Resubmissions

06/06/2026, 20:35

260606-zde3dacw3v8

06/06/2026, 20:13

260606-yzq64acv218

Analysis

  • user interaction
    yes
  • max time kernel
    1079s
  • max time network
    1082s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    06/06/2026, 20:13

General

  • Target
    Internet.Download.Manager.v6.42.64.exe
  • Size 9.4MB
  • Sample260606-yzq64acv21
  • SHA256 68756f84f4c6f7535835eeac76bd5cc346e97656c814f2a57deadb45be358a58
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Drops file in Drivers directory 6 IoCs
  • A potential corporate email address has been identified in the URL: [email protected]
  • Checks computer location settings 2 TTPs 12 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 22 IoCs
  • Loads dropped DLL 64 IoCs
  • Modifies system executable filetype association 2 TTPs 7 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 9 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops desktop.ini file(s) 3 IoCs
  • Installs/modifies Browser Helper Object 2 TTPs 8 IoCs

    BHOs are DLL modules which act as plugins for Internet Explorer.

  • Checks system information in the registry 2 TTPs 8 IoCs

    System information is often read in order to detect sandboxing environments.

  • Drops file in System32 directory 16 IoCs
  • Drops file in Windows directory 21 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 56 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 56 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Modifies data under HKEY_USERS 44 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
  • Runs net.exe
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 50 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 4 IoCs
  • Suspicious behavior: LoadsDriver 36 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Internet.Download.Manager.v6.42.64.exe
    "C:\Users\Admin\AppData\Local\Temp\Internet.Download.Manager.v6.42.64.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:884
    • C:\Windows\SysWOW64\regsvr32.exe
      regsvr32.exe /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMIECC64.dll"
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:1236
      • C:\Windows\system32\regsvr32.exe
        /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMIECC64.dll"
        3⤵
        • Loads dropped DLL
        PID:3256
    • C:\Windows\SysWOW64\regsvr32.exe
      regsvr32.exe /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMGetAll64.dll"
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3236
      • C:\Windows\system32\regsvr32.exe
        /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMGetAll64.dll"
        3⤵
        • Loads dropped DLL
        PID:2668
    • C:\Windows\SysWOW64\regsvr32.exe
      regsvr32.exe /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\downlWithIDM64.dll"
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4624
      • C:\Windows\system32\regsvr32.exe
        /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\downlWithIDM64.dll"
        3⤵
        • Loads dropped DLL
        • Modifies registry class
        PID:3856
    • C:\Windows\SysWOW64\regsvr32.exe
      regsvr32.exe /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll"
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:4144
      • C:\Windows\system32\regsvr32.exe
        /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll"
        3⤵
        • Loads dropped DLL
        PID:2488
    • C:\Users\Admin\Desktop\xxx\Internet Download Manager\idmBroker.exe
      "C:\Users\Admin\Desktop\xxx\Internet Download Manager\idmBroker.exe" -RegServer
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      PID:4324
    • C:\Users\Admin\Desktop\xxx\Internet Download Manager\Uninstall.exe
      "C:\Users\Admin\Desktop\xxx\Internet Download Manager\Uninstall.exe" -instdriv
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:1744
      • C:\Windows\system32\RUNDLL32.EXE
        "C:\Windows\Sysnative\RUNDLL32.EXE" SETUPAPI.DLL,InstallHinfSection DefaultInstall 128 C:\Users\Admin\Desktop\xxx\Internet Download Manager\idmwfp.inf
        3⤵
        • Adds Run key to start application
        • Drops file in Windows directory
        • Suspicious use of WriteProcessMemory
        PID:3632
        • C:\Windows\system32\runonce.exe
          "C:\Windows\system32\runonce.exe" -r
          4⤵
          • Checks processor information in registry
          • Suspicious use of WriteProcessMemory
          PID:4952
          • C:\Windows\System32\grpconv.exe
            "C:\Windows\System32\grpconv.exe" -o
            5⤵
              PID:4764
        • C:\Windows\SysWOW64\net.exe
          "C:\Windows\System32\net.exe" start IDMWFP
          3⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:2260
          • C:\Windows\SysWOW64\net1.exe
            C:\Windows\system32\net1 start IDMWFP
            4⤵
              PID:4840
          • C:\Windows\SysWOW64\net.exe
            "C:\Windows\System32\net.exe" start IDMWFP
            3⤵
            • Suspicious use of WriteProcessMemory
            PID:4964
            • C:\Windows\SysWOW64\net1.exe
              C:\Windows\system32\net1 start IDMWFP
              4⤵
                PID:2312
            • C:\Windows\SysWOW64\net.exe
              "C:\Windows\System32\net.exe" start IDMWFP
              3⤵
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:4088
              • C:\Windows\SysWOW64\net1.exe
                C:\Windows\system32\net1 start IDMWFP
                4⤵
                  PID:3008
              • C:\Windows\SysWOW64\net.exe
                "C:\Windows\System32\net.exe" start IDMWFP
                3⤵
                • Suspicious use of WriteProcessMemory
                PID:5012
                • C:\Windows\SysWOW64\net1.exe
                  C:\Windows\system32\net1 start IDMWFP
                  4⤵
                  • System Location Discovery: System Language Discovery
                  PID:4632
              • C:\Windows\SysWOW64\net.exe
                "C:\Windows\System32\net.exe" start IDMWFP
                3⤵
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:1784
                • C:\Windows\SysWOW64\net1.exe
                  C:\Windows\system32\net1 start IDMWFP
                  4⤵
                  • System Location Discovery: System Language Discovery
                  PID:1148
              • C:\Windows\SysWOW64\net.exe
                "C:\Windows\System32\net.exe" start IDMWFP
                3⤵
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:2620
                • C:\Windows\SysWOW64\net1.exe
                  C:\Windows\system32\net1 start IDMWFP
                  4⤵
                  • System Location Discovery: System Language Discovery
                  PID:3624
              • C:\Windows\SysWOW64\regsvr32.exe
                "C:\Windows\System32\regsvr32.exe" /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll"
                3⤵
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:3380
                • C:\Windows\system32\regsvr32.exe
                  /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll"
                  4⤵
                  • Loads dropped DLL
                  PID:2188
            • C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMan.exe
              "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMan.exe" /rtr
              2⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Installs/modifies Browser Helper Object
              • System Location Discovery: System Language Discovery
              • Modifies Internet Explorer settings
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:676
              • C:\Windows\SysWOW64\regsvr32.exe
                regsvr32.exe /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMIECC64.dll"
                3⤵
                • Loads dropped DLL
                • Suspicious use of WriteProcessMemory
                PID:4616
                • C:\Windows\system32\regsvr32.exe
                  /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMIECC64.dll"
                  4⤵
                  • Loads dropped DLL
                  • Modifies registry class
                  PID:2152
              • C:\Windows\SysWOW64\regsvr32.exe
                regsvr32.exe /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMGetAll64.dll"
                3⤵
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:1724
                • C:\Windows\system32\regsvr32.exe
                  /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMGetAll64.dll"
                  4⤵
                  • Loads dropped DLL
                  PID:4536
              • C:\Windows\SysWOW64\regsvr32.exe
                regsvr32.exe /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\downlWithIDM64.dll"
                3⤵
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:3540
                • C:\Windows\system32\regsvr32.exe
                  /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\downlWithIDM64.dll"
                  4⤵
                  • Loads dropped DLL
                  PID:796
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" https://www.internetdownloadmanager.com/support/installffextfrommozillasite.html
                3⤵
                • Suspicious use of WriteProcessMemory
                PID:3800
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" https://www.internetdownloadmanager.com/support/installffextfrommozillasite.html
                  4⤵
                  • Drops desktop.ini file(s)
                  • Checks processor information in registry
                  • Suspicious use of AdjustPrivilegeToken
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SetWindowsHookEx
                  • Suspicious use of WriteProcessMemory
                  PID:636
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2012 -prefsLen 27100 -prefMapHandle 2016 -prefMapSize 270279 -ipcHandle 2088 -initialChannelId {929119ff-c601-4f87-9b94-5ebd23fb81e2} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
                    5⤵
                      PID:2856
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2492 -prefsLen 27136 -prefMapHandle 2496 -prefMapSize 270279 -ipcHandle 2512 -initialChannelId {a8d1a4af-e7ba-4257-a095-bbaf2066ac34} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
                      5⤵
                      • Checks processor information in registry
                      PID:2116
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3904 -prefsLen 25164 -prefMapHandle 3908 -prefMapSize 270279 -jsInitHandle 3912 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3920 -initialChannelId {85ca7133-a5b6-4898-a282-667a00ffaa09} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
                      5⤵
                      • Checks processor information in registry
                      PID:2888
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4068 -prefsLen 27277 -prefMapHandle 4072 -prefMapSize 270279 -ipcHandle 4160 -initialChannelId {df4d5d9e-2d1d-4933-8bb2-f08961ce8c72} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
                      5⤵
                        PID:4284
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1676 -prefsLen 34776 -prefMapHandle 2980 -prefMapSize 270279 -jsInitHandle 2984 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 1464 -initialChannelId {0e676df6-34a2-422c-8499-0e799bda4812} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                        5⤵
                        • Checks processor information in registry
                        PID:4992
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4316 -prefsLen 35013 -prefMapHandle 1464 -prefMapSize 270279 -ipcHandle 5052 -initialChannelId {7c6787b2-1700-4c5c-8dd9-dfa573855b62} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                        5⤵
                        • Checks processor information in registry
                        PID:5880
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5356 -prefsLen 35065 -prefMapHandle 5360 -prefMapSize 270279 -jsInitHandle 5364 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5372 -initialChannelId {cc7b9c61-da7a-494a-b0ef-722e68b3cba3} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                        5⤵
                        • Checks processor information in registry
                        PID:6108
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5400 -prefsLen 32952 -prefMapHandle 5388 -prefMapSize 270279 -jsInitHandle 5488 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4840 -initialChannelId {84e3fc39-02cd-4bfe-9932-ff91c6b92664} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                        5⤵
                        • Checks processor information in registry
                        PID:4384
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5612 -prefsLen 32952 -prefMapHandle 5616 -prefMapSize 270279 -jsInitHandle 5620 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5628 -initialChannelId {75143775-7eb9-4a82-bcbe-e5ad784a3c8f} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                        5⤵
                        • Checks processor information in registry
                        PID:1596
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5980 -prefsLen 32952 -prefMapHandle 5964 -prefMapSize 270279 -jsInitHandle 5960 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5952 -initialChannelId {79d779f8-f944-4c00-bbeb-315bb735dd3f} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
                        5⤵
                        • Checks processor information in registry
                        PID:2796
                      • C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMMsgHost.exe
                        "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMMsgHost.exe" "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMMsgHostMoz.json" [email protected]
                        5⤵
                        • Executes dropped EXE
                        • System Location Discovery: System Language Discovery
                        PID:6936
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1672 -prefsLen 37064 -prefMapHandle 6320 -prefMapSize 270279 -jsInitHandle 6124 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6596 -initialChannelId {ebbca95d-7185-42ba-91d5-93ae7f9d0fef} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
                        5⤵
                        • Checks processor information in registry
                        PID:4132
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5736 -prefsLen 37064 -prefMapHandle 5740 -prefMapSize 270279 -jsInitHandle 5724 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3116 -initialChannelId {f86ff3c6-028d-4ef5-b7f3-5b205157eefa} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
                        5⤵
                        • Checks processor information in registry
                        PID:6752
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 7028 -prefsLen 40425 -prefMapHandle 7032 -prefMapSize 270279 -ipcHandle 5752 -initialChannelId {0d26f811-c1c6-4ecf-8bee-81ded336b37f} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 utility
                        5⤵
                        • Checks processor information in registry
                        PID:7112
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7176 -prefsLen 37064 -prefMapHandle 7180 -prefMapSize 270279 -jsInitHandle 7184 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7192 -initialChannelId {ac043f2a-c55e-4634-b893-b0c71eee2222} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
                        5⤵
                        • Checks processor information in registry
                        PID:412
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7412 -prefsLen 37064 -prefMapHandle 7416 -prefMapSize 270279 -jsInitHandle 7420 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7424 -initialChannelId {d432c3db-f0dd-4148-8e6f-b3b339634212} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
                        5⤵
                        • Checks processor information in registry
                        PID:6196
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 6860 -prefsLen 40425 -prefMapHandle 7532 -prefMapSize 270279 -ipcHandle 6900 -initialChannelId {207e508f-3fd1-4e01-9ba1-2486c66364a9} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 utility
                        5⤵
                        • Checks processor information in registry
                        PID:6848
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8032 -prefsLen 37064 -prefMapHandle 7928 -prefMapSize 270279 -jsInitHandle 7704 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7332 -initialChannelId {23d1dec4-e859-440d-989b-3e2673141278} -parentPid 636 -crashReporter "\\.\pipe\gecko-crash-server-pipe.636" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
                        5⤵
                        • Checks processor information in registry
                        PID:3468
                  • C:\Users\Admin\Desktop\xxx\Internet Download Manager\Uninstall.exe
                    "C:\Users\Admin\Desktop\xxx\Internet Download Manager\Uninstall.exe" -instdriv
                    3⤵
                    • Checks computer location settings
                    • Executes dropped EXE
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of SetWindowsHookEx
                    • Suspicious use of WriteProcessMemory
                    PID:1828
                    • C:\Windows\system32\RUNDLL32.EXE
                      "C:\Windows\Sysnative\RUNDLL32.EXE" SETUPAPI.DLL,InstallHinfSection DefaultInstall 128 C:\Users\Admin\Desktop\xxx\Internet Download Manager\idmwfp.inf
                      4⤵
                      • Adds Run key to start application
                      • Drops file in Windows directory
                      • Suspicious use of WriteProcessMemory
                      PID:5052
                      • C:\Windows\system32\runonce.exe
                        "C:\Windows\system32\runonce.exe" -r
                        5⤵
                        • Checks processor information in registry
                        • Suspicious use of WriteProcessMemory
                        PID:2412
