop\shaders\windows\dx9\ColorFill.fs.bin

Filesize
189B

MD5
6b99058f9b288d997c69d73861927134

SHA1
1c0fc93904a734faa7cc5f884d60a38ec24fbe6e

SHA256
f581b62052f717d462ccf51c1dd0c1f2a8bacefd1a12f9a47d62027e1b7723cf

SHA512
95097e5a5833fa64e25a1eff937cb9771ebfd2af1154f6b0cb3f787f40f35e2502538d6cbf2d8defa5f194d32a20d1365e92ba1850f5312c0177ef0168aa8dee

Download Submit
C:\Users\Admin\Desktop\shaders\windows\dx9\ColorFill.vs.bin

Filesize
377B

MD5
ade27b34719a1db3e2375f0a0eb3cd9e

SHA1
aa199069a3f46da765920bb209b8b14a3d85e926

SHA256
20d8f4943d855d2c5f22ef8ce81e0a17680379a767cb63f46e446cc882bedbd6

SHA512
e69621d39545aa19e67363f867c1c37f1d0fdf71de22339e8e5d784609b51cfaf7da87a8ae66602c44d5e9a84aa836e45e9af2bb4ce2ef4067d5a4bd3938b70c

Download Submit
C:\Users\Admin\Desktop\shaders\windows\dx9\ColoredTexture.fs.bin

Filesize
616B

MD5
4d5d1a09fd0ba4539234cda45d0522ed

SHA1
80f8088e975b40804a028a1b0431b2b6e8016fe9

SHA256
c60f25ab025863f7b511542f9ce0cd16193db2ae887db9144fab634d21c4e9f3

SHA512
2981bd2d518e83d47539c4ba5b3e005b9c70674fc2f0d0d98600d6c47db2d8b7259811ed988f9d1adde4b58c9985609fcb78c68f506de285eea434551420b850

Download Submit
C:\Users\Admin\Desktop\shaders\windows\dx9\ColoredTexture.vs.bin

Filesize
425B

MD5
4cbc79490c90928ccfebb56a8318eefb

SHA1
0754a60095990e61477cc70b4f806988a0725ff0

SHA256
9157cc875f439b19feb664b90f748d7c77d8e71dfd542eb45f873d1b9ad52069

SHA512
6d62676e0daf43f630b207ec7afb8848f63cf5a703691070c20f1c0f39547e7d5a16b921be8c9ccd0905d91299f4fceceea289e66ffc1a99f7762388acac38f3

Download Submit
C:\Users\Admin\Desktop\shaders\windows\dx9\VertexColoredTexture.fs.bin

Filesize
586B

MD5
1ceeb3d942cfec141dc3e1043bc6faf5

SHA1
7e30ae9bf46e1be49611e558e213104ef7c91195

SHA256
a7144c8c4ebba247dab1e1b3778467bbd514c8058edf05c227e14d8dcd8819b9

SHA512
ae850e79fe823b24a797628c74712df3a484d2b063a402cb16d50af2eb62a9d295cf8c83d17daa869751d723bc076bbcd8fb91ff5838dd6ebb9660f6bcfe0a05

Download Submit
C:\Users\Admin\Desktop\shaders\windows\dx9\VertexColoredTexture.vs.bin

Filesize
473B

MD5
b319352e49cfbbd4984d61e5d90e88bf

SHA1
1359c61e91f7b833d0fa0af5615a8fda6c9e0eca

SHA256
de2b5c2e121e2634d455e93eeec4083749c9b036d7be9df327f60070955c780c

SHA512
9122b22ccbafc2761a81e0c34e2d5e5942593d562b7a5f26dea21ca8f1d0ef07436f01402c9e13909a6278720fd47feeda22870e46062724ec437f09396e7276

Download Submit
C:\Users\Admin\Desktop\vc_redist.x64.exe

Filesize
13.9MB

MD5
27b141aacc2777a82bb3fa9f6e5e5c1c

SHA1
3155cb0f146b927fcc30647c1a904cd162548c8c

SHA256
5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3

SHA512
7789eabb6dd4a159bb899d2e6d6df70addb3df239bda6f9ead8c1d2a2ac2062fce3a495814b48a3c2bec12f13800ad0703e2c61c35158b0912011b914f098011

