Analysis

  • user interaction
    yes
  • max time kernel
    554s
  • max time network
    554s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    19/04/2026, 07:17

General

  • Target
    webapp.html
  • Size 10KB
  • Sample260419-h4e2mad16m
  • SHA256 610424405aa9569f35df59d88811a5d64f51c6de90459161379575b937d25fb5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 47 IoCs
  • Loads dropped DLL 64 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 8 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Drops file in Program Files directory 21 IoCs
  • Drops file in Windows directory 49 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 9 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 22 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 12 IoCs
  • Modifies data under HKEY_USERS 8 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 6 IoCs
  • NTFS ADS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 34 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 48 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\webapp.html
    1⤵
    • Drops file in Windows directory
    • Checks SCSI registry key(s)
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1536
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff82e2dc728,0x7ff82e2dc734,0x7ff82e2dc740
      2⤵
        PID:2528
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,2650149607383392891,7250336715112228266,262144 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1960 /prefetch:2
        2⤵
          PID:2520
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2224,i,4532835212459055862,9428105632017317996,524288 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2228 /prefetch:11
          2⤵
          • System Time Discovery
          PID:5068
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3132,i,5330594932042623982,1042885252842383633,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3128 /prefetch:1
          2⤵
            PID:2460
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3148,i,14056545978130097409,2636743610176763268,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3184 /prefetch:1
            2⤵
              PID:888
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,13569514293657417865,5771304620092766502,524288 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2252 /prefetch:13
              2⤵
                PID:1444
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4188,i,15939171949102095538,67282431270432367,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4200 /prefetch:9
                2⤵
                  PID:2508
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5216,i,4757349620944944502,17666880509533342318,524288 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5220 /prefetch:14
                  2⤵
                    PID:1380
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5528,i,15693576495030353140,16794733552519409821,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5532 /prefetch:1
                    2⤵
                      PID:488
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5672,i,16378614566168332815,11734272780177180814,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5704 /prefetch:1
                      2⤵
                        PID:2220
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5900,i,14244444083122766557,16767385392276300178,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5908 /prefetch:1
                        2⤵
                          PID:1712
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5448,i,854486519330853372,12252038172993372916,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5580 /prefetch:1
                          2⤵
                            PID:4596
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3324,i,16678800120620487640,2936597989494868067,524288 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3240 /prefetch:14
                            2⤵
                              PID:1696
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3160,i,11063453403659979030,15559648236016150743,524288 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3312 /prefetch:14
                              2⤵
                                PID:1716
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3284,i,2573652426054215645,14897153756744397464,524288 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3316 /prefetch:14
                                2⤵
                                  PID:3124
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3160,i,294977357439906435,8966221339197467616,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4596 /prefetch:1
                                  2⤵
                                    PID:3960
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4232,i,17650756176167143579,237985641986677009,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4308 /prefetch:1
                                    2⤵
                                      PID:4676
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6172,i,6953254487661198100,8311246083257344419,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6136 /prefetch:1
                                      2⤵
                                        PID:1740
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6476,i,7972434367601811706,4320398185378244182,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6496 /prefetch:1
                                        2⤵
                                          PID:4292
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6632,i,11335551088955988955,10012691353089187200,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6464 /prefetch:1
                                          2⤵
                                            PID:4544
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4596,i,7892969585376755850,1034118104304027948,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5488 /prefetch:1
                                            2⤵
                                              PID:3344
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6640,i,12755188757753661939,8205469786910615911,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6572 /prefetch:1
                                              2⤵
                                                PID:1812
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6928,i,15671379848765232111,6896929276477693246,524288 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6908 /prefetch:14
                                                2⤵
                                                • NTFS ADS
                                                PID:1716
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6972,i,941771793496762726,12673530452211783793,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5420 /prefetch:1
                                                2⤵
                                                  PID:4168
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6532,i,15235710272794717103,13944804564739264502,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6892 /prefetch:1
                                                  2⤵
                                                    PID:4708
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6364,i,12549927264720421311,17023834852512120621,524288 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6852 /prefetch:12
                                                    2⤵
                                                      PID:660
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=740,i,2991304041989870174,11892305408360571896,524288 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1068 /prefetch:14
                                                      2⤵
                                                      • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                      • NTFS ADS
                                                      PID:2508
                                                    • C:\Windows\System32\msiexec.exe
                                                      "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\Downloads\jjsploit_8.17.9_x64_en-US.msi"
                                                      2⤵
                                                      • Enumerates connected drives
                                                      • Suspicious use of FindShellTrayWindow
                                                      PID:3044
                                                      • C:\Program Files\jjsploit\jjsploit.exe
                                                        "C:\Program Files\jjsploit\jjsploit.exe"
                                                        3⤵
                                                        • Executes dropped EXE
                                                        • Checks whether UAC is enabled
                                                        • Modifies trusted root certificate store through registry
                                                        • Modifies system certificate store
                                                        PID:7304
                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=jjsploit.exe --webview-exe-version=8.17.9 --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=7304.6820.12665683301047723515
                                                          4⤵
                                                          • Drops file in Windows directory
                                                          • Enumerates system info in registry
                                                          • Modifies data under HKEY_USERS
                                                          PID:7340
                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ff815b0b078,0x7ff815b0b084,0x7ff815b0b090
                                                            5⤵
                                                              PID:6120
                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --webview-exe-name=jjsploit.exe --webview-exe-version=8.17.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1716,i,11255904846150954112,8845399390711222555,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1712 /prefetch:2
                                                              5⤵
                                                                PID:6072
                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --webview-exe-name=jjsploit.exe --webview-exe-version=8.17.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2012,i,11255904846150954112,8845399390711222555,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2024 /prefetch:11
                                                                5⤵
                                                                  PID:7712
                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --webview-exe-name=jjsploit.exe --webview-exe-version=8.17.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2292,i,11255904846150954112,8845399390711222555,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:13
                                                                  5⤵
                                                                    PID:8204
                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView" --webview-exe-name=jjsploit.exe --webview-exe-version=8.17.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3504,i,11255904846150954112,8845399390711222555,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
                                                                    5⤵
                                                                      PID:8624
                                                              • C:\Users\Admin\Downloads\setup.exe
                                                                "C:\Users\Admin\Downloads\setup.exe"
                                                                2⤵
                                                                • Executes dropped EXE
                                                                • Drops file in Windows directory
                                                                • Suspicious behavior: EnumeratesProcesses
                                                                • Suspicious use of WriteProcessMemory
                                                                PID:4448
                                                                • C:\Windows\SystemTemp\PulseSoftware4448_1880191202\bin\updater.exe
                                                                  "C:\Windows\SystemTemp\PulseSoftware4448_1880191202\bin\updater.exe" --install=appguid={2F4E88B4-E690-4E1F-AA9E-B7A4617F881D}&appname=PulseBrowser&iid={db5435d4-8123-47aa-d77d-3da9432733c6} --enable-logging --vmodule=*/components/winhttp/*=1,*/components/update_client/*=2,*/chrome/enterprise_companion/*=2,*/chrome/updater/*=2
                                                                  3⤵
                                                                  • Executes dropped EXE
                                                                  • Adds Run key to start application
                                                                  • Modifies registry class
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  • Suspicious use of WriteProcessMemory
                                                                  PID:3704
                                                                  • C:\Windows\SystemTemp\PulseSoftware4448_1880191202\bin\updater.exe
                                                                    C:\Windows\SystemTemp\PulseSoftware4448_1880191202\bin\updater.exe --crash-handler --database=C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\Crashpad --url=https://pulsebrowser.com/ --annotation=prod=PulseBrowserUpdater --annotation=ver=133.0.6943.177 --initial-client-data=0x24c,0x250,0x254,0x210,0x258,0x7ff665b1454c,0x7ff665b14558,0x7ff665b14568
                                                                    4⤵
                                                                    • Executes dropped EXE
                                                                    PID:4844
                                                                  • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                    "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --from-installer
                                                                    4⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • Drops file in Windows directory
                                                                    • Enumerates system info in registry
                                                                    • Modifies data under HKEY_USERS
                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                    • Suspicious use of SendNotifyMessage
                                                                    PID:7020
                                                                    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                      "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1588,i,7959158919660385901,13636451618626331836,262144 --field-trial-handle=2104,i,6753100705346981740,15647682994807072256,262144 --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2100 /prefetch:2
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:6076
                                                                    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                      "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=1808,i,15398013726075218451,120285700719272762,524288 --field-trial-handle=2104,i,6753100705346981740,15647682994807072256,262144 --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2140 /prefetch:11
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • System Time Discovery
                                                                      PID:6032
                                                                    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                      "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2496,i,18043726729069217297,15058287580642402567,524288 --field-trial-handle=2104,i,6753100705346981740,15647682994807072256,262144 --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2508 /prefetch:13
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:6504
                                                                    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                      "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=renderer --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3356,i,9158924821715458838,9534319285166916642,2097152 --field-trial-handle=2104,i,6753100705346981740,15647682994807072256,262144 --variations-seed-version --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3376 /prefetch:1
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:5932
                                                                    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                      "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=renderer --instant-process --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3364,i,18244075792196244239,11673275064682571194,2097152 --field-trial-handle=2104,i,6753100705346981740,15647682994807072256,262144 --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3496 /prefetch:1
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:5828
                                                                    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                      "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=renderer --extension-process --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3944,i,10934475473730737951,17942314207549934497,2097152 --field-trial-handle=2104,i,6753100705346981740,15647682994807072256,262144 --variations-seed-version --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4508 /prefetch:9
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:1260
                                                                    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                      "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1080,i,14042343117433241945,3096759012033894768,262144 --field-trial-handle=2104,i,6753100705346981740,15647682994807072256,262144 --variations-seed-version --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4660 /prefetch:10
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      PID:4972
                                                                    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                      "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=1508,i,16052674210020901243,2726794236822674494,524288 --field-trial-handle=2104,i,6753100705346981740,15647682994807072256,262144 --variations-seed-version --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4704 /prefetch:14
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:3364
                                                                    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                      "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5288,i,4579177367359061284,16136182025898025273,524288 --field-trial-handle=2104,i,6753100705346981740,15647682994807072256,262144 --variations-seed-version --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5292 /prefetch:14
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:8112
                                                                    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                      "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5304,i,13962601803161968980,10885253606911926851,524288 --field-trial-handle=2104,i,6753100705346981740,15647682994807072256,262144 --variations-seed-version --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5320 /prefetch:14
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:7280
                                                                    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                      "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5312,i,10956094972288559762,2469596284577019783,524288 --field-trial-handle=2104,i,6753100705346981740,15647682994807072256,262144 --variations-seed-version --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3460 /prefetch:14
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      PID:7384
                                                                    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                      "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4160,i,7644188195610877755,15852214346294369517,524288 --field-trial-handle=2104,i,6753100705346981740,15647682994807072256,262144 --variations-seed-version --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=2260 /prefetch:14
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      PID:7196
                                                                    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                      "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=renderer --extension-process --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3948,i,16090803900242113981,10486036142435539734,2097152 --field-trial-handle=2104,i,6753100705346981740,15647682994807072256,262144 --variations-seed-version --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=3640 /prefetch:9
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      PID:8356
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=8152,i,4223985442140694481,6848753480305485444,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6668 /prefetch:1
                                                                2⤵
                                                                  PID:6632
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6360,i,7467317137658194598,1732476533568566985,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6604 /prefetch:1
                                                                  2⤵
                                                                    PID:7096
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=8160,i,2990317133723451549,5052873763096639998,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7308 /prefetch:1
                                                                    2⤵
                                                                      PID:6200
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6448,i,8079649467193803952,8535617238224744465,262144 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8012 /prefetch:10
                                                                      2⤵
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      PID:6624
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=8060,i,686845311705987410,927484040207565525,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7860 /prefetch:1
                                                                      2⤵
                                                                        PID:2364
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=1068,i,14953708171515090553,7410173326566149252,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6884 /prefetch:1
                                                                        2⤵
                                                                          PID:6396
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=2948,i,2018442742753786863,14572559308814227824,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4404 /prefetch:1
                                                                          2⤵
                                                                            PID:6100
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=3384,i,2330297642643525219,13644465158401077615,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8136 /prefetch:1
                                                                            2⤵
                                                                              PID:4292
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=8140,i,10083454817788461212,2590632663514514103,524288 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7784 /prefetch:14
                                                                              2⤵
                                                                                PID:7508
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=8324,i,3558577275837856240,13915841240524698610,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8336 /prefetch:1
                                                                                2⤵
                                                                                  PID:6444
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=8344,i,4283560107737106908,8718945460795973757,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8304 /prefetch:1
                                                                                  2⤵
                                                                                    PID:7344
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=7776,i,2796656147363777497,9556790011580399080,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3384 /prefetch:1
                                                                                    2⤵
                                                                                      PID:4324
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=8180,i,5823107096062292954,8700249924536887126,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1924 /prefetch:1
                                                                                      2⤵
                                                                                        PID:7480
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=8648,i,12342658635919212859,15768618038298694994,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8296 /prefetch:1
                                                                                        2⤵
                                                                                          PID:7720
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=8508,i,11449739202752798879,18025615719150819728,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2904 /prefetch:1
                                                                                          2⤵
                                                                                            PID:4980
                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=8108,i,6509092623341066221,4611508663157220891,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3816 /prefetch:1
                                                                                            2⤵
                                                                                              PID:7248
                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=8432,i,9134341012874164083,14052814605748697624,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7832 /prefetch:1
                                                                                              2⤵
                                                                                                PID:2608
                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=8812,i,15980050580484936449,2214671457282543450,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8800 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:7820
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=8068,i,6455494736228909581,11813842365027494148,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7828 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:3052
                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=7832,i,4399143838498342635,8192070404493584152,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8332 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:7736
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=6920,i,12516957382592111576,505710702575905534,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8896 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:704
                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=8644,i,17855116737704448561,13894634190201413486,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8652 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:1076
                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=9112,i,9565324031380011722,3592916870985612876,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8900 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:1716
                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=8380,i,7703368369802231699,15253484923294477778,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8496 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:1768
                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=9176,i,9065889910560454009,1237027487713332032,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9368 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:8164
                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=9180,i,15288277095804357324,4827209806375286206,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8384 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:6492
                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=9336,i,12614667374836425702,16340249072393762063,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9204 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:6836
                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=9056,i,8742514864515984463,13102005756590726797,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9076 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:3036
                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=9188,i,16314947533638129797,18268563736827676246,524288 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9360 /prefetch:14
                                                                                                                      2⤵
                                                                                                                        PID:3664
                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=8488,i,1454655709099375063,14283906652826044227,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8900 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:4520
                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=9232,i,6977231566730849002,4509969680889131481,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9672 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:7328
                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=9388,i,4333814393577097959,11614513718991392540,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9400 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:7428
                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=9652,i,16212491908474870685,9369555764116216235,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9392 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:5812
                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=9228,i,6441764556812544797,3860396547045895497,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9824 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:7400
                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=9856,i,17893370077315664990,16183874337174154898,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9832 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:6916
                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=10096,i,8635725433312690929,6194553803839999751,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9876 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:4532
                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=9356,i,5895694675968170820,6816796600037541557,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9916 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:6444
                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=9488,i,8011837299947824060,17384376251177932159,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9484 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:6068
                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=8332,i,787342051994399985,15353567274642558701,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9228 /prefetch:1
                                                                                                                                          2⤵
                                                                                                                                            PID:6368
                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=9744,i,17458949271480017502,11889962301655830422,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9172 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:1700
                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=9900,i,14322415495815185686,10708464286641272380,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9884 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:3052
                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=10076,i,2807451889710398743,201607121777488095,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9028 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:5500
                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=9356,i,13173238651032355852,840602200266183523,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=8980 /prefetch:1
                                                                                                                                                  2⤵
                                                                                                                                                    PID:2984
                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=9892,i,10370297294769214224,13904680745988051460,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9568 /prefetch:1
                                                                                                                                                    2⤵
                                                                                                                                                      PID:7160
                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=8992,i,8009290441093171893,10818496435672451930,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10112 /prefetch:1
                                                                                                                                                      2⤵
                                                                                                                                                        PID:6588
                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=10336,i,15778081049592265168,4435950146605222096,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9420 /prefetch:1
                                                                                                                                                        2⤵
                                                                                                                                                          PID:7800
                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=10380,i,15241655072754516734,6608943314435485452,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=9404 /prefetch:1
                                                                                                                                                          2⤵
                                                                                                                                                            PID:3216
                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=9792,i,3816218418397087326,18288461256794750071,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6348 /prefetch:1
                                                                                                                                                            2⤵
                                                                                                                                                              PID:7640
                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=10660,i,9544349764812081579,14209899983548596943,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1632 /prefetch:1
                                                                                                                                                              2⤵
                                                                                                                                                                PID:2072
                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=10604,i,885863916047761718,13283519752176726777,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10780 /prefetch:1
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:2576
                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=10984,i,1032416507188749379,15549521029753890289,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10964 /prefetch:1
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:5624
                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=11128,i,16158298745531544519,3298438275463553969,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10936 /prefetch:1
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:4168
                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=10908,i,684406845598183306,8184082088014157209,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10896 /prefetch:1
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:7372
                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=10912,i,3395853531309709899,1251387808487123059,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10808 /prefetch:1