                        • C:\Windows\System32\grpconv.exe
                          "C:\Windows\System32\grpconv.exe" -o
                          6⤵
                            PID:1180
                      • C:\Windows\SysWOW64\net.exe
                        "C:\Windows\System32\net.exe" start IDMWFP
                        4⤵
                        • System Location Discovery: System Language Discovery
                        • Suspicious use of WriteProcessMemory
                        PID:1556
                        • C:\Windows\SysWOW64\net1.exe
                          C:\Windows\system32\net1 start IDMWFP
                          5⤵
                            PID:1944
                        • C:\Windows\SysWOW64\net.exe
                          "C:\Windows\System32\net.exe" start IDMWFP
                          4⤵
                          • System Location Discovery: System Language Discovery
                          • Suspicious use of WriteProcessMemory
                          PID:4860
                          • C:\Windows\SysWOW64\net1.exe
                            C:\Windows\system32\net1 start IDMWFP
                            5⤵
                              PID:1988
                          • C:\Windows\SysWOW64\net.exe
                            "C:\Windows\System32\net.exe" start IDMWFP
                            4⤵
                              PID:5760
                              • C:\Windows\SysWOW64\net1.exe
                                C:\Windows\system32\net1 start IDMWFP
                                5⤵
                                • System Location Discovery: System Language Discovery
                                PID:6056
                            • C:\Windows\SysWOW64\net.exe
                              "C:\Windows\System32\net.exe" start IDMWFP
                              4⤵
                              • System Location Discovery: System Language Discovery
                              PID:444
                              • C:\Windows\SysWOW64\net1.exe
                                C:\Windows\system32\net1 start IDMWFP
                                5⤵
                                  PID:4292
                              • C:\Windows\SysWOW64\net.exe
                                "C:\Windows\System32\net.exe" start IDMWFP
                                4⤵
                                • System Location Discovery: System Language Discovery
                                PID:5384
                                • C:\Windows\SysWOW64\net1.exe
                                  C:\Windows\system32\net1 start IDMWFP
                                  5⤵
                                    PID:5520
                                • C:\Windows\SysWOW64\net.exe
                                  "C:\Windows\System32\net.exe" start IDMWFP
                                  4⤵
                                  • System Location Discovery: System Language Discovery
                                  PID:5648
                                  • C:\Windows\SysWOW64\net1.exe
                                    C:\Windows\system32\net1 start IDMWFP
                                    5⤵
                                    • System Location Discovery: System Language Discovery
                                    PID:5724
                                • C:\Windows\SysWOW64\regsvr32.exe
                                  "C:\Windows\System32\regsvr32.exe" /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll"
                                  4⤵
                                  • Loads dropped DLL
                                  PID:5748
                                  • C:\Windows\system32\regsvr32.exe
                                    /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll"
                                    5⤵
                                    • Loads dropped DLL
                                    PID:5668
                              • C:\Users\Admin\Desktop\xxx\Internet Download Manager\MediumILStart.exe
                                "C:\Users\Admin\Desktop\xxx\Internet Download Manager\MediumILStart.exe"
                                3⤵
                                • Executes dropped EXE
                                • System Location Discovery: System Language Discovery
                                PID:5356
                          • C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
                            1⤵
                            • Drops file in Windows directory
                            • Checks SCSI registry key(s)
                            • Suspicious use of AdjustPrivilegeToken
                            • Suspicious use of WriteProcessMemory
                            PID:4004
                            • C:\Windows\system32\DrvInst.exe
                              DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{ec76306c-3659-464c-a349-2b4618e7c1ee}\idmwfp.inf" "9" "463e48c83" "00000000000001D4" "WinSta0\Default" "00000000000001C4" "208" "C:\Users\Admin\Desktop\xxx\Internet Download Manager"
                              2⤵
                              • Drops file in System32 directory
                              • Drops file in Windows directory
                              • Checks SCSI registry key(s)
                              • Modifies data under HKEY_USERS
                              PID:2432
                            • C:\Windows\system32\DrvInst.exe
                              DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\idmwfp.inf_amd64_8b0ebbc2b4585464\idmwfp.inf" "0" "463e48c83" "00000000000001C4" "WinSta0\Default"
                              2⤵
                              • Drops file in Drivers directory
                              • Drops file in System32 directory
                              • Drops file in Windows directory
                              • Suspicious use of AdjustPrivilegeToken
                              PID:560
                            • C:\Windows\system32\DrvInst.exe
                              DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\idmwfp.inf_amd64_8b0ebbc2b4585464\idmwfp.inf" "0" "463e48c83" "00000000000001C8" "WinSta0\Default"
                              2⤵
                              • Drops file in Drivers directory
                              • Drops file in Windows directory
                              • Suspicious use of AdjustPrivilegeToken
                              PID:3976
                            • C:\Windows\system32\DrvInst.exe
                              DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\idmwfp.inf_amd64_8b0ebbc2b4585464\idmwfp.inf" "0" "463e48c83" "0000000000000194" "WinSta0\Default"
                              2⤵
                              • Drops file in Drivers directory
                              • Drops file in Windows directory
                              • Suspicious use of AdjustPrivilegeToken
                              PID:5684
                          • C:\Windows\system32\grpconv.exe
                            grpconv -o
                            1⤵
                              PID:4916
                            • C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMan.exe
                              "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMan.exe" -Embedding
                              1⤵
                              • Checks computer location settings
                              • Executes dropped EXE
                              • Loads dropped DLL
                              • Modifies Internet Explorer settings
                              • Suspicious behavior: EnumeratesProcesses
                              • Suspicious behavior: GetForegroundWindowSpam
                              • Suspicious use of FindShellTrayWindow
                              • Suspicious use of SendNotifyMessage
                              • Suspicious use of SetWindowsHookEx
                              PID:4280
                              • C:\Windows\SysWOW64\regsvr32.exe
                                regsvr32.exe /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll"
                                2⤵
                                • Loads dropped DLL
                                • System Location Discovery: System Language Discovery
                                PID:5568
                                • C:\Windows\system32\regsvr32.exe
                                  /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll"
                                  3⤵
                                  • Loads dropped DLL
                                  • Suspicious use of AdjustPrivilegeToken
                                  PID:3496
                              • C:\Users\Admin\Desktop\xxx\Internet Download Manager\Uninstall.exe
                                "C:\Users\Admin\Desktop\xxx\Internet Download Manager\Uninstall.exe" -instdriv
                                2⤵
                                • Checks computer location settings
                                • Executes dropped EXE
                                • Suspicious use of SetWindowsHookEx
                                PID:5532
                                • C:\Windows\system32\RUNDLL32.EXE
                                  "C:\Windows\Sysnative\RUNDLL32.EXE" SETUPAPI.DLL,InstallHinfSection DefaultInstall 128 C:\Users\Admin\Desktop\xxx\Internet Download Manager\idmwfp.inf
                                  3⤵
                                  • Adds Run key to start application
                                  • Drops file in Windows directory
                                  • Suspicious use of AdjustPrivilegeToken
                                  PID:5720
                                  • C:\Windows\system32\runonce.exe
                                    "C:\Windows\system32\runonce.exe" -r
                                    4⤵
                                    • Checks processor information in registry
                                    PID:6072
                                    • C:\Windows\System32\grpconv.exe
                                      "C:\Windows\System32\grpconv.exe" -o
                                      5⤵
                                        PID:1476
                                  • C:\Windows\SysWOW64\net.exe
                                    "C:\Windows\System32\net.exe" start IDMWFP
                                    3⤵
                                    • System Location Discovery: System Language Discovery
                                    PID:5948
                                    • C:\Windows\SysWOW64\net1.exe
                                      C:\Windows\system32\net1 start IDMWFP
                                      4⤵
                                        PID:1012
                                    • C:\Windows\SysWOW64\net.exe
                                      "C:\Windows\System32\net.exe" start IDMWFP
                                      3⤵
                                        PID:4924
                                        • C:\Windows\SysWOW64\net1.exe
                                          C:\Windows\system32\net1 start IDMWFP
                                          4⤵
                                          • System Location Discovery: System Language Discovery
                                          PID:2220
                                      • C:\Windows\SysWOW64\net.exe
                                        "C:\Windows\System32\net.exe" start IDMWFP
                                        3⤵
                                        • System Location Discovery: System Language Discovery
                                        PID:3148
                                        • C:\Windows\SysWOW64\net1.exe
                                          C:\Windows\system32\net1 start IDMWFP
                                          4⤵
                                          • System Location Discovery: System Language Discovery
                                          PID:2100
                                      • C:\Windows\SysWOW64\net.exe
                                        "C:\Windows\System32\net.exe" start IDMWFP
                                        3⤵
                                        • System Location Discovery: System Language Discovery
                                        PID:3776
                                        • C:\Windows\SysWOW64\net1.exe
                                          C:\Windows\system32\net1 start IDMWFP
                                          4⤵
                                            PID:5716
                                        • C:\Windows\SysWOW64\net.exe
                                          "C:\Windows\System32\net.exe" start IDMWFP
                                          3⤵
                                          • System Location Discovery: System Language Discovery
                                          PID:2236
                                          • C:\Windows\SysWOW64\net1.exe
                                            C:\Windows\system32\net1 start IDMWFP
                                            4⤵
                                              PID:1900
                                          • C:\Windows\SysWOW64\net.exe
                                            "C:\Windows\System32\net.exe" start IDMWFP
                                            3⤵
                                            • System Location Discovery: System Language Discovery
                                            PID:5352
                                            • C:\Windows\SysWOW64\net1.exe
                                              C:\Windows\system32\net1 start IDMWFP
                                              4⤵
                                              • System Location Discovery: System Language Discovery
                                              PID:5192
                                          • C:\Windows\SysWOW64\regsvr32.exe
                                            "C:\Windows\System32\regsvr32.exe" /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll"
                                            3⤵
                                            • Loads dropped DLL
                                            • System Location Discovery: System Language Discovery
                                            PID:5332
                                            • C:\Windows\system32\regsvr32.exe
                                              /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll"
                                              4⤵
                                              • Loads dropped DLL
                                              • Suspicious use of AdjustPrivilegeToken
                                              PID:5464
                                        • C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMan.exe
                                          "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMan.exe"
                                          2⤵
                                          • Checks computer location settings
                                          • Executes dropped EXE
                                          • Loads dropped DLL
                                          • System Location Discovery: System Language Discovery
                                          • Modifies Internet Explorer settings
                                          • Modifies registry class
                                          • Suspicious behavior: GetForegroundWindowSpam
                                          • Suspicious use of FindShellTrayWindow
                                          • Suspicious use of SendNotifyMessage
                                          • Suspicious use of SetWindowsHookEx
                                          PID:7096
                                          • C:\Users\Admin\Desktop\xxx\Internet Download Manager\Uninstall.exe
                                            "C:\Users\Admin\Desktop\xxx\Internet Download Manager\Uninstall.exe" -instdriv
                                            3⤵
                                            • Checks computer location settings
                                            • Executes dropped EXE
                                            • Suspicious use of SetWindowsHookEx
                                            PID:7160
                                            • C:\Windows\system32\RUNDLL32.EXE
                                              "C:\Windows\Sysnative\RUNDLL32.EXE" SETUPAPI.DLL,InstallHinfSection DefaultInstall 128 C:\Users\Admin\Desktop\xxx\Internet Download Manager\idmwfp.inf
                                              4⤵
                                              • Adds Run key to start application
                                              • Drops file in Windows directory
                                              PID:4584
                                              • C:\Windows\system32\runonce.exe
                                                "C:\Windows\system32\runonce.exe" -r
                                                5⤵
                                                • Checks processor information in registry
                                                PID:5712
                                                • C:\Windows\System32\grpconv.exe
                                                  "C:\Windows\System32\grpconv.exe" -o
                                                  6⤵
                                                    PID:5268
                                              • C:\Windows\SysWOW64\net.exe
                                                "C:\Windows\System32\net.exe" start IDMWFP
                                                4⤵
                                                • System Location Discovery: System Language Discovery
                                                PID:6292
                                                • C:\Windows\SysWOW64\net1.exe