Download Submit
C:\Users\Admin\Desktop\vc_redist.x64.exe

Filesize
13.9MB

MD5
27b141aacc2777a82bb3fa9f6e5e5c1c

SHA1
3155cb0f146b927fcc30647c1a904cd162548c8c

SHA256
5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3

SHA512
7789eabb6dd4a159bb899d2e6d6df70addb3df239bda6f9ead8c1d2a2ac2062fce3a495814b48a3c2bec12f13800ad0703e2c61c35158b0912011b914f098011

Download Submit
C:\Users\Admin\Desktop\vc_redist.x64.exe

Filesize
13.9MB

MD5
27b141aacc2777a82bb3fa9f6e5e5c1c

SHA1
3155cb0f146b927fcc30647c1a904cd162548c8c

SHA256
5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3

SHA512
7789eabb6dd4a159bb899d2e6d6df70addb3df239bda6f9ead8c1d2a2ac2062fce3a495814b48a3c2bec12f13800ad0703e2c61c35158b0912011b914f098011

Download Submit
C:\Users\Admin\Downloads\GrowtopiaInstaller.exe

Filesize
191.8MB

MD5
51527643a5802cbdee715313ed743b72

SHA1
6460a279da72e0705a773f23d403beb5c7260b71

SHA256
180b585699602924e45e46c6ba98ce91964d37f8e10e9859ec14542ecb45762a

SHA512
6cce49277f55c984b206690e5f9879b4e79021fa0c992279f437801993b372598cf4ec09277cc47c6417d97962b4eae671cd7d61422da4fac74a83a7744400bc

Download Submit
C:\Users\Admin\Downloads\GrowtopiaInstaller.exe

Filesize
191.8MB

MD5
51527643a5802cbdee715313ed743b72

SHA1
6460a279da72e0705a773f23d403beb5c7260b71

SHA256
180b585699602924e45e46c6ba98ce91964d37f8e10e9859ec14542ecb45762a

SHA512
6cce49277f55c984b206690e5f9879b4e79021fa0c992279f437801993b372598cf4ec09277cc47c6417d97962b4eae671cd7d61422da4fac74a83a7744400bc

Download Submit
C:\Users\Admin\Downloads\GrowtopiaInstaller.exe

Filesize
191.8MB

MD5
51527643a5802cbdee715313ed743b72

SHA1
6460a279da72e0705a773f23d403beb5c7260b71

SHA256
180b585699602924e45e46c6ba98ce91964d37f8e10e9859ec14542ecb45762a

SHA512
6cce49277f55c984b206690e5f9879b4e79021fa0c992279f437801993b372598cf4ec09277cc47c6417d97962b4eae671cd7d61422da4fac74a83a7744400bc

Download Submit
C:\Users\Admin\Downloads\Plutonium.exe

Filesize
18.1MB

MD5
4618f008811065e3430f04356b7a36f5

SHA1
3435ad6610661000ea4cdf65faaf5acd0b5f4a7c

SHA256
ce1b4cc77564a80a55d2265c2a49700faf47adf615764ebde44d6992661de488

SHA512
1a5bff10abd5fd35fdaa3ba7f21eb5fc95c023c9941f8ead09f7f6b3cfe7fe935b71f28a241f490b6639c831ee576070c2086c12cf08174ff6994f8cedd8da00

Download Submit
C:\Users\Admin\Downloads\Plutonium.exe

Filesize
18.1MB

MD5
4618f008811065e3430f04356b7a36f5

SHA1
3435ad6610661000ea4cdf65faaf5acd0b5f4a7c

SHA256
ce1b4cc77564a80a55d2265c2a49700faf47adf615764ebde44d6992661de488

SHA512
1a5bff10abd5fd35fdaa3ba7f21eb5fc95c023c9941f8ead09f7f6b3cfe7fe935b71f28a241f490b6639c831ee576070c2086c12cf08174ff6994f8cedd8da00

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 180182.crdownload

Filesize
10.6MB

MD5
4462394fd6afc26d9d83b4008eadd806

SHA1
c40f88d246416165ae669311c22855ab063907ec

SHA256
1d7f5180a8e39564e80f6966a7e5268c6e67fceb09aca2588b339e87c6e4322b

SHA512
428d4aea860883de6a308e0759fdf8d94a2b59d29dc76ef664295b5b82c67333ee463a73d5f0733ad573446b1b8f0e44eec50cc235cce636c2b71248ffc2e81d