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:4652
                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=10992,i,14325299893463309861,3580152327101324906,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=11180 /prefetch:1
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:3100
                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=11132,i,1241378450681157369,15846566324479957324,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10856 /prefetch:1
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:8128
                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=10596,i,14007429385824175746,15283100724232209331,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10080 /prefetch:1
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:7084
                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=11304,i,8815739016203741319,8392914119255519272,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=11336 /prefetch:1
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:7192
                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=9716,i,17396767635689918796,12150733996556695392,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10876 /prefetch:1
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:8052
                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=9192,i,2528331826676082990,6595392750202029373,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=11488 /prefetch:1
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:7432
                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=11368,i,12103452494278700172,14957050882368572194,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=11384 /prefetch:1
                                                                                                                                                                                      2⤵
                                                                                                                                                                                        PID:7028
                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=11404,i,16122199147748816964,4828653889633049437,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=10752 /prefetch:1
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:7676
                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=11736,i,2802814310713905559,13412088083716442528,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=11740 /prefetch:1
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:7420
                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=11484,i,9737797236897511949,16435521861365218073,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=11456 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:7460
                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=11764,i,10480792889573936563,9663667387627523648,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=11736 /prefetch:1
                                                                                                                                                                                              2⤵
                                                                                                                                                                                                PID:7980
                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=11796,i,15291726196928727287,2760830224836025557,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=11880 /prefetch:1
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:6736
                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=12100,i,13473038363522692046,14166360671736587131,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=12052 /prefetch:1
                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                    PID:6040
                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=12300,i,6714118300703365468,9776533703028770608,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=12248 /prefetch:1
                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                      PID:4828
                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=12648,i,898934542541879014,3177736738488389021,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=12704 /prefetch:1
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:6916
                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=12676,i,12261854056858333649,12247937494094928042,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=12616 /prefetch:1
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                          PID:2008
                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=12300,i,3705764301289607681,14071587289913820477,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=12320 /prefetch:1
                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                            PID:7400
                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=12428,i,7572135275411426011,13698247177253167344,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=12564 /prefetch:1
                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                              PID:7828
                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=12912,i,1529701522658146381,12731220860098564545,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=12964 /prefetch:1
                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                PID:7356
                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=12316,i,2619586283335104017,7806926683263590016,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=12248 /prefetch:1
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                  PID:7260
                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=13084,i,18014111553250342629,10595436999837350684,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=13080 /prefetch:1
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:7284
                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=13224,i,13073865746830744946,5030342016235403663,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=13268 /prefetch:1
                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                      PID:6964
                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --metrics-shmem-handle=6564,i,9593673879752495921,14150765507333690009,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3796 /prefetch:1
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:3372
                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --metrics-shmem-handle=13052,i,9638842244761375708,11193231970375806834,2097152 --field-trial-handle=1964,i,1773801676771001284,5431062992220414256,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6100 /prefetch:1
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:2304
                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                          PID:3848
                                                                                                                                                                                                                        • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                          C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                            PID:1452
                                                                                                                                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                            C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                              PID:4960
                                                                                                                                                                                                                            • C:\Windows\system32\msiexec.exe
                                                                                                                                                                                                                              C:\Windows\system32\msiexec.exe /V
                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                              • Enumerates connected drives
                                                                                                                                                                                                                              • Drops file in Program Files directory
                                                                                                                                                                                                                              • Drops file in Windows directory
                                                                                                                                                                                                                              • Modifies data under HKEY_USERS
                                                                                                                                                                                                                              • Modifies registry class
                                                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                              • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                              PID:644
                                                                                                                                                                                                                              • C:\Windows\syswow64\MsiExec.exe
                                                                                                                                                                                                                                C:\Windows\syswow64\MsiExec.exe -Embedding 4A8A3F88EFD50E6C85F1E19601B94226 C
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                • Loads dropped DLL
                                                                                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                PID:1296
                                                                                                                                                                                                                              • C:\Windows\system32\srtasks.exe
                                                                                                                                                                                                                                C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                  PID:5724
                                                                                                                                                                                                                              • C:\Windows\system32\vssvc.exe
                                                                                                                                                                                                                                C:\Windows\system32\vssvc.exe
                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                • Checks SCSI registry key(s)
                                                                                                                                                                                                                                PID:1380
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe" --server --service=update-internal -Embedding
                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                • Drops file in Windows directory
                                                                                                                                                                                                                                • Modifies registry class
                                                                                                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                PID:4816
                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe --crash-handler --database=C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\Crashpad --url=https://pulsebrowser.com/ --annotation=prod=PulseBrowserUpdater --annotation=ver=133.0.6943.177 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff6df2d454c,0x7ff6df2d4558,0x7ff6df2d4568
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                  PID:992
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe" --server --service=update -Embedding
                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                • Drops file in Windows directory
                                                                                                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                PID:5156
                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe --crash-handler --database=C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\Crashpad --url=https://pulsebrowser.com/ --annotation=prod=PulseBrowserUpdater --annotation=ver=133.0.6943.177 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff6df2d454c,0x7ff6df2d4558,0x7ff6df2d4568
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                  PID:5172
                                                                                                                                                                                                                                • C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5156_637346489\pulsebrowser_installer_144.0.7559.70.exe
                                                                                                                                                                                                                                  "C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5156_637346489\pulsebrowser_installer_144.0.7559.70.exe"
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                  • Drops file in Windows directory
                                                                                                                                                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                  PID:5652
                                                                                                                                                                                                                                  • C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5156_637346489\CR_23D85.tmp\setup.exe
                                                                                                                                                                                                                                    "C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5156_637346489\CR_23D85.tmp\setup.exe" --install-archive="C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5156_637346489\CR_23D85.tmp\PULSEBROWSER.PACKED.7Z"
                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                    • Drops file in Windows directory
                                                                                                                                                                                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                                                                                                    • Modifies registry class
                                                                                                                                                                                                                                    • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                    PID:5824
                                                                                                                                                                                                                                    • C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5156_637346489\CR_23D85.tmp\setup.exe
                                                                                                                                                                                                                                      C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5156_637346489\CR_23D85.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Crashpad" --annotation=plat=Win64 --annotation=prod=PulseBrowser --annotation=ver=144.0.7559.70 --attachment=C:\Windows\SystemTemp\chromium_installer.log --initial-client-data=0x268,0x26c,0x270,0x244,0x274,0x7ff75342a000,0x7ff75342a00c,0x7ff75342a018
                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                      PID:5844
                                                                                                                                                                                                                                    • C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5156_637346489\CR_23D85.tmp\setup.exe
                                                                                                                                                                                                                                      "C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5156_637346489\CR_23D85.tmp\setup.exe" --verbose-logging --create-shortcuts=0 --install-level=0
                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                      • Drops file in Windows directory
                                                                                                                                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                      PID:5596
                                                                                                                                                                                                                                      • C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5156_637346489\CR_23D85.tmp\setup.exe
                                                                                                                                                                                                                                        C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5156_637346489\CR_23D85.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Crashpad" --annotation=plat=Win64 --annotation=prod=PulseBrowser --annotation=ver=144.0.7559.70 --attachment=C:\Windows\SystemTemp\chromium_installer.log --initial-client-data=0x268,0x26c,0x270,0x244,0x274,0x7ff75342a000,0x7ff75342a00c,0x7ff75342a018
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                        PID:5332
                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --from-installer
                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                      • Loads dropped DLL
                                                                                                                                                                                                                                      • Drops file in Windows directory
                                                                                                                                                                                                                                      • Enumerates system info in registry
                                                                                                                                                                                                                                      • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                                                                                                                      • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                                      • Suspicious use of SendNotifyMessage
                                                                                                                                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                      PID:6180
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1680,i,707045579788275738,16168902186652912748,262144 --field-trial-handle=2068,i,11913341649518226259,1728262208572082710,262144 --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2064 /prefetch:2
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                                                                                                        PID:6692
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=1896,i,17527321839265261530,10104808936131741114,524288 --field-trial-handle=2068,i,11913341649518226259,1728262208572082710,262144 --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2156 /prefetch:11
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                                                                                                        • System Time Discovery
                                                                                                                                                                                                                                        PID:6576
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2460,i,9706684544655965915,1851823590368186003,524288 --field-trial-handle=2068,i,11913341649518226259,1728262208572082710,262144 --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2472 /prefetch:13
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                                                                                                        PID:6936
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=renderer --instant-process --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3468,i,15125699801149051880,8493679055581604070,2097152 --field-trial-handle=2068,i,11913341649518226259,1728262208572082710,262144 --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3488 /prefetch:1
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                                                                                                        PID:7144
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=renderer --force-high-res-timeticks=disabled --start-stack-profiler --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3444,i,5299193902918432172,9475566222412659388,2097152 --field-trial-handle=2068,i,11913341649518226259,1728262208572082710,262144 --variations-seed-version --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3456 /prefetch:1
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                                                                                                        PID:7152
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4444,i,15163249016451415693,5945640660655329473,524288 --field-trial-handle=2068,i,11913341649518226259,1728262208572082710,262144 --variations-seed-version --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4428 /prefetch:14
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                                                                                                        PID:7084
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5020,i,5493251942355134846,6822874494680746337,524288 --field-trial-handle=2068,i,11913341649518226259,1728262208572082710,262144 --variations-seed-version --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4944 /prefetch:14
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                                                                                                        PID:5832
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5112,i,14088237598264749822,15334806310657200072,524288 --field-trial-handle=2068,i,11913341649518226259,1728262208572082710,262144 --variations-seed-version --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=5128 /prefetch:14
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                                                                                                        PID:6260
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5252,i,18359120193624756292,5299961248512675231,524288 --field-trial-handle=2068,i,11913341649518226259,1728262208572082710,262144 --variations-seed-version --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5284 /prefetch:14
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                                                                                                        PID:6552
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5116,i,5796091130233480529,2656619717510751063,524288 --field-trial-handle=2068,i,11913341649518226259,1728262208572082710,262144 --variations-seed-version --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5028 /prefetch:14
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                                                                                                        PID:6064
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=renderer --extension-process --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5348,i,9298956886649321098,1888100435546922646,2097152 --field-trial-handle=2068,i,11913341649518226259,1728262208572082710,262144 --variations-seed-version --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5320 /prefetch:9
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                                                                                                        PID:5932
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe" --wake
                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                PID:5400
                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe --crash-handler --database=C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\Crashpad --url=https://pulsebrowser.com/ --annotation=prod=PulseBrowserUpdater --annotation=ver=133.0.6943.177 --initial-client-data=0x254,0x258,0x25c,0x230,0x260,0x7ff6df2d454c,0x7ff6df2d4558,0x7ff6df2d4568
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                  PID:5416
                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe" -Embedding
                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                PID:5804
                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x1e0,0x1e4,0x1e8,0x1bc,0x1ec,0x7ff7b1913764,0x7ff7b1913770,0x7ff7b1913780
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                    PID:1864
                                                                                                                                                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe"
                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                    PID:6536
                                                                                                                                                                                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                                                                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe"
                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                      • Checks processor information in registry
                                                                                                                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                      PID:7092
                                                                                                                                                                                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                                                                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1972 -prefsLen 27097 -prefMapHandle 1976 -prefMapSize 270279 -ipcHandle 2064 -initialChannelId {850064ae-2829-471d-a284-20c71291e2ad} -parentPid 7092 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7092" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                          PID:6164
                                                                                                                                                                                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                                                                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2428 -prefsLen 27133 -prefMapHandle 2432 -prefMapSize 270279 -ipcHandle 2440 -initialChannelId {b9fdea50-347f-4198-b059-45a15c81bd4c} -parentPid 7092 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7092" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                          • Checks processor information in registry
                                                                                                                                                                                                                                          PID:6792
                                                                                                                                                                                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                                                                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3884 -prefsLen 27274 -prefMapHandle 3888 -prefMapSize 270279 -jsInitHandle 3892 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3900 -initialChannelId {0273128b-1ff4-4b1d-b0d3-5979c3922416} -parentPid 7092 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7092" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                          • Checks processor information in registry
                                                                                                                                                                                                                                          PID:5268
                                                                                                                                                                                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                                                                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4076 -prefsLen 27274 -prefMapHandle 4080 -prefMapSize 270279 -ipcHandle 4084 -initialChannelId {4292c89b-3ccd-4e6b-8249-002712526bda} -parentPid 7092 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7092" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                            PID:5144
                                                                                                                                                                                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                                                                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2648 -prefsLen 34773 -prefMapHandle 2716 -prefMapSize 270279 -jsInitHandle 3356 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2864 -initialChannelId {09dc3817-55da-48b5-9099-0459dc5e4f57} -parentPid 7092 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7092" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                            • Checks processor information in registry
                                                                                                                                                                                                                                            PID:5988
                                                                                                                                                                                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                                                                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4904 -prefsLen 34903 -prefMapHandle 4908 -prefMapSize 270279 -ipcHandle 4916 -initialChannelId {067472bc-35aa-4ba7-80e8-248ae060000f} -parentPid 7092 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7092" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                            • Checks processor information in registry
                                                                                                                                                                                                                                            PID:7712
                                                                                                                                                                                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                                                                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4888 -prefsLen 32952 -prefMapHandle 4968 -prefMapSize 270279 -jsInitHandle 4840 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5364 -initialChannelId {4d3ce117-c37b-401d-950a-1547c1cb12f3} -parentPid 7092 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7092" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                            • Checks processor information in registry
                                                                                                                                                                                                                                            PID:8168
                                                                                                                                                                                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                                                                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5068 -prefsLen 32952 -prefMapHandle 5448 -prefMapSize 270279 -jsInitHandle 5400 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5660 -initialChannelId {daf46b5e-e745-4bbb-97d4-2b80b333959f} -parentPid 7092 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7092" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                            • Checks processor information in registry
                                                                                                                                                                                                                                            PID:8176
                                                                                                                                                                                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                                                                                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5804 -prefsLen 32952 -prefMapHandle 5808 -prefMapSize 270279 -jsInitHandle 5812 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5820 -initialChannelId {b92c2f30-2a77-4987-8755-c304457dc27d} -parentPid 7092 -crashReporter "\\.\pipe\gecko-crash-server-pipe.7092" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                            • Checks processor information in registry
                                                                                                                                                                                                                                            PID:8184
                                                                                                                                                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                          PID:5800
                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe --wake
                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                          PID:4880
                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe --crash-handler --database=C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\Crashpad --url=https://pulsebrowser.com/ --annotation=prod=PulseBrowserUpdater --annotation=ver=133.0.6943.177 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff6df2d454c,0x7ff6df2d4558,0x7ff6df2d4568
                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                            PID:2988
                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe" --server --service=update-internal -Embedding
                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                          PID:5412
                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe --crash-handler --database=C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\Crashpad --url=https://pulsebrowser.com/ --annotation=prod=PulseBrowserUpdater --annotation=ver=133.0.6943.177 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff6df2d454c,0x7ff6df2d4558,0x7ff6df2d4568
                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                            PID:5948
                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe" --server --service=update -Embedding
                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                          PID:6024
                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe --crash-handler --database=C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\Crashpad --url=https://pulsebrowser.com/ --annotation=prod=PulseBrowserUpdater --annotation=ver=133.0.6943.177 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff6df2d454c,0x7ff6df2d4558,0x7ff6df2d4568
                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                            PID:3124