                                                  C:\Windows\system32\net1 start IDMWFP
                                                  5⤵
                                                    PID:2132
                                                • C:\Windows\SysWOW64\net.exe
                                                  "C:\Windows\System32\net.exe" start IDMWFP
                                                  4⤵
                                                    PID:3448
                                                    • C:\Windows\SysWOW64\net1.exe
                                                      C:\Windows\system32\net1 start IDMWFP
                                                      5⤵
                                                        PID:3504
                                                    • C:\Windows\SysWOW64\net.exe
                                                      "C:\Windows\System32\net.exe" start IDMWFP
                                                      4⤵
                                                      • System Location Discovery: System Language Discovery
                                                      PID:1900
                                                      • C:\Windows\SysWOW64\net1.exe
                                                        C:\Windows\system32\net1 start IDMWFP
                                                        5⤵
                                                        • System Location Discovery: System Language Discovery
                                                        PID:6740
                                                    • C:\Windows\SysWOW64\net.exe
                                                      "C:\Windows\System32\net.exe" start IDMWFP
                                                      4⤵
                                                      • System Location Discovery: System Language Discovery
                                                      PID:6160
                                                      • C:\Windows\SysWOW64\net1.exe
                                                        C:\Windows\system32\net1 start IDMWFP
                                                        5⤵
                                                          PID:4148
                                                      • C:\Windows\SysWOW64\net.exe
                                                        "C:\Windows\System32\net.exe" start IDMWFP
                                                        4⤵
                                                          PID:6268
                                                          • C:\Windows\SysWOW64\net1.exe
                                                            C:\Windows\system32\net1 start IDMWFP
                                                            5⤵
                                                              PID:6728
                                                          • C:\Windows\SysWOW64\net.exe
                                                            "C:\Windows\System32\net.exe" start IDMWFP
                                                            4⤵
                                                              PID:6564
                                                              • C:\Windows\SysWOW64\net1.exe
                                                                C:\Windows\system32\net1 start IDMWFP
                                                                5⤵
                                                                  PID:6680
                                                              • C:\Windows\SysWOW64\regsvr32.exe
                                                                "C:\Windows\System32\regsvr32.exe" /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll"
                                                                4⤵
                                                                • Loads dropped DLL
                                                                PID:5544
                                                                • C:\Windows\system32\regsvr32.exe
                                                                  /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll"
                                                                  5⤵
                                                                  • Loads dropped DLL
                                                                  PID:7008
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.internetdownloadmanager.com/articles/flv_downloading.html?lng=ru
                                                              3⤵
                                                              • Drops file in Windows directory
                                                              • Checks processor information in registry
                                                              • Enumerates system info in registry
                                                              • Modifies data under HKEY_USERS
                                                              • Suspicious use of FindShellTrayWindow
                                                              PID:6932
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2ec,0x2f0,0x2f4,0x2e8,0x2fc,0x7ff8044bc188,0x7ff8044bc194,0x7ff8044bc1a0
                                                                4⤵
                                                                  PID:6336
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,17405746891099615169,14191744432100772238,524288 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
                                                                  4⤵
                                                                  • System Time Discovery
                                                                  PID:3852
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,4487734280178488658,8226594217955580536,262144 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
                                                                  4⤵
                                                                    PID:6668
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,2349463839931293206,7979026761687916692,524288 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
                                                                    4⤵
                                                                      PID:3036
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,10964478932337237248,18232559150816345863,2097152 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
                                                                      4⤵
                                                                        PID:6340
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3500,i,2184187447091003099,779619465433353245,2097152 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
                                                                        4⤵
                                                                          PID:6664
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,12743932108561481572,15794318137963149253,2097152 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
                                                                          4⤵
                                                                            PID:6024
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,6345275023974167431,5658320011462793610,2097152 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:2
                                                                            4⤵
                                                                              PID:3760
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3476,i,5182984073604408184,13590393092226244732,524288 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:8
                                                                              4⤵
                                                                                PID:5044
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,17981211438370965558,3917773866043110595,524288 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
                                                                                4⤵
                                                                                  PID:2524
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,11281804246477325921,6487811582403362665,524288 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:8
                                                                                  4⤵
                                                                                    PID:2812
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,2733961029270607500,5700784872085705154,524288 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:8
                                                                                    4⤵
                                                                                      PID:6232
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,14259832752501087247,11462581906667970974,524288 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:8
                                                                                      4⤵
                                                                                        PID:1948
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,480694684824163035,11516748816473689304,524288 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:8
                                                                                        4⤵
                                                                                          PID:6340
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,6017060951241934555,16218625828592763972,524288 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=4680 /prefetch:8
                                                                                          4⤵
                                                                                            PID:5536
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3672,i,8978940353346469497,10548406669837564427,524288 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
                                                                                            4⤵
                                                                                              PID:2132
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3672,i,8978940353346469497,10548406669837564427,524288 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
                                                                                              4⤵
                                                                                                PID:5292
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,633790849239118774,10358545385101283639,524288 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:8
                                                                                                4⤵
                                                                                                  PID:1732
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,11158128891641666863,17118675107413221606,524288 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:8
                                                                                                  4⤵
                                                                                                    PID:348
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4864,i,11375213446785330217,18294080092907378710,524288 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
                                                                                                    4⤵
                                                                                                      PID:7088
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,17186683083906810651,4489638026882138906,524288 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:8
                                                                                                      4⤵
                                                                                                        PID:2080
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,9979306356059550029,15621463514531790406,524288 --field-trial-handle=2260,i,4719367281089263344,7136433503384138088,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
                                                                                                        4⤵
                                                                                                          PID:1860
                                                                                                      • C:\Users\Admin\Desktop\xxx\Internet Download Manager\Uninstall.exe
                                                                                                        "C:\Users\Admin\Desktop\xxx\Internet Download Manager\Uninstall.exe" -instdriv
                                                                                                        3⤵
                                                                                                        • Checks computer location settings
                                                                                                        • Executes dropped EXE
                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                        PID:6576
                                                                                                        • C:\Windows\system32\RUNDLL32.EXE
                                                                                                          "C:\Windows\Sysnative\RUNDLL32.EXE" SETUPAPI.DLL,InstallHinfSection DefaultInstall 128 C:\Users\Admin\Desktop\xxx\Internet Download Manager\idmwfp.inf
                                                                                                          4⤵
                                                                                                          • Adds Run key to start application
                                                                                                          • Drops file in Windows directory
                                                                                                          PID:4044
                                                                                                          • C:\Windows\system32\runonce.exe
                                                                                                            "C:\Windows\system32\runonce.exe" -r
                                                                                                            5⤵
                                                                                                            • Checks processor information in registry
                                                                                                            PID:7072
                                                                                                            • C:\Windows\System32\grpconv.exe
                                                                                                              "C:\Windows\System32\grpconv.exe" -o
                                                                                                              6⤵
                                                                                                                PID:4756
                                                                                                          • C:\Windows\SysWOW64\net.exe
                                                                                                            "C:\Windows\System32\net.exe" start IDMWFP
                                                                                                            4⤵
                                                                                                              PID:4944
                                                                                                              • C:\Windows\SysWOW64\net1.exe
                                                                                                                C:\Windows\system32\net1 start IDMWFP
                                                                                                                5⤵
                                                                                                                  PID:4372
                                                                                                              • C:\Windows\SysWOW64\net.exe
                                                                                                                "C:\Windows\System32\net.exe" start IDMWFP
                                                                                                                4⤵
                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                PID:400
                                                                                                                • C:\Windows\SysWOW64\net1.exe
                                                                                                                  C:\Windows\system32\net1 start IDMWFP
                                                                                                                  5⤵
                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                  PID:3036
                                                                                                              • C:\Windows\SysWOW64\net.exe
                                                                                                                "C:\Windows\System32\net.exe" start IDMWFP
                                                                                                                4⤵
                                                                                                                  PID:3436