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 472660.crdownload

Filesize
18.1MB

MD5
4618f008811065e3430f04356b7a36f5

SHA1
3435ad6610661000ea4cdf65faaf5acd0b5f4a7c

SHA256
ce1b4cc77564a80a55d2265c2a49700faf47adf615764ebde44d6992661de488

SHA512
1a5bff10abd5fd35fdaa3ba7f21eb5fc95c023c9941f8ead09f7f6b3cfe7fe935b71f28a241f490b6639c831ee576070c2086c12cf08174ff6994f8cedd8da00

Download Submit
C:\Users\Admin\Downloads\hWxRTdZi.crdownload.part

Filesize
215.2MB

MD5
60007c285840f4b4a56b67477c8fe6ea

SHA1
fd4042788eb9e22597312c4702a076401953bb11

SHA256
965dd4ffb57a891b6f2f44b5cd7fa07d35d6ea26217cb93ed4299d133c236be6

SHA512
558fa38d7bd4491fd45af241d0ea12783dc3f0d7ebfc3933632a1e533d8ab7aae359c340c44858bad71168cd09f74c8fab8e67927e795a5578aa90fef2dcd644

Download Submit
C:\Users\Admin\Videos\Captures\desktop.ini

Filesize
190B

MD5
b0d27eaec71f1cd73b015f5ceeb15f9d

SHA1
62264f8b5c2f5034a1e4143df6e8c787165fbc2f

SHA256
86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2

SHA512
7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

Download Submit
memory/3352-584-0x0000000001DC0000-0x0000000001DD0000-memory.dmp

Filesize
64KB

Download
memory/3352-604-0x0000000001DC0000-0x0000000001DD0000-memory.dmp

Filesize
64KB

Download
memory/3352-575-0x0000000000460000-0x000000000167C000-memory.dmp

Filesize
18.1MB

Download
memory/3352-581-0x0000000003730000-0x0000000003780000-memory.dmp

Filesize
320KB

Download
memory/3352-582-0x0000000001DB0000-0x0000000001DB1000-memory.dmp

Filesize
4KB

Download
memory/3352-583-0x0000000001DC0000-0x0000000001DD0000-memory.dmp

Filesize
64KB

Download
memory/3352-586-0x0000000001DC0000-0x0000000001DD0000-memory.dmp

Filesize
64KB

Download
memory/4820-3299-0x0000000000400000-0x0000000000401000-memory.dmp

Filesize
4KB

Download
memory/4820-3300-0x00007FF9C5990000-0x00007FF9C5992000-memory.dmp

Filesize
8KB

Download
memory/4820-3301-0x00007FF9C59A0000-0x00007FF9C59A2000-memory.dmp

Filesize
8KB

Download
memory/4820-3302-0x0000000140000000-0x00000001435E2000-memory.dmp

Filesize
53.9MB

Download
memory/7024-4075-0x000001F7498C0000-0x000001F7498C1000-memory.dmp

Filesize
4KB

Download
memory/7024-4072-0x000001F7498C0000-0x000001F7498C1000-memory.dmp

Filesize
4KB

Download
memory/7024-4071-0x000001F7498C0000-0x000001F7498C1000-memory.dmp

Filesize
4KB

Download
memory/7024-4064-0x000001F7498C0000-0x000001F7498C1000-memory.dmp

Filesize
4KB

Download
memory/7024-4065-0x000001F7498C0000-0x000001F7498C1000-memory.dmp

Filesize
4KB

Download
memory/7024-4059-0x000001F7498C0000-0x000001F7498C1000-memory.dmp

Filesize
4KB

Download
memory/7024-4060-0x000001F7498C0000-0x000001F7498C1000-memory.dmp

Filesize
4KB

Download
memory/7024-4073-0x000001F7498C0000-0x000001F7498C1000-memory.dmp

Filesize
4KB

Download
memory/7024-4074-0x000001F7498C0000-0x000001F7498C1000-memory.dmp

Filesize
4KB

Download
memory/7024-4048-0x000001F7498C0000-0x000001F7498C1000-memory.dmp

Filesize
4KB

Download