                                                                                                                                                                                                                                        Network

                                                                                                                                                                                                                                              MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                              Replay Monitor

                                                                                                                                                                                                                                              Loading Replay Monitor...

                                                                                                                                                                                                                                              Downloads

                                                                                                                                                                                                                                              e597585.rbs

                                                                                                                                                                                                                                              • Path C:\Config.Msi\e597585.rbs
                                                                                                                                                                                                                                              • Size 21KB
                                                                                                                                                                                                                                              • SHA256 5712e1e94e3e371dd6bd8216a537fde9d4ead169a15ee4df4f8bc736ad809c97
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              jjsploit.exe

                                                                                                                                                                                                                                              • Path C:\Program Files\jjsploit\jjsploit.exe
                                                                                                                                                                                                                                              • Size 17.6MB
                                                                                                                                                                                                                                              • SHA256 75c45301f7a6632b67934cd30bb08d4c322c55b9e68d2a6edbc5873982cbcbe8
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              jjsploit.lnk

                                                                                                                                                                                                                                              • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\jjsploit\jjsploit.lnk
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 14d871b46614ec313822b334fda020f1f201bdb045c05515aaf9f6dd1ff59811
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              jjsploit.lnk~RFe597a08.TMP

                                                                                                                                                                                                                                              • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\jjsploit\jjsploit.lnk~RFe597a08.TMP
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 0f059ebdf5331745c10d87582af2a8af83d752d00aa1949840bffb858d5ddbb2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              settings.dat

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                              • Size 40B
                                                                                                                                                                                                                                              • SHA256 308dc6ef39f832081ba9086da11d99c047d34d971c206771c36925dd27fa06cb
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                              BookmarkMergedSurfaceOrdering

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                              • Size 6B
                                                                                                                                                                                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                              BrowsingTopicsState

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                                                                                                                                              • Size 414B
                                                                                                                                                                                                                                              • SHA256 c905b2c91e19f16430bec4d0342e3062ca49fb37585929d5724078c91ab06077
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              f_00002e

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e
                                                                                                                                                                                                                                              • Size 23KB
                                                                                                                                                                                                                                              • SHA256 7e95ad448be4f5f724394acf9fb13bed920d4984bf680c89696849f4b6161a45
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_000045

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000045
                                                                                                                                                                                                                                              • Size 21KB
                                                                                                                                                                                                                                              • SHA256 76bb772510b6c189f97315d7de2cdd0e669bc7a42a870d59a883831d235fd60f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_00004b

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004b
                                                                                                                                                                                                                                              • Size 22KB
                                                                                                                                                                                                                                              • SHA256 a98d0d4af945bf8ffa1b1c1158986d30b5204ed4f3f5f246ee45a24c1de4b276
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_00006f