                                                                                                                  • C:\Windows\SysWOW64\net1.exe
                                                                                                                    C:\Windows\system32\net1 start IDMWFP
                                                                                                                    5⤵
                                                                                                                      PID:6632
                                                                                                                  • C:\Windows\SysWOW64\net.exe
                                                                                                                    "C:\Windows\System32\net.exe" start IDMWFP
                                                                                                                    4⤵
                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                    PID:5440
                                                                                                                    • C:\Windows\SysWOW64\net1.exe
                                                                                                                      C:\Windows\system32\net1 start IDMWFP
                                                                                                                      5⤵
                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                      PID:2096
                                                                                                                  • C:\Windows\SysWOW64\net.exe
                                                                                                                    "C:\Windows\System32\net.exe" start IDMWFP
                                                                                                                    4⤵
                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                    PID:4200
                                                                                                                    • C:\Windows\SysWOW64\net1.exe
                                                                                                                      C:\Windows\system32\net1 start IDMWFP
                                                                                                                      5⤵
                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                      PID:3808
                                                                                                                  • C:\Windows\SysWOW64\net.exe
                                                                                                                    "C:\Windows\System32\net.exe" start IDMWFP
                                                                                                                    4⤵
                                                                                                                      PID:7120
                                                                                                                      • C:\Windows\SysWOW64\net1.exe
                                                                                                                        C:\Windows\system32\net1 start IDMWFP
                                                                                                                        5⤵
                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                        PID:552
                                                                                                                    • C:\Windows\SysWOW64\regsvr32.exe
                                                                                                                      "C:\Windows\System32\regsvr32.exe" /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll"
                                                                                                                      4⤵
                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                      PID:6244
                                                                                                                      • C:\Windows\system32\regsvr32.exe
                                                                                                                        /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll"
                                                                                                                        5⤵
                                                                                                                          PID:1408
                                                                                                                    • C:\Users\Admin\Desktop\xxx\Internet Download Manager\Uninstall.exe
                                                                                                                      "C:\Users\Admin\Desktop\xxx\Internet Download Manager\Uninstall.exe" -instdriv
                                                                                                                      3⤵
                                                                                                                      • Checks computer location settings
                                                                                                                      • Executes dropped EXE
                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                      PID:760
                                                                                                                      • C:\Windows\system32\RUNDLL32.EXE
                                                                                                                        "C:\Windows\Sysnative\RUNDLL32.EXE" SETUPAPI.DLL,InstallHinfSection DefaultInstall 128 C:\Users\Admin\Desktop\xxx\Internet Download Manager\idmwfp.inf
                                                                                                                        4⤵
                                                                                                                        • Adds Run key to start application
                                                                                                                        • Drops file in Windows directory
                                                                                                                        PID:4308
                                                                                                                        • C:\Windows\system32\runonce.exe
                                                                                                                          "C:\Windows\system32\runonce.exe" -r
                                                                                                                          5⤵
                                                                                                                          • Checks processor information in registry
                                                                                                                          PID:3600
                                                                                                                          • C:\Windows\System32\grpconv.exe
                                                                                                                            "C:\Windows\System32\grpconv.exe" -o
                                                                                                                            6⤵
                                                                                                                              PID:3744
                                                                                                                        • C:\Windows\SysWOW64\net.exe
                                                                                                                          "C:\Windows\System32\net.exe" start IDMWFP
                                                                                                                          4⤵
                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                          PID:6384
                                                                                                                          • C:\Windows\SysWOW64\net1.exe
                                                                                                                            C:\Windows\system32\net1 start IDMWFP
                                                                                                                            5⤵
                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                            PID:232
                                                                                                                        • C:\Windows\SysWOW64\net.exe
                                                                                                                          "C:\Windows\System32\net.exe" start IDMWFP
                                                                                                                          4⤵
                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                          PID:6916
                                                                                                                          • C:\Windows\SysWOW64\net1.exe
                                                                                                                            C:\Windows\system32\net1 start IDMWFP
                                                                                                                            5⤵
                                                                                                                              PID:6960
                                                                                                                          • C:\Windows\SysWOW64\net.exe
                                                                                                                            "C:\Windows\System32\net.exe" start IDMWFP
                                                                                                                            4⤵
                                                                                                                              PID:5552
                                                                                                                              • C:\Windows\SysWOW64\net1.exe
                                                                                                                                C:\Windows\system32\net1 start IDMWFP
                                                                                                                                5⤵
                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                PID:2200
                                                                                                                            • C:\Windows\SysWOW64\net.exe
                                                                                                                              "C:\Windows\System32\net.exe" start IDMWFP
                                                                                                                              4⤵
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              PID:5228
                                                                                                                              • C:\Windows\SysWOW64\net1.exe
                                                                                                                                C:\Windows\system32\net1 start IDMWFP
                                                                                                                                5⤵
                                                                                                                                  PID:6568
                                                                                                                              • C:\Windows\SysWOW64\net.exe
                                                                                                                                "C:\Windows\System32\net.exe" start IDMWFP
                                                                                                                                4⤵
                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                PID:3136
                                                                                                                                • C:\Windows\SysWOW64\net1.exe
                                                                                                                                  C:\Windows\system32\net1 start IDMWFP
                                                                                                                                  5⤵
                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                  PID:4672
                                                                                                                              • C:\Windows\SysWOW64\net.exe
                                                                                                                                "C:\Windows\System32\net.exe" start IDMWFP
                                                                                                                                4⤵
                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                PID:3556
                                                                                                                                • C:\Windows\SysWOW64\net1.exe
                                                                                                                                  C:\Windows\system32\net1 start IDMWFP
                                                                                                                                  5⤵
                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                  PID:1432
                                                                                                                              • C:\Windows\SysWOW64\regsvr32.exe
                                                                                                                                "C:\Windows\System32\regsvr32.exe" /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll"
                                                                                                                                4⤵
                                                                                                                                  PID:5432
                                                                                                                                  • C:\Windows\system32\regsvr32.exe
                                                                                                                                    /s "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll"
                                                                                                                                    5⤵
                                                                                                                                      PID:6708
                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                                                                              1⤵
                                                                                                                              • Drops file in Windows directory
                                                                                                                              • Checks processor information in registry
                                                                                                                              • Enumerates system info in registry
                                                                                                                              • Modifies data under HKEY_USERS
                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                                                              • Suspicious use of SendNotifyMessage
                                                                                                                              PID:5584
                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x228,0x22c,0x230,0x204,0x234,0x7ff80230c728,0x7ff80230c734,0x7ff80230c740
                                                                                                                                2⤵
                                                                                                                                  PID:5636
                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1824,i,8157159645848491738,364630486175458603,262144 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2116 /prefetch:2
                                                                                                                                  2⤵
                                                                                                                                    PID:3192
                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2036,i,12232679976845764174,17904720483180069890,524288 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2148 /prefetch:3
                                                                                                                                    2⤵