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006f
                                                                                                                                                                                                                                              • Size 18KB
                                                                                                                                                                                                                                              • SHA256 ff24af57f96f2ff93a97abe0498c6ddf96e29cf4df5277deae8c3aaeb2782ae7
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_000070

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000070
                                                                                                                                                                                                                                              • Size 23KB
                                                                                                                                                                                                                                              • SHA256 f3779f1efccc4bdcdf9c0a02ab95bf6bd092ed09c48c08cedc725889edd1d19f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_000071

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000071
                                                                                                                                                                                                                                              • Size 23KB
                                                                                                                                                                                                                                              • SHA256 8909904ab6c872eb994093482a88a28eca2cd95912d7b6fecd72103b0dc07edc
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_000072

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000072
                                                                                                                                                                                                                                              • Size 29KB
                                                                                                                                                                                                                                              • SHA256 b0696a88e9a184195fb661e9d74048e921287149a9da8855828be12e978f05fb
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_000073

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000073
                                                                                                                                                                                                                                              • Size 27KB
                                                                                                                                                                                                                                              • SHA256 8d718764681e8fa5335dca405f95a2c4798f000e7a75b397b8aaf635c25218fa
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_000074

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000074
                                                                                                                                                                                                                                              • Size 23KB
                                                                                                                                                                                                                                              • SHA256 f9a06e79cd3a2a20951c0f0e28f66dd0e6d3fda73911d640a2125c8fcb78f21a
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_00007c

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007c
                                                                                                                                                                                                                                              • Size 39KB
                                                                                                                                                                                                                                              • SHA256 396b451485c9f20f5213289e90fd9434d0391fda92d69736b5894f180860750a
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_0000f3

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000f3
                                                                                                                                                                                                                                              • Size 361KB
                                                                                                                                                                                                                                              • SHA256 02ff49f4431a46d64078b37db37186bd2f8c65655c9a81086ff174ead4486a18
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_0000fc

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000fc
                                                                                                                                                                                                                                              • Size 191KB
                                                                                                                                                                                                                                              • SHA256 2b99c09a4262ec498b8e586596942831b57efc50e9be74b71a4f9ef423864436
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_0000ff

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ff
                                                                                                                                                                                                                                              • Size 1024KB
                                                                                                                                                                                                                                              • SHA256 4410bf40819292810a92a79a23c1e31594da04dbbd668075b3b5ef4cd2090d54
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_000109

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000109
                                                                                                                                                                                                                                              • Size 1024KB
                                                                                                                                                                                                                                              • SHA256 53ba5cc0fa4153fe5e40cd7ecd016550e7805ae3edc5d91ffa4d03de1dc4ae2d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_00012f

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00012f
                                                                                                                                                                                                                                              • Size 44KB
                                                                                                                                                                                                                                              • SHA256 ce8ecd7c08ffbb4f2722b66b49ef0d7c8e9e750533920ddf04e74d8ec689a703
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_000168

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000168
                                                                                                                                                                                                                                              • Size 20KB
                                                                                                                                                                                                                                              • SHA256 57e12433622a0f043d950bc766a5bc423008d0468cab6497f3ead4e55df7c1c7
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_00016a

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00016a
                                                                                                                                                                                                                                              • Size 21KB
                                                                                                                                                                                                                                              • SHA256 43c0a5b4a404cccba2bce3d9bcf4869cc2f5c43afa7bff85d2420af42243edf7
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f_00020c

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00020c
                                                                                                                                                                                                                                              • Size 158KB
                                                                                                                                                                                                                                              • SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              fe8b7ca011cc9644_0

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fe8b7ca011cc9644_0
                                                                                                                                                                                                                                              • Size 261B
                                                                                                                                                                                                                                              • SHA256 46a93a8218010f21e9aca5349e1bf3a507de8ceb9862869ff47d95df4c83468e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 ec75c2a0f5e40d11135c262e6203b7b67856452eba2734a21ef7e883b2ced00e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 d254b093ec9177964f18db65b79e0f034ad06d80a72990a369038e07ce1fd863
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                              • SHA256 00a8454d431f44263f38f1104c9fd4b8132232c8c78ee5a30949546c4389075b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 7dee1acfba7f2ae182f08d79384280191d640634d630711feb6ebdef09de98c5
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 cf61f7873eb3a1f0d2c0271f12c72996898d04ebae0ecafa92d03ae9a2e3335f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 2399388f43b03327022e4cbf25c0080165536a6e3af4fdacb238051bec250ba0
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 fff2dbf01407a4ded84a250f61137e3661509cd57566c791fb6f096247bd1aef
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 5fd60ecc974ddf1fcd3173ce6f7aaa1bfc08c93c73db3c56629e2f355da5618f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              CURRENT

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT
                                                                                                                                                                                                                                              • Size 16B
                                                                                                                                                                                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                              MANIFEST-000001

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.5roblox.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                                                              • Size 23B
                                                                                                                                                                                                                                              • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                              Network Persistent State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                              • Size 23KB
                                                                                                                                                                                                                                              • SHA256 9b768dd53007269702f4c54b294ff406471eaf03d715a947badbe5493e323d37
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Network Persistent State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                              • Size 32KB
                                                                                                                                                                                                                                              • SHA256 7273727eeef8451abc1cb866c3b42a9e6451e4eb21fc68442b7048c696c82d15
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Network Persistent State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                              • Size 32KB
                                                                                                                                                                                                                                              • SHA256 ada95f880de7c061242ac78606f70f464d868305e77e806a659deea7b03d06c6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              SCT Auditing Pending Reports

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                                              • Size 2B
                                                                                                                                                                                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                              • SHA256 9e77099a999d11748752e0ee0c4f05c1d4145e099d82a17989ee19a859581155
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                              • SHA256 7782bdd6f5968296705dd669003bb8871d9f90455c899e65cda81788ff5822dd
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 21KB
                                                                                                                                                                                                                                              • SHA256 d97012a2ad8f2dd7c5f9dd15e1bfec66a2d01f121b39f7789ef11aeec60d1959
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 18KB
                                                                                                                                                                                                                                              • SHA256 b455dd4c5429e89940681ab87a295a5f9bdb5816ae284d723e8f5c8f8b54427e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 18KB
                                                                                                                                                                                                                                              • SHA256 81985c290d486d3d57bd98370c7fe93d0e95a7bc3c7075e8946aa2611b143394
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 19KB
                                                                                                                                                                                                                                              • SHA256 6899e4020b0faad1b1ff15a3d91341e280ee851495857b33efb6e60745497715
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 18KB
                                                                                                                                                                                                                                              • SHA256 9aab490259d3650e17fd343b6232569f4b47d3636cbafcc925653132493a4f59
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 18KB
                                                                                                                                                                                                                                              • SHA256 8380187894d9668bd7a397b752002918df0972285c671bc42054dd57f6d2b6d1
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 19KB
                                                                                                                                                                                                                                              • SHA256 39ec0ef33805874cba2e8e473fb562065368aebfd8bcb94e3d5d836657da26d9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 33f15a5fbffded47c4c35bac7291b38601030ea4fa9158a6d13bd6bf27466bee
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                              • SHA256 cdcdba2978d8d0f96faf7f8977e9389d0cbd5b184408917814853275cb1aee75
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                              • SHA256 27b57133d47d0e91dd2721c1e7cd806301a955e8c18495346ee3c0a591a11be6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                              • SHA256 5343fde0c517101ebf2ada257e853ff52a1c46ef4383fa4c7a1f35760b60a23c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Secure Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 815f7cf2441d8bbd1e771118781b4364aae22d7489793b4db97b9f0119d089e3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 168B
                                                                                                                                                                                                                                              • SHA256 856a7d37a79095395876c854f9a89d8e6a3c0b3ccda2bad9d9efa264b97304c3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 120B
                                                                                                                                                                                                                                              • SHA256 4cc50e3a95f74a4453879318d1161971957c9903e006f08d84e851d253cb5d1f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 144B
                                                                                                                                                                                                                                              • SHA256 797cdc952e2f293dcdaa7b18f72d8c4de4fe7a3cca22e434178e41fdc77a876f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              the-real-index~RFe586f5f.TMP

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586f5f.TMP
                                                                                                                                                                                                                                              • Size 96B
                                                                                                                                                                                                                                              • SHA256 687b8d8a036cf004eed4e033b41ea084d59c375f200a8ab677acf5662f950182
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 281a1d62dbfdce67d52cf2702d13e1f81ecc6a2d5bd3e4404b8dee94c7fe85f4
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 fac2e7e16cb989dbe3d4905ff055a5cc04b452f7418fe3cf6570069cce84fc65
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 8678058039f7dbc0c8a88b02e7d18a8b0ebbc76e7f1b9ce55a41d19c71932bc6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 6ddaa50dea1efe7b3fd2fffa5677016b9476976eeba22bf275fca94fd83d7693
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 543f09185b004f94583420b8cbcaa1df857dd177a644f9c30f844a89aa8da8c6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 97051cca06dd4125a9990b98915e857386bf9c050541d0f94a2a9cc91bc77a82
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 cf808ef5ca847ddc329af6bd41c6033576f07d28180600bd887d2437a0567b4d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 5877c7081804a928e885fb02b1f401024289832533255534c4f945c78d6f6020
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 1949aa9c57d4a894bdd3f449787555c8068159d29cebd2c4fb344eeeb35c8551
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 0588f3ba6a623ff2970512c905c56cd8f78565a51d6d2d43a3a0b76adbcd7e59
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 bd4e65b89aa65916ef459a5d23b3642d75fdccecb62cd82a090f64e30c85c639
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 ed63888213336ed2b5d3869ea99cf0097d30c7b50b63348cc321a7a1f88f3d09
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 1d4a6fae5ad280c8b26da41271b0ae04806c657ebdbce31945acb0c0bca7b13a
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 5aa5a0c0233220d30f0ffb97e14309b897324cccba5c11024e5a65d440eec17e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 8005ae4a1bfd764786031ff212bb27d00e92b14e7f9c406fd22c213f5d1730af
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 46eb9f9d495430489fefcf812f3c878748cd3f286bb81edabee70910f4a099f1
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 fb7058e3f572306ce972010a0380b7e7dedda13e2ee789fe9f8104857f985068
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 ca7cce1a71edf0ae8877c0842e35ba737161a40b0fcb23d66115da9731513df7
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                              • Size 91KB
                                                                                                                                                                                                                                              • SHA256 0487de9627be0853185def3e7d05c98d82df856a0030500cd16778febce43caa
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              df2a3bd2-ad07-4da8-9192-51e06edfc893.tmp

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\df2a3bd2-ad07-4da8-9192-51e06edfc893.tmp
                                                                                                                                                                                                                                              • Size 90KB
                                                                                                                                                                                                                                              • SHA256 5e442015aa172692c456321cb23f8fc6db154a3a5870b8844c2b2912dc3b98d8
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              prefs.json

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\prefs.json
                                                                                                                                                                                                                                              • Size 19B
                                                                                                                                                                                                                                              • SHA256 e03e9d262ca3b7d19e37c3a69c7d8b46bd3f5542aa555a17d864071c28257b2c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                              prefs.json

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\prefs.json
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 ddeae847e23ec4b4096e43b11f47ab6f85cb5b456d7da1c4e68601ed4b8c1884
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              prefs.json

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\prefs.json
                                                                                                                                                                                                                                              • Size 464B
                                                                                                                                                                                                                                              • SHA256 b57fbbafe8ff025ef1eb127b1c44929802dbc236dd3ff472bb4cc944942a1c58
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              prefs.json

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\prefs.json
                                                                                                                                                                                                                                              • Size 638B
                                                                                                                                                                                                                                              • SHA256 acd522f77522d6569d4a0b96d041a3c61e1d54414da5a6ecae07076f40f54ec2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              prefs.json

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\prefs.json
                                                                                                                                                                                                                                              • Size 51B
                                                                                                                                                                                                                                              • SHA256 6dd1d1ee53584cd340ffaba4ac7d15625b2675c00c662bf4808314cf752c3852
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              prefs.json

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\prefs.json
                                                                                                                                                                                                                                              • Size 216B
                                                                                                                                                                                                                                              • SHA256 548b827d5de5dd654b58a28581e065b50942ab34b3e7264ef7c336e478dad6d3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              prefs.json

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\prefs.json
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 2a6a2b691a5cb90872931fae0ceeae8ec529ade505a8c07894b86dfe70494adc
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              v8_context_snapshot.bin

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\144.0.7559.70\v8_context_snapshot.bin
                                                                                                                                                                                                                                              • Size 696KB
                                                                                                                                                                                                                                              • SHA256 012772b3e148777f31583d28669a048ae5863208319ce85d43483f44b268851e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              pulsebrowser.exe

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
                                                                                                                                                                                                                                              • Size 3.3MB
                                                                                                                                                                                                                                              • SHA256 390d6c1a3af3ec89b3cc14db1d0302ea4e954acfaee6db8fb6b27fb31025cdf8
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              144.0.7559.70.manifest

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\144.0.7559.70.manifest
                                                                                                                                                                                                                                              • Size 232B
                                                                                                                                                                                                                                              • SHA256 2269737cd3c209c01e00a68367d3ec15f73d2d99a07048c06a206adf44d62301
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              external_extensions.json

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Extensions\external_extensions.json
                                                                                                                                                                                                                                              • Size 99B
                                                                                                                                                                                                                                              • SHA256 a68cafd7d78d5c671c2560656653f2a4d83ab66d87a8728356a88fb1f477b3e6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              iwa-key-distribution.pb

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\IwaKeyDistribution\iwa-key-distribution.pb
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 9dc3e6101aae59d527ef792193bdd515dbb0b08b8e5b94d905a2369807421e3d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              manifest.json

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\IwaKeyDistribution\manifest.json
                                                                                                                                                                                                                                              • Size 115B
                                                                                                                                                                                                                                              • SHA256 0cec57205f53f792b87eeffc1c3738037321bebcf48655ba8767c8c4ebfcd810
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              af.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\af.pak
                                                                                                                                                                                                                                              • Size 527KB
                                                                                                                                                                                                                                              • SHA256 ed6fcac3da50323bd21a10b447b75903c528064b0ba21a3b6f9bb103669b0b1c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              am.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\am.pak
                                                                                                                                                                                                                                              • Size 854KB
                                                                                                                                                                                                                                              • SHA256 31b06f55400059406f47a259327be4abfd3c0417620565a5b54e14f0ad8e0a2c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              am_MASCULINE.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\am_MASCULINE.pak
                                                                                                                                                                                                                                              • Size 18B
                                                                                                                                                                                                                                              • SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                              ar.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\ar.pak
                                                                                                                                                                                                                                              • Size 948KB
                                                                                                                                                                                                                                              • SHA256 63ddd118a9fc95e03130cece455cf5f7cdf4c2670abf4de08f30b8a2a44929fe
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              bg.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\bg.pak
                                                                                                                                                                                                                                              • Size 975KB
                                                                                                                                                                                                                                              • SHA256 ef91612b7149b401edbfb3ca6fa945ce1884f1f74f1e7f7afbcb6a7365c73d58
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              bn.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\bn.pak
                                                                                                                                                                                                                                              • Size 1.2MB
                                                                                                                                                                                                                                              • SHA256 3727bf93cc00fa39bdbb120c0647f9c568486f9a45670665c99333f19f9c8111
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              ca.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\ca.pak
                                                                                                                                                                                                                                              • Size 599KB
                                                                                                                                                                                                                                              • SHA256 7f8f106a6f5c59805da98f14001f42d01c206031462bc79c3bb70641f9a3bb7d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              cs.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\cs.pak
                                                                                                                                                                                                                                              • Size 611KB
                                                                                                                                                                                                                                              • SHA256 9e7e8670a8b3f56afbae941256edcc9199a6b17fe58ea54be5e7f69c29255aa9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              da.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\da.pak
                                                                                                                                                                                                                                              • Size 557KB
                                                                                                                                                                                                                                              • SHA256 844c321007c6e2f2f73a980914c44ca9966de589c646e6954058a7f174354f8b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              de.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\de.pak
                                                                                                                                                                                                                                              • Size 602KB
                                                                                                                                                                                                                                              • SHA256 90fd0956381f972784b065221b038233a8397989521be56b72391fa70410f4f9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              el.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\el.pak
                                                                                                                                                                                                                                              • Size 1.0MB
                                                                                                                                                                                                                                              • SHA256 2f47a893cedbe4cfe5b9502add9834537df769514df50f2bb4aa5e68f84d6f60
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              en-GB.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\en-GB.pak
                                                                                                                                                                                                                                              • Size 479KB
                                                                                                                                                                                                                                              • SHA256 7efc1dd38cd7b0e6a4a585e4fd5cfa205c05ecadd3677ed66a5eb33199e1841f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              en-US.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\en-US.pak
                                                                                                                                                                                                                                              • Size 483KB
                                                                                                                                                                                                                                              • SHA256 ca43214d77856f935f7c1a41a19dcb3e20c103e536d4b502d0791d08a02cc2ca
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              es-419.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\es-419.pak
                                                                                                                                                                                                                                              • Size 585KB
                                                                                                                                                                                                                                              • SHA256 5bc3e1af45d8a3b894c76644cfe32a346b512988a80ad039f71990a401a154f9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              es.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\es.pak
                                                                                                                                                                                                                                              • Size 582KB
                                                                                                                                                                                                                                              • SHA256 54d20f64dafea59666194f20dd0fc7d0c81e162c62f72341bce05905c29dde87
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              et.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\et.pak
                                                                                                                                                                                                                                              • Size 534KB
                                                                                                                                                                                                                                              • SHA256 2fb0a6aa7123928ff44680ff93a57b2b0c0f80d19160941a44c0ce5abf9c898a
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              fa.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\fa.pak
                                                                                                                                                                                                                                              • Size 877KB
                                                                                                                                                                                                                                              • SHA256 87ebfb9077fca7840db2dd4a5d0380ff9881ec33d19bf317a538d1fa347a9008
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              fi.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\fi.pak
                                                                                                                                                                                                                                              • Size 540KB
                                                                                                                                                                                                                                              • SHA256 c251d6471a981a81974b230254f70edf8524dd9599e1f632a01c3c84299a513c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              fil.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\fil.pak
                                                                                                                                                                                                                                              • Size 615KB
                                                                                                                                                                                                                                              • SHA256 2fe59ad9beb60928b893ff9065e9ccc349f3f0cd6f8d86c70877852020e190a6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              fr.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\fr.pak
                                                                                                                                                                                                                                              • Size 636KB
                                                                                                                                                                                                                                              • SHA256 2eae1eb50fb0e8316ff2079f739c4024d547f784111693e5ab74ed10cc686304
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              gu.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\gu.pak
                                                                                                                                                                                                                                              • Size 1.2MB
                                                                                                                                                                                                                                              • SHA256 24b2e3afed88894849eb071cef49fb2903d7a45e4ec4beb0a84d76982f4ad66d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              he.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\he.pak
                                                                                                                                                                                                                                              • Size 772KB
                                                                                                                                                                                                                                              • SHA256 8c6f1c6eae333af2f8489b67841b73e15a10ce74f83cb9bdebc5b8d2ed86ba19
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              hi.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\hi.pak
                                                                                                                                                                                                                                              • Size 1.3MB
                                                                                                                                                                                                                                              • SHA256 d2dec78d66ab76318fee54f879738203ef1c95ec36cbf30bcc8a5ea9b6544869
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              hr.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\hr.pak
                                                                                                                                                                                                                                              • Size 591KB
                                                                                                                                                                                                                                              • SHA256 3e87ad732807f87bae23d734df28f1e51930f36401c934e2c641c8d044d45321
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              hu.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\hu.pak
                                                                                                                                                                                                                                              • Size 635KB
                                                                                                                                                                                                                                              • SHA256 f9af1a2495f5d0f01624140cbc9ef4081a3434ea53e773b1672f482bb052b7f9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              id.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\id.pak
                                                                                                                                                                                                                                              • Size 524KB
                                                                                                                                                                                                                                              • SHA256 dad989d078311c12bcc55d1dcd4262b0bc143ce24d27b57f86b3ae2d37366fb3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              it.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\it.pak
                                                                                                                                                                                                                                              • Size 582KB
                                                                                                                                                                                                                                              • SHA256 53e5ca0afe9c2aa99ea67ee898466af184ef3ca63fa734e3d69fbc24c3d3b0eb
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              ja.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\ja.pak
                                                                                                                                                                                                                                              • Size 703KB
                                                                                                                                                                                                                                              • SHA256 ebe7b6291cf54475fba6affa79442635da5615e6b88bca27b27e1aecb32ab614
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              kn.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\kn.pak
                                                                                                                                                                                                                                              • Size 1.4MB
                                                                                                                                                                                                                                              • SHA256 992fd448c6535e2fd8340a8103a216774e0af539372cb949bbeb446b59b92eef
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              ko.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\ko.pak
                                                                                                                                                                                                                                              • Size 595KB
                                                                                                                                                                                                                                              • SHA256 e9a94cb014de3660e1e4f4a2ace8dbc5ee8395e091e69b7de8f89be225946a00
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              lt.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\lt.pak
                                                                                                                                                                                                                                              • Size 641KB
                                                                                                                                                                                                                                              • SHA256 4d3aee826fdcafb2abe126991a1354f5d9177baa1b5e2c562a1ccf7876d25391
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              lv.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\lv.pak
                                                                                                                                                                                                                                              • Size 639KB
                                                                                                                                                                                                                                              • SHA256 b54a2703caef983869624fbaa6190f1bacf71582b6e4c0638bb2adf79149f833
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              ml.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\ml.pak
                                                                                                                                                                                                                                              • Size 1.4MB
                                                                                                                                                                                                                                              • SHA256 2c1f81f1b81a70da4cb90bdddbc17d9072ab7d506ebaf6be776c6bb46d0a6560
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              mr.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\mr.pak
                                                                                                                                                                                                                                              • Size 1.2MB
                                                                                                                                                                                                                                              • SHA256 6b85c1f4afc86115fc44b2169ceef6f8e9b587d5f24bed951ab234207c310cf9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              ms.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\ms.pak
                                                                                                                                                                                                                                              • Size 551KB
                                                                                                                                                                                                                                              • SHA256 1f97eb0f972853484555def69549b2c3ed1415f57b461b1886327101e2a727d5
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              nb.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\nb.pak
                                                                                                                                                                                                                                              • Size 530KB
                                                                                                                                                                                                                                              • SHA256 bade71c21b574c721405d426d7f92535f173e5ae4ab019f2fc30a04d90a324ac
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              nl.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\nl.pak
                                                                                                                                                                                                                                              • Size 552KB
                                                                                                                                                                                                                                              • SHA256 11c6d62846fbb42a081dde68d782849503cbfbedc67781f0f97c517ce6de9de6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              pl.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\pl.pak
                                                                                                                                                                                                                                              • Size 615KB
                                                                                                                                                                                                                                              • SHA256 3f869b6fe2df7b727ce47e1226e0408d758f427abd40265e03a9c7d972f6a823
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              pt-BR.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\pt-BR.pak
                                                                                                                                                                                                                                              • Size 574KB
                                                                                                                                                                                                                                              • SHA256 e8f3a727ae2fb7c3139255ed0447fdfcb03985b93bbf9ad8a28ba940d7c4bf66
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              pt-PT.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\pt-PT.pak
                                                                                                                                                                                                                                              • Size 579KB
                                                                                                                                                                                                                                              • SHA256 0130df6b4ad0a19a6b8b4b3e77d6a029990cd458d5432682e72c019648a38279
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              ro.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\ro.pak
                                                                                                                                                                                                                                              • Size 600KB
                                                                                                                                                                                                                                              • SHA256 7879a7295c865cda5ccf2d96f7bc4f0e1a1ab7aeb3e89a545d42ddcf8c780930
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              ru.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\ru.pak
                                                                                                                                                                                                                                              • Size 991KB
                                                                                                                                                                                                                                              • SHA256 309dfca51e843409614b25cdbb982134c25029fb8dcd9e5be111e41327917e7c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              sk.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\sk.pak
                                                                                                                                                                                                                                              • Size 622KB
                                                                                                                                                                                                                                              • SHA256 d2063c776a0355968164ae852adcc60f33bcc9c12727b0f9760c4881e21ea9cd
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              sl.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\sl.pak
                                                                                                                                                                                                                                              • Size 596KB
                                                                                                                                                                                                                                              • SHA256 cca1e35b4aa4beedb55baaaa2628bf7c5506e95a36fc9c65dba6686fea81bd49
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              sr.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\sr.pak
                                                                                                                                                                                                                                              • Size 917KB
                                                                                                                                                                                                                                              • SHA256 f5cdb7ea6c962edbcdaad7508acff51dd6557593e9dcd6db39004a094d9bfcb0
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              sv.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\sv.pak
                                                                                                                                                                                                                                              • Size 534KB
                                                                                                                                                                                                                                              • SHA256 aaff05a258345492a7ad8a0edf14b1c396b668fe79f3231943d951c3ba86e1f2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              sw.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\sw.pak
                                                                                                                                                                                                                                              • Size 565KB
                                                                                                                                                                                                                                              • SHA256 9bfa827880eca70c67d695a69ee00f447468b4f58c1d2cde6b524a1a7a3c89bd
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              ta.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\ta.pak
                                                                                                                                                                                                                                              • Size 1.4MB
                                                                                                                                                                                                                                              • SHA256 851b5b5682aef871e593c44fcff36cdc484e5f69a0ac987aac78a1b561abbe12
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              te.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\te.pak
                                                                                                                                                                                                                                              • Size 1.3MB
                                                                                                                                                                                                                                              • SHA256 00a35091104eb30e5680d121756309d769b209a72710fca9395c118b0cefc286
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              th.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\th.pak
                                                                                                                                                                                                                                              • Size 1.1MB
                                                                                                                                                                                                                                              • SHA256 b60bf7b73fcaf45f8f85ffd03f59dbbc7f7ecb6f783e190f0c370275a0cd4486
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              tr.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\tr.pak
                                                                                                                                                                                                                                              • Size 575KB
                                                                                                                                                                                                                                              • SHA256 b2d8db449ecc6411237749483ebbf7cd16ea10bd2973ed3fda2491186f6c38b5
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              uk.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\uk.pak
                                                                                                                                                                                                                                              • Size 996KB
                                                                                                                                                                                                                                              • SHA256 cac81dc08f0bc622ced831010c70b4cf537f169ad755d08862513646fd674b32
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              ur.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\ur.pak
                                                                                                                                                                                                                                              • Size 864KB
                                                                                                                                                                                                                                              • SHA256 af23f3bad82ca68ef980946829ac6f2c0fd9087a3e6da3c363ae877eeba34144
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              vi.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\vi.pak
                                                                                                                                                                                                                                              • Size 686KB
                                                                                                                                                                                                                                              • SHA256 d03d1174a608d80e7fe74d7e58a59a75483d3ace4377bb564cee767f13abb239
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              zh-CN.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\zh-CN.pak
                                                                                                                                                                                                                                              • Size 490KB
                                                                                                                                                                                                                                              • SHA256 9e49a51957bc767fbdf5aacb23b51cc9a0f2fea13e1ab9970339d84652336ca5
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              zh-TW.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\Locales\zh-TW.pak
                                                                                                                                                                                                                                              • Size 485KB
                                                                                                                                                                                                                                              • SHA256 78048080dd4cf8780f7c62ee6a97063bae8a6bf927b04d1ab65dd260a845aa9b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              manifest.json