                                                                                                                                    • System Time Discovery
                                                                                                                                    PID:5400
                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,13260424692677451537,13774052238809230988,524288 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2616 /prefetch:8
                                                                                                                                    2⤵
                                                                                                                                      PID:2852
                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3288,i,9392564864253989222,7258326214690400741,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3292 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:6020
                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3312,i,7247213033897434590,15418782381225652868,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3328 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:1816
                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4080,i,16532343103500100903,318955899221182165,524288 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4252 /prefetch:8
                                                                                                                                          2⤵
                                                                                                                                            PID:5968
                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4660,i,10339783111734781031,8719363564541491059,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4676 /prefetch:2
                                                                                                                                            2⤵
                                                                                                                                              PID:3624
                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3272,i,18336382260942141359,13440954341784784592,524288 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4880 /prefetch:8
                                                                                                                                              2⤵
                                                                                                                                                PID:3016
                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5096,i,11351449072175998480,15653937398909679164,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3980 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:5408
                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5236,i,9536453838483481283,2262445589830770605,524288 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5224 /prefetch:8
                                                                                                                                                  2⤵
                                                                                                                                                    PID:2672
                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4908,i,15009573205936082431,16106942007559294317,524288 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5588 /prefetch:8
                                                                                                                                                    2⤵
                                                                                                                                                      PID:5928
                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5808,i,13533122775301595004,13448500528414562904,524288 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5908 /prefetch:8
                                                                                                                                                      2⤵
                                                                                                                                                        PID:5436
                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5964,i,5698622236561506005,13241905419367916147,524288 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5784 /prefetch:8
                                                                                                                                                        2⤵
                                                                                                                                                          PID:2600
                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5968,i,9743151911760635660,4445310060127023573,524288 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5656 /prefetch:8
                                                                                                                                                          2⤵
                                                                                                                                                            PID:3488
                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4756,i,8440826495563929516,13478989711710729515,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4744 /prefetch:1
                                                                                                                                                            2⤵
                                                                                                                                                              PID:5008
                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3428,i,16383608952874250224,11981719173461923734,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3296 /prefetch:2
                                                                                                                                                              2⤵
                                                                                                                                                                PID:424
                                                                                                                                                              • C:\Windows\system32\cmd.exe
                                                                                                                                                                C:\Windows\system32\cmd.exe /d /s /c ""C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMMsgHost.exe" chrome-extension://ngpampappnmepgilojfohadhhmbhlaek/ --parent-window=0" < \\.\pipe\chrome.nativeMessaging.in.182cfad61760fb8e > \\.\pipe\chrome.nativeMessaging.out.182cfad61760fb8e
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:5764
                                                                                                                                                                  • C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMMsgHost.exe
                                                                                                                                                                    "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMMsgHost.exe" chrome-extension://ngpampappnmepgilojfohadhhmbhlaek/ --parent-window=0
                                                                                                                                                                    3⤵
                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                    PID:5780
                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3352,i,5604498572959764915,14903652773575607612,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3260 /prefetch:1
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:4492
                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4728,i,18358244372220661785,5697236464916437245,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3524 /prefetch:1
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:5436
                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5996,i,8942823665419211268,9254327213650673496,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6000 /prefetch:1
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:1252
                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5776,i,8328053609488524433,904764543195721436,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6128 /prefetch:1
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:5272
                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5744,i,6755115207232378313,12716930894388424400,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3356 /prefetch:1
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:1580
                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6156,i,12006075976297441726,9403219769689271567,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6196 /prefetch:1
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:4696
                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6308,i,12105575977589502029,11599973206675695842,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6300 /prefetch:1
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:644
                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6528,i,251674388095539478,15392550778456319279,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6524 /prefetch:1
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:4068
                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6688,i,4173042997504962903,2387882155965572654,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6656 /prefetch:1
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:5856
                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6852,i,2557165472205884933,5577476894896698806,524288 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6840 /prefetch:8
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:3600
                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6992,i,8049382097526371242,445818766418085874,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7008 /prefetch:1
                                                                                                                                                                                      2⤵
                                                                                                                                                                                        PID:4268
                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6864,i,9086052771532475100,955142571069430700,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6832 /prefetch:1
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:5932
                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7204,i,5133474170513384328,9947092905154525147,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6964 /prefetch:1
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:2988
                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7332,i,14482585690658979346,8515876928899977560,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7360 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:1772
                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7492,i,11727260739377682654,14749065845888490547,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7520 /prefetch:1
                                                                                                                                                                                              2⤵
                                                                                                                                                                                                PID:4376
                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=3480,i,10655295603427437305,3465264637583082576,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7160 /prefetch:1
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:4700
                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6336,i,7162974442340341397,885559028273415317,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6132 /prefetch:1
                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                    PID:5484
                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7740,i,4871037924210161552,12790591149754817088,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6224 /prefetch:1
                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                      PID:6084
                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=6356,i,4499327775203055529,840732041779926599,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6348 /prefetch:1
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:980
                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=8012,i,838706097512833837,749777360218120514,262144 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5260 /prefetch:8
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                        PID:4148
                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=7684,i,2732701912940793498,13517989600890059916,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7700 /prefetch:1
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                          PID:3020
                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=7456,i,4982487188975026527,3655581505530030860,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7840 /prefetch:1
                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                            PID:4208
                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=7748,i,8136659110455556319,18367317502490175499,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6336 /prefetch:1
                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                              PID:5252
                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=7160,i,15878728938436262332,18226009545877578156,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7628 /prefetch:1
                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                PID:5280
                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=7276,i,11552809163358597104,11829568089546813651,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7008 /prefetch:1
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                  PID:6104
                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=6928,i,5625596972067067094,278721108783327328,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7224 /prefetch:1
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:236
                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=6852,i,12956571314512863169,17651465750939206406,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6780 /prefetch:1
                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                      PID:1716
                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=6680,i,3959419902844838973,11137194545988782831,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7360 /prefetch:1
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:972
                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=6736,i,17530379625020626383,1577434091131377618,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6756 /prefetch:1
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:5556
                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=6468,i,946201825970903841,2437534369153375068,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6848 /prefetch:1
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                            PID:4324
                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=6352,i,417963868209508739,9699013056633591457,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8020 /prefetch:1
                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                              PID:1388
                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=6328,i,8587208495029241653,3710775626042088517,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6360 /prefetch:1
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:1600
                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=7404,i,2619769876434285964,14883113615976472220,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7532 /prefetch:1
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                  PID:4716
                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=7476,i,16690212119163237448,11143791005228724808,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7004 /prefetch:1
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                    PID:1856
                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=7232,i,585117913596594681,4678112018535014836,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6836 /prefetch:1
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                      PID:5244
                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=7076,i,11162816654717281238,8769432617445324377,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7128 /prefetch:1
                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                        PID:3784
                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=6732,i,7392747393111785765,16800367887435346710,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6800 /prefetch:1
                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                          PID:2428