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\MEIPreload\manifest.json
                                                                                                                                                                                                                                              • Size 238B
                                                                                                                                                                                                                                              • SHA256 44844cf3dde6e80087ae0e6bf0d9326d7ef7d23326d24ac83af0850be26923d2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              preloaded_data.pb

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\MEIPreload\preloaded_data.pb
                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                              • SHA256 c6070a157b4e28d16fbccbd233e93846ddb070c85e1a1bc64469b7a5f1424fad
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              manifest.json

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\PrivacySandboxAttestationsPreloaded\manifest.json
                                                                                                                                                                                                                                              • Size 122B
                                                                                                                                                                                                                                              • SHA256 51c311a4ba03140bcd1c827f8d93dba50cadda736925903b26e95609275dbffd
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              privacy-sandbox-attestations.dat

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\PrivacySandboxAttestationsPreloaded\privacy-sandbox-attestations.dat
                                                                                                                                                                                                                                              • Size 7KB
                                                                                                                                                                                                                                              • SHA256 59e345dc13aedee9ea46b92e58300ecaca944aaea9384c7af885400ac2ae8806
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Logo.png

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\VisualElements\Logo.png
                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                              • SHA256 e3d9c29125a0d398a76faf588a9e9bee843f70839d0c163678ee397da3c7618e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              SmallLogo.png

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\VisualElements\SmallLogo.png
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 479fc6c35bbf483a22994608dc2418087c6487930f73d99fd137a8e76b3ab61b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              d3dcompiler_47.dll

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\d3dcompiler_47.dll
                                                                                                                                                                                                                                              • Size 4.5MB
                                                                                                                                                                                                                                              • SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              dxcompiler.dll

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\dxcompiler.dll
                                                                                                                                                                                                                                              • Size 24.4MB
                                                                                                                                                                                                                                              • SHA256 34117a222bd4e9e15807035c3d5db467b65fc05cea1c5a55e9226f58939205c3
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              dxil.dll

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\dxil.dll
                                                                                                                                                                                                                                              • Size 1.4MB
                                                                                                                                                                                                                                              • SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              eventlog_provider.dll

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\eventlog_provider.dll
                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                              • SHA256 9a871b06aac4a2635ab84f04fc6dd9933417ae8d1d3571fb4df17dd283fed4fb
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              icudtl.dat

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\icudtl.dat
                                                                                                                                                                                                                                              • Size 10.3MB
                                                                                                                                                                                                                                              • SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              libEGL.dll

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\libEGL.dll
                                                                                                                                                                                                                                              • Size 496KB
                                                                                                                                                                                                                                              • SHA256 9a812d76e03abb22e1a07183ce0bef93f8a3388f6dbfc97bb6da3e9922b0083b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              libGLESv2.dll

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\libGLESv2.dll
                                                                                                                                                                                                                                              • Size 7.5MB
                                                                                                                                                                                                                                              • SHA256 98f72f3672a349161c5a9f4f3dc3e18a5e6b4f8b5916cef353bae2ff9fb00a29
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              notification_helper.exe

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\notification_helper.exe
                                                                                                                                                                                                                                              • Size 1.7MB
                                                                                                                                                                                                                                              • SHA256 e860e097cce1fed3ecbef7a6ccc6abe18ff327e591fc5b91bec8a2dfcf55e12f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              pulsebrowser_100_percent.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\pulsebrowser_100_percent.pak
                                                                                                                                                                                                                                              • Size 699KB
                                                                                                                                                                                                                                              • SHA256 b2d8cefff009594a0ab040b1d8a2caab24340443dc4d9314d65c1b41ae79e974
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              pulsebrowser_200_percent.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\pulsebrowser_200_percent.pak
                                                                                                                                                                                                                                              • Size 1.1MB
                                                                                                                                                                                                                                              • SHA256 7e8130fe4cc5bb1535904d5589134a7792c538d7127841ef00fa02882403f9c1
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              pulsebrowser_elf.dll

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\pulsebrowser_elf.dll
                                                                                                                                                                                                                                              • Size 1.6MB
                                                                                                                                                                                                                                              • SHA256 41ec443de80eda30f79e85c735e49e83e9b72f5961ab44650767f5dc8e0bb645
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              resources.pak

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\resources.pak
                                                                                                                                                                                                                                              • Size 12.1MB
                                                                                                                                                                                                                                              • SHA256 c867145db099c36cac587a9bbcde678f4717056e2d0fc1b406b2bcfdddd6b287
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              vk_swiftshader.dll

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\vk_swiftshader.dll
                                                                                                                                                                                                                                              • Size 5.2MB
                                                                                                                                                                                                                                              • SHA256 ef96c9ec0d2ce875376acf03ab13ccc997b0f6e7254f54c9870c70b4600959be
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              vk_swiftshader_icd.json

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\vk_swiftshader_icd.json
                                                                                                                                                                                                                                              • Size 106B
                                                                                                                                                                                                                                              • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              vulkan-1.dll

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\144.0.7559.70\vulkan-1.dll
                                                                                                                                                                                                                                              • Size 930KB
                                                                                                                                                                                                                                              • SHA256 8cc57c71f67b13dabc52165f4887b357fc4d5307ac4093cb663a5e8b88e7aaf2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              pulsebrowser_proxy.exe

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source5824_134508216\pulsebrowser-bin\pulsebrowser_proxy.exe
                                                                                                                                                                                                                                              • Size 1.5MB
                                                                                                                                                                                                                                              • SHA256 9f988ab06d5aa41bde683ffeec214de21ff5766ced210be0404cd19aeac6f09d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              settings.dat

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                              • Size 40B
                                                                                                                                                                                                                                              • SHA256 cfb84dfb7478f4541d492ba29f2caa0a9fffdcda00c1e50cad788c584fb986a1
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                              Preload Data

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Crowd Deny\2026.4.16.60\Preload Data
                                                                                                                                                                                                                                              • Size 206KB
                                                                                                                                                                                                                                              • SHA256 cec46e1f7b6539072bc91a1e616a0118b36c266e40b5301af2e50d70b635b9b9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              manifest.json

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Crowd Deny\2026.4.16.60\manifest.json
                                                                                                                                                                                                                                              • Size 108B
                                                                                                                                                                                                                                              • SHA256 105a8c0ce013084a0a44ab39df41ee2b3ca392ddc7b6127850846cbf355bb78d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              DefaultConfig

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\DefaultConfig
                                                                                                                                                                                                                                              • Size 41B
                                                                                                                                                                                                                                              • SHA256 059585da9353723163a690f71dd734b2340824f38e7752f20f80f95da216239b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                              019d9e23-d599-45d7-98d9-2d541769fc66.tmp

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\019d9e23-d599-45d7-98d9-2d541769fc66.tmp
                                                                                                                                                                                                                                              • Size 84B
                                                                                                                                                                                                                                              • SHA256 b87bf305aafae1f1ec7dd947176c9529b2a9cbd4a3bf296fce25fc009e725366
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              7603b9f4-5ef1-45f4-9296-14c870542356.tmp

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\7603b9f4-5ef1-45f4-9296-14c870542356.tmp
                                                                                                                                                                                                                                              • Size 175KB
                                                                                                                                                                                                                                              • SHA256 a6c8a9a503d94e3db1354495676a4c9ddc4b7b5960d5c6b80efed9cc9c3fa776
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              data_0

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Cache\Cache_Data\data_0
                                                                                                                                                                                                                                              • Size 44KB
                                                                                                                                                                                                                                              • SHA256 3f0de3b04f99c871c732998a2bac9a36d1ea310f28dec27019a3efd35116aafc
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              background.js

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Extensions\chiflgcemplicneemgmpmaphbfhekkfm\1.4_0\background.js
                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                              • SHA256 e4065c4d1c020f42a92e02a035649a29b2b37a518005eed754046e018c7ab704
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              logo_48.png

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Extensions\chiflgcemplicneemgmpmaphbfhekkfm\1.4_0\logo_48.png
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 9089cc13d35a4b04abaae2ab915f3a507e27e6290b46043af2c0f38835013e48
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              Network Persistent State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 2368c43022928063cdf908b214f5316c2b84624b4fc4ce155cfb6f5d808fd62d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              Network Persistent State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 34d3da5a0fef6ec5e6ed8e0dcdd6614e8dc720461def3c771ce9a8849fba2c63
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              Network Persistent State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 2b1296617332d8f4398862433187747257c94080cceda4d93a2889bfbd98078b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              TransportSecurity

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Network\TransportSecurity
                                                                                                                                                                                                                                              • Size 353B
                                                                                                                                                                                                                                              • SHA256 82d1cd1cd12882c2861903aac3df9ff8d0802a405dc777dd3bb4baebbabb8f4b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 4427148efa1e39e5d55dd0aa09d61661f2dc51b2b0ca36a30977e83d7e5d15c8
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 23d907b94ff1b12116476a27cebea5913f784e6eedfd5f604af3854b3643965e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 b74ab8628b9578adcf830c014c0b3d109a282b0c5af128f7aa265cb0a2637cd7
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 d2ed658b2ced8d4cb35e72d5f9d2e68caaf0c4e2c0a7b3f87e9b3c7a8392a8d8
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 8965105e47f91261da37b5725a3d21022c201765697dc40d99822cf7c06b48f9
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Preferences
                                                                                                                                                                                                                                              • Size 10KB
                                                                                                                                                                                                                                              • SHA256 570ac65b14a80578f3036dd178e47946f635f3a2d4eca906f0b77ff42df3ac3c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Secure Preferences

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 a0a1f058aa698ad251d91189af52c28f95ab2856f969d67942ed39e18a4535da
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 72B
                                                                                                                                                                                                                                              • SHA256 fe9ebebb92694b2c2512d5b6067c56c3087dae89357a9355f448c429ad4c5e2d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              the-real-index~RFe59bf5e.TMP

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59bf5e.TMP
                                                                                                                                                                                                                                              • Size 72B
                                                                                                                                                                                                                                              • SHA256 09e44cbd86502b3a5307d0a65e1ea0dc5cab835c6ff9db040166fdc57ecbf3e5
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              MANIFEST-000001

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Sync Data\LevelDB\MANIFEST-000001
                                                                                                                                                                                                                                              • Size 41B
                                                                                                                                                                                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                              ae58f53d-4647-4d16-9274-4b5d5dfa99b3.tmp

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\ae58f53d-4647-4d16-9274-4b5d5dfa99b3.tmp
                                                                                                                                                                                                                                              • Size 11KB
                                                                                                                                                                                                                                              • SHA256 64f52a28cc3682f7bab3878d59b83c71f1ccf36a772108c609c19f17a49c55cb
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              bc56d84a-7962-483e-87e9-628456682d42.tmp

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\bc56d84a-7962-483e-87e9-628456682d42.tmp
                                                                                                                                                                                                                                              • Size 414B
                                                                                                                                                                                                                                              • SHA256 b3c0166c581fc08fd18223c3e5b85e6ab924bc93d2a50b9dfdde729a13ebca2f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              data_0

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\GrShaderCache\data_0
                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                              data_2

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\GrShaderCache\data_2
                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                              data_3

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\GrShaderCache\data_3
                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                              data_1

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\GraphiteDawnCache\data_1
                                                                                                                                                                                                                                              • Size 264KB
                                                                                                                                                                                                                                              • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Local State
                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                              • SHA256 7fd408f7e714dc6d1b773c4e49b83167e2f8b1d06e317cff803903b259aec27e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Local State
                                                                                                                                                                                                                                              • Size 7KB
                                                                                                                                                                                                                                              • SHA256 a1965cdb9f2e4324c8d4fafa8cd2b37463e8e1d8441cb95bb1886ddc1367ca3d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Local State
                                                                                                                                                                                                                                              • Size 7KB
                                                                                                                                                                                                                                              • SHA256 f4cd897a479fe0f19574e3fbd48ab72fcd0b3566990866fc429df7e6b29d456e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Local State
                                                                                                                                                                                                                                              • Size 6KB
                                                                                                                                                                                                                                              • SHA256 9f9a7eb7cdf63b0ef377f43989650bc8162fb97f05653623d206e8d59623b42c
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Local State
                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                              • SHA256 98433f79c03655ce013b0fad814c0e6af3cf7f21e715c8b938651af1329c693e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Local State
                                                                                                                                                                                                                                              • Size 6KB
                                                                                                                                                                                                                                              • SHA256 06bfa43602bad50799a753a1825fa2d8a607f7fd8d6be9ded9c014fd0b4d3e69
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Local State
                                                                                                                                                                                                                                              • Size 7KB
                                                                                                                                                                                                                                              • SHA256 918914f9402c947a95163e6a4cfcc79f33cee2db2ce5aa812dec0c972e172051
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State~RFe59bf5e.TMP

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Local State~RFe59bf5e.TMP
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 ffea9cdea1229c9c00ac59c4620425f5f3ed5171776550a5d3f520d3f26cfe3d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              ranked_dicts

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\ZxcvbnData\3\ranked_dicts
                                                                                                                                                                                                                                              • Size 865KB
                                                                                                                                                                                                                                              • SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              5103eba2-215e-4307-b06a-8400d1849cfc.tmp

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\component_crx_cache\5103eba2-215e-4307-b06a-8400d1849cfc.tmp
                                                                                                                                                                                                                                              • Size 13B
                                                                                                                                                                                                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                              metadata.json

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                              • Size 236B
                                                                                                                                                                                                                                              • SHA256 bca34ad19bd8f8438b4c13c70c1b2bd702ca564fdded468dc68d2c050ec0f42b
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              metadata.json

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                              • Size 124B
                                                                                                                                                                                                                                              • SHA256 9c1891a60519e5be34a9c8640b2a89e379b8e4a2cbc7d5f2a88f670c4a1dc043
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              MSI2F34.tmp

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\MSI2F34.tmp
                                                                                                                                                                                                                                              • Size 132KB
                                                                                                                                                                                                                                              • SHA256 7f47d98ab25cfea9b3a2e898c3376cc9ba1cd893b4948b0c27caa530fd0e34cc
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              33edd161-2765-4aca-878d-0813e06b17e7.tmp

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6180_1422675247\33edd161-2765-4aca-878d-0813e06b17e7.tmp
                                                                                                                                                                                                                                              • Size 15.7MB
                                                                                                                                                                                                                                              • SHA256 e6dc7752da8dec8426e0dd1436f87480431c34eeb7cf112d30a2b12ab2fcc189
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              logo_48.png

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6180_1422675247\CRX_INSTALL\logo_48.png
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 b1aabc9cfa8f04287b6133dddc0a5a1571bd5e0f5e79cbc03a34b62dd00e2b79
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              settings.dat

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Crashpad\settings.dat
                                                                                                                                                                                                                                              • Size 280B
                                                                                                                                                                                                                                              • SHA256 471a28a2ec80c5be4c45e0c64173e830f91e8a265919b7e401d150c8b9e9e29a
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                              • Size 144B
                                                                                                                                                                                                                                              • SHA256 bef2aa457f76edb7d51481b2e6cc521e78dea0ee8926d280fc02ca478f15f160
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              the-real-index~RFe608ee6.TMP

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe608ee6.TMP
                                                                                                                                                                                                                                              • Size 48B
                                                                                                                                                                                                                                              • SHA256 66b53e452d0a267e6e82d46c33330a9010a34ee63c2ffb6b06306371fc2d64e2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                              index

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Default\Code Cache\wasm\index
                                                                                                                                                                                                                                              • Size 24B
                                                                                                                                                                                                                                              • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Local State
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 8d59e515ab16a8e0081691c28bcfd273e8707d93f7e2479733551b76998263c0
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Local State
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 fd910c38fb52218202907ec64abfa565473753eee50b33f650e3b2e989e80f75
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Local State
                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                              • SHA256 74f1d365826af482a07848e7ead0148a86e3c3593d638492c5aa774226dead19
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Local State
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 31237d5f2d72b787f7cea94136c79a23031bbbb67154e9a65f863026ac4fc3d8
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Local State
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 72ad7b85628ac452071d78b25fb6e2796940d0fcec58e869aaea7f2a72d39348
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              Local State~RFe6024f1.TMP

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\net.wearedevs\EBWebView\Local State~RFe6024f1.TMP
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 b86d69eb03f82d75f266bda0b346e8116993455e22de5d65dbba4c4ca63812fd
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              default.dic

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                                                                                                                                                              • Size 2B
                                                                                                                                                                                                                                              • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                              data.safe.tmp

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\96276qki.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                                                                                                                                              • Size 7KB
                                                                                                                                                                                                                                              • SHA256 179a7aeaaf0046e7a2976dac3bb0cd9810e21cc49ad2c2e7abb4ed344bd623f0
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              data.safe.tmp

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\96276qki.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                                                                                                                                              • Size 5KB
                                                                                                                                                                                                                                              • SHA256 3ab877dd3725b033cc460de1a18a177da892d00bf3f37a881f69beb79ac7a9f8
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              events

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\96276qki.default-release\datareporting\glean\events\events
                                                                                                                                                                                                                                              • Size 1KB
                                                                                                                                                                                                                                              • SHA256 ef0ad46e0c775e1647a9df216c6bbf43ca6a59db01c54b078cc4a003e6958809
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              03e9082e-df92-4753-b74b-f270ce52c770

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\96276qki.default-release\datareporting\glean\pending_pings\03e9082e-df92-4753-b74b-f270ce52c770
                                                                                                                                                                                                                                              • Size 883B
                                                                                                                                                                                                                                              • SHA256 122eee6fb2527745eba83c77073ab87f061a9c10c75da77d8daf620527c1c414
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              3a89b389-8e0b-424c-bd62-dbbc3c90add8

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\96276qki.default-release\datareporting\glean\pending_pings\3a89b389-8e0b-424c-bd62-dbbc3c90add8
                                                                                                                                                                                                                                              • Size 235B
                                                                                                                                                                                                                                              • SHA256 055fabb2e18ef80031814f2d36a08578f055b1584be5f89eb6e45996674923b6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              610b1296-01e8-41a8-a3a7-bfd96f8b8dad

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\96276qki.default-release\datareporting\glean\pending_pings\610b1296-01e8-41a8-a3a7-bfd96f8b8dad
                                                                                                                                                                                                                                              • Size 235B
                                                                                                                                                                                                                                              • SHA256 270f37710d2fbcf076acb10f774097f2220f7ea24176424f3423d95766d41b39
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              e37cb3b8-d47a-4e6c-9ca8-963a28943d1c

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\96276qki.default-release\datareporting\glean\pending_pings\e37cb3b8-d47a-4e6c-9ca8-963a28943d1c
                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                              • SHA256 104e62768d9093b0fe2fac36a5945da936038b80042fd8a5e7b86b91777a08a5
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              f3871b78-60b3-4271-a9ae-5cd055e5c995

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\96276qki.default-release\datareporting\glean\pending_pings\f3871b78-60b3-4271-a9ae-5cd055e5c995
                                                                                                                                                                                                                                              • Size 886B
                                                                                                                                                                                                                                              • SHA256 0a52c1c5b44768927b992ffb61790160ecf14b5b28ebe8a47117e8802aea25f8
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              faa02689-4995-47db-8e5b-0df06f5e2aeb