                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=7088,i,7675608757037988677,12888145069487975838,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6556 /prefetch:1
                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                            PID:4572
                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=8108,i,7846105955693528595,13279346462446753654,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6808 /prefetch:1
                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                              PID:4776
                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=7380,i,2934674586683520694,5149158208784515308,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7908 /prefetch:1
                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                PID:3620
                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=6368,i,1323889306756466406,6366166131391238409,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6436 /prefetch:1
                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                  PID:5284
                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=7472,i,11543715310089799015,2186384134062546380,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7384 /prefetch:1
                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                    PID:4268
                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=4800,i,16427404250493972204,15629825661082955470,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3360 /prefetch:1
                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                      PID:1232
                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=6312,i,13966370507896854528,4790386087458215677,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7780 /prefetch:1
                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                        PID:1776
                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=8272,i,12915542343300027121,17321117338484569715,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8304 /prefetch:1
                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                          PID:6184
                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=4740,i,15454933405503803940,17117185759151925806,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7756 /prefetch:1
                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                            PID:6432
                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=3964,i,2427475668564442391,1888941397215367319,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6316 /prefetch:1
                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                              PID:6504
                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=8216,i,11098059625459493563,11947495815311305270,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6208 /prefetch:1
                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                PID:6528
                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=7364,i,4441362233922777969,5947992826676593507,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6400 /prefetch:1
                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                  PID:6668
                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=8088,i,7254849082432547153,10570348157569310761,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7640 /prefetch:1
                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                    PID:6740
                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=7120,i,4977989387421744132,11412942855895418181,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7032 /prefetch:1
                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                      PID:6812
                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=7208,i,5526705294754169554,3503705896126251989,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7648 /prefetch:1
                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                        PID:6836
                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=7552,i,3584409005681769159,4436321673397418422,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7572 /prefetch:1
                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                          PID:6908
                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=8044,i,13319388858230475518,9817487619875097318,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7476 /prefetch:1
                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                            PID:6984
                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=7988,i,11961622205722691051,7924887824950746386,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7632 /prefetch:1
                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                              PID:7052
                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=7996,i,654013595284703137,16978183379905655428,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6824 /prefetch:1
                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                PID:6200
                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=7932,i,17737829601692497262,10184902576894392938,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7944 /prefetch:1
                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                  PID:1120
                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=7664,i,1769093893731047334,5788055108796013057,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8432 /prefetch:1
                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                    PID:2780
                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=6216,i,13922634174628817377,12857324064310743249,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6988 /prefetch:1
                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                      PID:3576
                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=7660,i,11982869945342056379,2776986030165195325,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7320 /prefetch:1
                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                        PID:1816
                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=7092,i,3015732598219934209,1217930983428003772,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7716 /prefetch:1
                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                          PID:4428
                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=7928,i,13809152871241366670,6653478365787416410,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6548 /prefetch:1
                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                            PID:972
                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=6532,i,11905775992084657666,13591772077219133551,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7628 /prefetch:1
                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                              PID:1048
                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=6980,i,4236526522350938669,17027537679570651903,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6352 /prefetch:1
                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                PID:6044
                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=6540,i,5511479211977938633,11508513824859075740,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7688 /prefetch:1
                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                  PID:5540
                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=7704,i,15755669948153364169,7609194996392422570,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7196 /prefetch:1
                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                    PID:4488
                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=8328,i,17930292208474120120,3635366894945541173,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8256 /prefetch:1
                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                      PID:6288
                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=6860,i,10262688864029299277,1781707313638813028,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6208 /prefetch:1
                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                        PID:4556
                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=7144,i,15227166711616031900,7301513866695250550,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6868 /prefetch:1
                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                          PID:6516
                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=8304,i,14596505304383233034,17808777914860215158,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7792 /prefetch:1
                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                            PID:7108
                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=6128,i,2795137518220048804,8594951385052575467,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6100 /prefetch:1
                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                              PID:6440
                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=6868,i,11994240241920485557,9415856632659213456,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6580 /prefetch:1
                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                PID:6964
                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=7564,i,16910658578743970786,9803917057755891420,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8488 /prefetch:1
                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                  PID:6992
                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=7484,i,14725921640189779511,14542837569566153746,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8012 /prefetch:1
                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                    PID:7068
                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=8344,i,9504387863108260076,12898601084990896408,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3464 /prefetch:1
                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                      PID:6252
                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=8020,i,4847249220025360289,11956683575284492855,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7368 /prefetch:1
                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                        PID:3020
                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=7432,i,13731024683219571454,10254385244875568944,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8340 /prefetch:1
                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                          PID:1536
                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=6856,i,9821838047973174118,10362456954096289443,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7124 /prefetch:1
                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                            PID:6296
                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=8400,i,5059661571191747654,3201472931043349908,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6540 /prefetch:1
                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                              PID:3740
                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=7064,i,17626984776765796077,2560132688301367848,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6680 /prefetch:1
                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                PID:5336
                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=7532,i,6724525436886300099,15719233068576563322,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3512 /prefetch:1
                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                  PID:632
                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=6900,i,12262689849220702693,5559989155122475032,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7576 /prefetch:1
                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                    PID:4776
                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=8520,i,205297694055618264,14817494804986317240,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5812 /prefetch:1
                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                      PID:768
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=8508,i,3243519289738249874,14472642518744879854,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7624 /prefetch:1
                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                        PID:1448
                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=7644,i,582938230791047385,3841220962350074612,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3988 /prefetch:1
                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                          PID:6180
                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=7404,i,9067152848314247022,2309076884781944908,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8472 /prefetch:1
                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                            PID:6156
                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=7852,i,14600227180388219766,4551816393243918753,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8484 /prefetch:1
                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                              PID:6372
                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --metrics-shmem-handle=6400,i,10608408765264786902,6742723947355868645,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7336 /prefetch:1
                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                PID:6584
                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --metrics-shmem-handle=7100,i,4084423980339435689,13302111524311754946,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6660 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                  PID:2836
                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --metrics-shmem-handle=7252,i,2468067102649637388,11431922656913811090,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7532 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                    PID:5160
                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --metrics-shmem-handle=7440,i,4752956134970903827,8769279586383162082,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6288 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                      PID:6432
                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --metrics-shmem-handle=6428,i,15546973065553509641,8841507141740092248,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8320 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                        PID:6688
                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --metrics-shmem-handle=6224,i,4161455043692512695,11100208863194057736,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7052 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                          PID:6720
                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --metrics-shmem-handle=6744,i,10870121065922266868,8492064390393704778,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7072 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                            PID:6772
                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --metrics-shmem-handle=7192,i,15281565032492254793,7273771683204305764,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6864 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                              PID:6852
                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --metrics-shmem-handle=4792,i,12280398222162528207,2277079502963956930,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7244 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                PID:6836
                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --metrics-shmem-handle=6324,i,11406176878173059538,17518902254287438275,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7464 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:1216
                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --metrics-shmem-handle=6924,i,8067437505177149736,8346467292784354400,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6220 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:464
                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --metrics-shmem-handle=6968,i,9164422921365052570,5133281559200036126,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8472 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:536
                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --metrics-shmem-handle=7156,i,10877259951360894823,12965612746970958426,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8532 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:7156
                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --metrics-shmem-handle=6956,i,14225338978328329317,13782957441627306881,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8076 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:4068