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\96276qki.default-release\datareporting\glean\pending_pings\faa02689-4995-47db-8e5b-0df06f5e2aeb
                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                              • SHA256 a30590eca18c68f54b87a5c6befcf8256f3470a5710e584941022dec19052a1f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              prefs-1.js

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\96276qki.default-release\prefs-1.js
                                                                                                                                                                                                                                              • Size 6KB
                                                                                                                                                                                                                                              • SHA256 c244a98fbdca4990e56bdccbdf2dd6df84e9ee02cb6aebf609160539ba9dddc0
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              prefs-1.js

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\96276qki.default-release\prefs-1.js
                                                                                                                                                                                                                                              • Size 6KB
                                                                                                                                                                                                                                              • SHA256 01f5586cf690df2cb630d8fc554ff9e0cc567bfa3da4551fbca7a662cfda4d90
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              prefs.js

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\96276qki.default-release\prefs.js
                                                                                                                                                                                                                                              • Size 6KB
                                                                                                                                                                                                                                              • SHA256 fe581e64dde8638d4055b24650b14233ca052fad8386003e456a66a954c882cd
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              sessionCheckpoints.json.tmp

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\96276qki.default-release\sessionCheckpoints.json.tmp
                                                                                                                                                                                                                                              • Size 288B
                                                                                                                                                                                                                                              • SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              3870112724rsegmnoittet-es.sqlite

                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\96276qki.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                                                                                                                                                                                                                              • Size 3.2MB
                                                                                                                                                                                                                                              • SHA256 2789607cb636af7eddd5eec3531d5d86178b5cb17fdf9416cc2b966ac36c63c8
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              jjsploit_8.17.9_x64_en-US.msi

                                                                                                                                                                                                                                              • Path C:\Users\Admin\Downloads\jjsploit_8.17.9_x64_en-US.msi
                                                                                                                                                                                                                                              • Size 6.0MB
                                                                                                                                                                                                                                              • SHA256 d60041d15a1294a6fb436d20bff8e2cfaffd6b61aeddd504aadd1a35dc7f5ddd
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              jjsploit_8.17.9_x64_en-US.msi:Zone.Identifier

                                                                                                                                                                                                                                              • Path C:\Users\Admin\Downloads\jjsploit_8.17.9_x64_en-US.msi:Zone.Identifier
                                                                                                                                                                                                                                              • Size 144B
                                                                                                                                                                                                                                              • SHA256 f58a37a00aeec8e91f3acef00a4ad65dfa282bee79107e241a7cd39c52e93d51
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              setup.exe

                                                                                                                                                                                                                                              • Path C:\Users\Admin\Downloads\setup.exe
                                                                                                                                                                                                                                              • Size 7.2MB
                                                                                                                                                                                                                                              • SHA256 12a182b0d4d4061d9edba588b004081aaff92cc458fe9b576e5b44cc82ed2c95
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              setup.exe:Zone.Identifier

                                                                                                                                                                                                                                              • Path C:\Users\Admin\Downloads\setup.exe:Zone.Identifier
                                                                                                                                                                                                                                              • Size 213B
                                                                                                                                                                                                                                              • SHA256 fa5b172c7a3445dd5b42ffebe5bcff4f88e0c52705019fbc85deb651bd0a8947
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              updater.exe

                                                                                                                                                                                                                                              • Path C:\Windows\SystemTemp\PulseSoftware4448_1880191202\bin\updater.exe
                                                                                                                                                                                                                                              • Size 6.2MB
                                                                                                                                                                                                                                              • SHA256 1533d6455ae751d9845d29c671d9b3e17ce3ec5c4a925135cc39ff7afc50e2a6
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              setup.exe

                                                                                                                                                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5156_637346489\CR_23D85.tmp\setup.exe
                                                                                                                                                                                                                                              • Size 4.7MB
                                                                                                                                                                                                                                              • SHA256 c35c6006dba712a0417e0710674fcc2a555dbbcedc53309fa824692470cdd4e7
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              manifest.json

                                                                                                                                                                                                                                              • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping7020_330132203\manifest.json
                                                                                                                                                                                                                                              • Size 69B
                                                                                                                                                                                                                                              • SHA256 aeb364b60303212808fac02eb490ee5b054ae843ce084376e5981ef8767e5198
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                              metadata-2

                                                                                                                                                                                                                                              • Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
                                                                                                                                                                                                                                              • Size 24.6MB
                                                                                                                                                                                                                                              • SHA256 cab4a21202a2e143cfd237078567bea80eb5830ded653784a08aa09b002ee3d2
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              {fd46b871-498a-4567-b075-4e03fd54241e}_OnDiskSnapshotProp

                                                                                                                                                                                                                                              • Path \??\Volume{8f991d9f-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{fd46b871-498a-4567-b075-4e03fd54241e}_OnDiskSnapshotProp
                                                                                                                                                                                                                                              • Size 6KB
                                                                                                                                                                                                                                              • SHA256 6950a50af94d1e7015cf9c653a6c4cc379414e3da8f1dc39b69fee9410b2754f
                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                              memory/992-783-0x000001600A810000-0x000001600A841000-memory.dmp

                                                                                                                                                                                                                                              memory/3044-645-0x0000021CDD4A0000-0x0000021CDD4D1000-memory.dmp

                                                                                                                                                                                                                                              memory/3044-6090-0x0000021CDD4A0000-0x0000021CDD4D1000-memory.dmp

                                                                                                                                                                                                                                              memory/3364-4169-0x0000028A832D0000-0x0000028A832D1000-memory.dmp

                                                                                                                                                                                                                                              memory/3364-4174-0x0000028A81BA0000-0x0000028A81BD1000-memory.dmp

                                                                                                                                                                                                                                              memory/3364-4168-0x0000028A832D0000-0x0000028A832D1000-memory.dmp

                                                                                                                                                                                                                                              memory/3364-4170-0x0000028A832D0000-0x0000028A832D1000-memory.dmp

                                                                                                                                                                                                                                              memory/3364-4173-0x0000028A83330000-0x0000028A83332000-memory.dmp

                                                                                                                                                                                                                                              memory/3364-4172-0x0000028A83330000-0x0000028A83332000-memory.dmp

                                                                                                                                                                                                                                              memory/3364-4171-0x0000028A83330000-0x0000028A83332000-memory.dmp

                                                                                                                                                                                                                                              memory/3704-780-0x000001916D8A0000-0x000001916D8AC000-memory.dmp

                                                                                                                                                                                                                                              memory/3704-779-0x0000019169E80000-0x0000019169EB1000-memory.dmp

                                                                                                                                                                                                                                              memory/4448-778-0x0000024244F50000-0x0000024244F81000-memory.dmp

                                                                                                                                                                                                                                              memory/4448-2827-0x0000024244F50000-0x0000024244F81000-memory.dmp

                                                                                                                                                                                                                                              memory/4816-782-0x000001E9C6300000-0x000001E9C6331000-memory.dmp

                                                                                                                                                                                                                                              memory/4844-781-0x000001E7898A0000-0x000001E7898D1000-memory.dmp

                                                                                                                                                                                                                                              memory/4880-4510-0x00000141DAEF0000-0x00000141DAF21000-memory.dmp

                                                                                                                                                                                                                                              memory/4960-594-0x000002263CED0000-0x000002263CF01000-memory.dmp

                                                                                                                                                                                                                                              memory/4972-3788-0x00000200A5EE0000-0x00000200A5EE1000-memory.dmp

                                                                                                                                                                                                                                              memory/4972-3796-0x00000200A5EE0000-0x00000200A5EE1000-memory.dmp

                                                                                                                                                                                                                                              memory/4972-3792-0x00000200A5EE0000-0x00000200A5EE1000-memory.dmp

                                                                                                                                                                                                                                              memory/4972-3795-0x00000200A5EE0000-0x00000200A5EE1000-memory.dmp

                                                                                                                                                                                                                                              memory/4972-3798-0x00000200A5EE0000-0x00000200A5EE1000-memory.dmp

                                                                                                                                                                                                                                              memory/4972-3794-0x00000200A5EE0000-0x00000200A5EE1000-memory.dmp

                                                                                                                                                                                                                                              memory/4972-3799-0x00000200A3B30000-0x00000200A3B61000-memory.dmp

                                                                                                                                                                                                                                              memory/4972-3787-0x00000200A5EE0000-0x00000200A5EE1000-memory.dmp

                                                                                                                                                                                                                                              memory/4972-3797-0x00000200A5EE0000-0x00000200A5EE1000-memory.dmp

                                                                                                                                                                                                                                              memory/4972-3786-0x00000200A5EE0000-0x00000200A5EE1000-memory.dmp

                                                                                                                                                                                                                                              memory/4972-3793-0x00000200A5EE0000-0x00000200A5EE1000-memory.dmp

                                                                                                                                                                                                                                              memory/5156-784-0x000001E8EBF40000-0x000001E8EBF71000-memory.dmp

                                                                                                                                                                                                                                              memory/5172-785-0x000001D6F6B20000-0x000001D6F6B51000-memory.dmp

                                                                                                                                                                                                                                              memory/5332-2629-0x0000016D986B0000-0x0000016D986E1000-memory.dmp

                                                                                                                                                                                                                                              memory/5400-787-0x0000012AA09C0000-0x0000012AA09F1000-memory.dmp

                                                                                                                                                                                                                                              memory/5412-4529-0x0000013A8C0E0000-0x0000013A8C111000-memory.dmp

                                                                                                                                                                                                                                              memory/5416-788-0x00000223B1010000-0x00000223B1041000-memory.dmp

                                                                                                                                                                                                                                              memory/5596-2067-0x000002C3A03D0000-0x000002C3A0401000-memory.dmp

                                                                                                                                                                                                                                              memory/5652-1329-0x000001C5EC450000-0x000001C5EC481000-memory.dmp

                                                                                                                                                                                                                                              memory/5652-2761-0x000001C5EC450000-0x000001C5EC481000-memory.dmp

                                                                                                                                                                                                                                              memory/5804-2059-0x000001EFA3E80000-0x000001EFA3EB1000-memory.dmp

                                                                                                                                                                                                                                              memory/5824-2045-0x0000019C51050000-0x0000019C51081000-memory.dmp

                                                                                                                                                                                                                                              memory/5832-2336-0x0000022446B10000-0x0000022446B41000-memory.dmp

                                                                                                                                                                                                                                              memory/5844-2087-0x0000018E276C0000-0x0000018E276F1000-memory.dmp

                                                                                                                                                                                                                                              memory/6024-4528-0x000001A5C8360000-0x000001A5C8391000-memory.dmp

                                                                                                                                                                                                                                              memory/6032-2879-0x00000200296F0000-0x0000020029721000-memory.dmp

                                                                                                                                                                                                                                              memory/6072-6115-0x00007FF83BEC0000-0x00007FF83BEC1000-memory.dmp

                                                                                                                                                                                                                                              memory/6076-2874-0x000001A7BB3A0000-0x000001A7BB3D1000-memory.dmp

                                                                                                                                                                                                                                              memory/6180-2617-0x000001B689910000-0x000001B689941000-memory.dmp

                                                                                                                                                                                                                                              memory/6576-2551-0x0000020C4C600000-0x0000020C4C631000-memory.dmp

                                                                                                                                                                                                                                              memory/6692-2616-0x0000017F7B3B0000-0x0000017F7B3E1000-memory.dmp

                                                                                                                                                                                                                                              memory/7020-6396-0x000001D582750000-0x000001D582781000-memory.dmp

                                                                                                                                                                                                                                              memory/7020-2873-0x000001D582750000-0x000001D582781000-memory.dmp

                                                                                                                                                                                                                                              memory/8112-4183-0x000001D226000000-0x000001D226031000-memory.dmp

                                                                                                                                                                                                                                              memory/8624-6216-0x00007FF83BEC0000-0x00007FF83BEC1000-memory.dmp