                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --metrics-shmem-handle=8252,i,13727731536416879790,16184218441091231900,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6224 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:5768
                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --metrics-shmem-handle=6616,i,12558193178761841716,5770361628562073678,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6388 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                              PID:6080
                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --metrics-shmem-handle=6360,i,4630280577256703054,14029089818142356784,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6452 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                PID:4852
                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --metrics-shmem-handle=5828,i,6282864509889890024,13890821833565257974,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7152 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                  PID:3448
                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --metrics-shmem-handle=3464,i,6140306911783510533,913357966430012712,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7280 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:4228
                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --metrics-shmem-handle=6748,i,5760626250488406200,17327435656789713905,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6364 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                      PID:3504
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --metrics-shmem-handle=8528,i,11068812203750805481,6356615202364788740,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6028 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                        PID:2928
                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --metrics-shmem-handle=7136,i,8521971928333204502,13370368431798162409,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7412 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:6408
                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --metrics-shmem-handle=6664,i,8309617976021951581,5222303318211989328,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7996 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                            PID:4248
                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --metrics-shmem-handle=7444,i,1414312634745082052,802609425192483835,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6796 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                              PID:2200
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --metrics-shmem-handle=7404,i,6419341193154499114,18289915303496742919,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6592 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:6484
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --metrics-shmem-handle=7112,i,14149471913479422543,6685916596812540150,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6668 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:5272
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --metrics-shmem-handle=6608,i,10755538635865250697,4798339887903253013,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7020 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                    PID:6632
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --metrics-shmem-handle=5748,i,10603374333324168331,10766404756198284812,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7092 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:6644
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --metrics-shmem-handle=6260,i,8016303426093956427,8155899951201852386,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=512 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:6264
                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --metrics-shmem-handle=6368,i,15116233134382378530,10876563283554642733,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7712 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                          PID:6796
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --metrics-shmem-handle=7496,i,18192709962503461970,9738928232675872018,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6604 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:6908
                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --metrics-shmem-handle=7644,i,3719221553519042791,967392599224631153,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7448 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                              PID:1444
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --metrics-shmem-handle=6760,i,14432485019520383647,15235360015682454039,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6172 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:6456
                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --metrics-shmem-handle=6260,i,7155915676136656321,8921253368827385164,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7900 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                  PID:7044
                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --metrics-shmem-handle=8232,i,5050091386477298501,9020971567022262311,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6304 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6996
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --metrics-shmem-handle=7252,i,5943226744525070221,2327893885162850687,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8284 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1216
                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --metrics-shmem-handle=6428,i,9167839020019974120,12934060254181860978,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7496 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3344
                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --metrics-shmem-handle=7436,i,13323387493919365530,7250466404281407338,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8008 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                          PID:536
                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --metrics-shmem-handle=6336,i,15128681737278570111,13408630819293546364,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8044 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                            PID:6660
                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --metrics-shmem-handle=5748,i,4050908889603215564,11614326701434085402,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7076 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                              PID:5040
                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --metrics-shmem-handle=3336,i,13523210719135830203,3732617872027006586,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8412 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5116
                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --metrics-shmem-handle=6772,i,3426124879933422890,836556169002878294,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6700 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:4932
                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --metrics-shmem-handle=6488,i,6068634071755213753,10385547342468768948,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8464 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5856
                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --metrics-shmem-handle=7128,i,7838162496647639331,2889567153131304748,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8488 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5328
                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --metrics-shmem-handle=8180,i,13906155571463965460,10682209561642462387,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7636 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3436
                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --metrics-shmem-handle=6692,i,1651353714328899062,1309493447174580069,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6576 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6452
                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --metrics-shmem-handle=6980,i,18160950032520672744,17423968677968684305,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6824 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:6420
                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --metrics-shmem-handle=8144,i,18404843688464915686,2431092269019218329,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8436 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:3964
                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --metrics-shmem-handle=8412,i,3766625900943163646,11093878059333845595,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7096 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5956
                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --metrics-shmem-handle=3336,i,14129578118491986449,7923488371017755281,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8556 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:6964
                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=155 --metrics-shmem-handle=6832,i,2092757914858031895,9093863167206036369,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6712 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:2836
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --metrics-shmem-handle=7580,i,15869435577906520019,16452474509537962316,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8340 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5992
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=157 --metrics-shmem-handle=6956,i,14545912725154078144,16322022287625160592,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7800 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6260
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=158 --metrics-shmem-handle=7200,i,12470395960922692067,8094705629057179004,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7120 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6904
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --metrics-shmem-handle=7236,i,1625660008899830586,6411492265672118695,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6236 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5468
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=160 --metrics-shmem-handle=6792,i,7955564833491659508,7737295285261450371,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6988 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:4456
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=161 --metrics-shmem-handle=8232,i,14612763416464123622,8203143832541364183,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6820 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:7040
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=162 --metrics-shmem-handle=7924,i,6186739152365345988,8447334459837929170,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7504 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:7152
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=7204,i,9890273533815925417,14145649158149874920,524288 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5020 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6200
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=164 --metrics-shmem-handle=6296,i,17001010606939794413,8447655159695333039,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6132 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2868
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=165 --metrics-shmem-handle=8408,i,8195848742209654857,7267805302777082952,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6784 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6252
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=7296,i,17773143865503462405,13650287929331459023,524288 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6620 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6356
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=8144,i,8220575455008048531,13463062166567234171,524288 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7524 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5888
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8436,i,530344340500434844,15614937175762156349,524288 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=8132 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6500
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=170 --metrics-shmem-handle=7756,i,9919440393577753324,15892493334264739955,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3288 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2472
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=171 --metrics-shmem-handle=8236,i,6513113226444055501,4886846998960858713,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=7012 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:6400
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=172 --metrics-shmem-handle=8020,i,6180858407682632641,11590424800417175108,2097152 --field-trial-handle=2120,i,13345181129785080067,8351207837585043604,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=6792 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:4264
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6096
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1136
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMan.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMan.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Modifies system certificate store
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2524
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5932
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\DrvInst.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\idmwfp.inf_amd64_8b0ebbc2b4585464\idmwfp.inf" "0" "463e48c83" "00000000000001CC" "WinSta0\Default"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Drops file in Drivers directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6248
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:7016
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Modifies system executable filetype association
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Modifies Internet Explorer settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Suspicious use of SendNotifyMessage
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:2964
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" /update /restart
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Checks system information in the registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3076
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe /update /restart /peruser /childprocess /extractFilesWithLessThreadCount /renameReplaceOneDriveExe /renameReplaceODSUExe /removeNonCurrentVersions /enableODSUReportingMode
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Modifies system executable filetype association
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Adds Run key to start application
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Checks system information in the registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4852
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6240
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              /updateInstalled /background
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Modifies system executable filetype association
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Checks system information in the registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Modifies Internet Explorer settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Suspicious use of SendNotifyMessage
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:2244
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3184
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Microsoft.SharePoint.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Microsoft.SharePoint.exe" /silentConfig
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Checks system information in the registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5108
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6180
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\DrvInst.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\idmwfp.inf_amd64_8b0ebbc2b4585464\idmwfp.inf" "0" "463e48c83" "00000000000001CC" "WinSta0\Default"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Drops file in Drivers directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:7124
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMan.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMan.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6284
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:2848
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\DrvInst.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\idmwfp.inf_amd64_8b0ebbc2b4585464\idmwfp.inf" "0" "463e48c83" "00000000000001CC" "WinSta0\Default"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Drops file in Drivers directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:2252
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Internet Explorer\iexplore.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Internet Explorer\iexplore.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Modifies Internet Explorer settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6104
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6104 CREDAT:17410 /prefetch:2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Modifies Internet Explorer settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6164
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6104 CREDAT:17420 /prefetch:2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Modifies Internet Explorer settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:2616
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMan.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMan.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:4148

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Network

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Downloads

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            BookmarkMergedSurfaceOrdering

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 6B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            BrowsingTopicsState

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 649B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1abdc1387037f9d495705db81aa5b1524ada5506acebe2b31fc99140520ce688
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000018

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 20KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 668907722d4c455b8a301964e755b8a276fb99c0acc83ec8bfebe32b3edfb4a5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000019

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e98b5ee0551c9ec97a3e1376f243e40b5a910ec6bab25704761193261f79eec3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00001a

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 25KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 86c3bf050369399f5dfef2e5f2d27e993de88c2bf29f2c24c671337ed6c04775
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00001b

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 bc6fb4d3ebb80b86e7956c594c2c28984ae582ba4e50290bfb294c54601cc340
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00001c

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 37KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b475a8ec74066aff98ff2f0f870a01be04f842e8422f778989f0fb8e26a52cb9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00001d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 26KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1199254708b750a78d25aa8a5d4106a80937602345592b6fdc5dee175fb88c19
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00001e

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 13789e29e88ae3be51c8913e6013e68335a56568d9eb4cb80fec2e6a8cb782ce
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00001f

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 28KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4c36687f6f48134ddbf7ec0697da8899bb9b52764deaee14c9bb7ef29f6c1c9c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000020

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 33KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c590fb9e2fe7bf20e2e2785c43d5a097a3280c5eca575cc5d281cdab000a7df1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000021

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c235e1be162bb4c391246478b8d7c3b2202a6ad854c45683f8977a849a916f73
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000022

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000022
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8bc2bd7c4812e5e031edeb552ae1360f892efdb9223c31d1b6b41ee2300da109
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000023

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 276483506e97cd14870f577353f08ee1613545bb77989bd68400e09f403c4b28
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000024

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000024
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 51KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cb150d973e3632c951d19c0e83512d87abf5d00bb038d813c498e79456bec982
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000025

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 20KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 88daef8d3f74284a3105d72e4f80806a49a7e76d3ddc4867ef50f933b40fd164
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000026

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 30KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3850a2128729bb0ad2b0b1be6eccd0872e4e52272f888218d3c8d92f876f2da4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000027

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1da925f6db6051392f98ad5674426afaa1419b4f79e87bb2f6158ed965d1c0e0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000028

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 17KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 bed3211331128b29885ee17c946bb65492cbb809f1213891680fb71543c34ba9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000029

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000029
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 62KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 24fc867ea7ba4f85b6ead9b6aa3f73f750cf0b59728961639722b484bec9240b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00002a

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e442eea7a233bf931418010254a7a6beea984a600f148556245058c0533612c4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00002b

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1a43328cd5174fbb1395011bf6d37d46d327d9f278abdda674aa086380e443dd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00002c

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 26KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7f6f7244c74caf8e2282d9c3aea13c25bf460523dee070dcf8f09e4e78d4da93
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00002d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 32KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cb7172a6f6c5e64afb4a9867782db8b3e180d91883ec772946ef37e748cf7294
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_00003a

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 39KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 018ae7754a34c94767cb9ed3c3ef84767fceaf67cb28806dcb0986049dffb269
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            f_000059

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000059
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 648KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b8879a42f6372af743491c3927898687f62e16a88febe153c0f592622db6fe81
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 52386c0c1cd20b3e2b039bc871f977f610dd6c7b5526e0c6afa87e129b9283a2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5be8c514d554767dddc79e419affa1f6b1e9f54e0900101bf42d418c1d8c5e57
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 853866a7d183b51c363ab6bbd990ec41d5b2e24a85aaa4e0c05b35738efcde0c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MANIFEST-000001

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 41B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            CURRENT

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            000003.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 115KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2d47f4c69a3cc562e1f541461efc2bda0374e96f57e2a96f370408d0333fbc01
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            000017.ldb

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000017.ldb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 263e1bf03746003e932c5c89bd51b94c98adf4927f28b7df94de973d5f9b74d9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            000018.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000018.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 545KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1d2de2201580cda7cb8398d778a4e93d605f90c7833c471ee85e877aa6b43fbe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            000020.ldb

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000020.ldb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 53f05ce2240405494aba7c66c985639eb97e3043b0c913940ece7110603d94bf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            LOG

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 351B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d3978a59da58fe931eaebc1dbf5a3542a76ad613c63fd5826bdf83ef19077f49
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            LOG

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8e86314e4faafd4d7e6d11a4762a6be773a60cb2a1c146ca1902d1620e289f60
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MANIFEST-000001

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 23B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            MANIFEST-000001

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8154c239b24a9f679b276d7e39baf3150a6dbf53553b52b472bdc4a0e581a187
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d5ecf155176f108ffb414a818d5be659599d0fa6a03d0954ee6749c70bbfc10d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 23KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 37727c43a1deb46326564e35f250ab33126338e866cdb7e6b55831ede38ca886
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c6031ef12e1fd5b6555332c13fd2d228be30afd234d09082c9b8186cdac4c9f4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 17KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fc45687426d1549b9cddeb8a7636f1c91d9305cbbc3e0f0086b622fc1e92a498
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a72b6d7a33755f6a5675d6d2b3d741c2c9f5327859fda74b24a63bfa87453e6a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4667e741cf0a046233d4bdc88a82db1317d4ef85aee8e3b2995b6b2c70598775
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 baabcf927aab553003c9c7d4082ba753cdfb7f2c9ad7a20ab823585c96b2b25b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            SCT Auditing Pending Reports

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            TransportSecurity

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c4a7a7c3dd21195c9345ad037bed3bd8964c7174d90902de2330456fb0e14d34
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1e02760dfda4574a80da831b04cb17f5e86c8bceb75bba3acb4f28ec5ad92096
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b08c6393dc3557bbd5578a2d09ff661755930de90fc41e9154e7dc1ee122427c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0f27d7dcbfcd8e08e20b1a39c1ec17335bdc67c10faf6bdbc0a97cb0f74c90c6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c99d0d6ed790024dbb1b03fd8d9859c5bb578efd7c25db93d31fdd9f7460e26e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a5eb066635ab283c32cdd7e8b421b22a0b6bd109385a473171fe32b2d5df7caf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 61e7fca3703f0d0fe296eca877108e9e4bab7cba216b2b2ed89d3d6a25fc9d5c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 591ff49077ffb031e9acea42042834f650303ad03d8e056394c4d1d047653912
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c848397b8546f1ccffc0d1d6a7f6f1030cfe08bd3846d45b35d24df2736fde54
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3479e8099d71ae77fbfbd03e7b169b952879d3f5f95aad2fc9b0b130a639c786
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 698d6952b47506e54eb165018b11f28e1c31b7e346c8406b5ba9492e9123c981
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 15KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4c23819663f5453b6e4c7003042bc94d1c4075be1cd622eca0bf3eaecdbabe35
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9dcd9692e9b9d8d9bed6ad575654ceff8cc5b49606f8a29de69d0913544b53b6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a57e2a5d4ba574c95581f59b0d7b1f9a01ef45ea96d35e3614aab2a0743f49e8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7d0400324adaa94c17cdb2eacccbd3437f9b168ca6e558ca9a8cd90bd8d76eb6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Secure Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6ada718285ecf1e41da8da86adbdd625d076c84025a9b8de58da56c3d5e4f53d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0f3d70bc-2458-46f7-9354-dd975a0da4a8\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b7e315acdfde361f6258ba3397b08a0c33edff9065b689ea4e836ae25d4b4c9a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0f3d70bc-2458-46f7-9354-dd975a0da4a8\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8956c04c2acfa142c9d58a0265fc0c8c4c0a51943cb373a927d23c32a594fcba
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0f3d70bc-2458-46f7-9354-dd975a0da4a8\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2e8b57bca735cbb59f0d795f54643376d4f1803d128d03bad1b84cfa4d74f05b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index~RFe5d5017.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0f3d70bc-2458-46f7-9354-dd975a0da4a8\index-dir\the-real-index~RFe5d5017.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9ac9afd761a7bd2401588dec7e6256ea4e872c9369f33b94f4a59d07cb6ee789
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\80d94791-50d2-48e9-916f-8aba4c1daf35\index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 24B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 276B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ecbce438ee69f2ff1474b2decb0a6f3ef064cda27a69423b44f519af7fd4cea2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 214B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9bfaf852bdac568f0d26919acddb462711ad02b2b07b13e0a1077aa118f067ac
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 216B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 06f61643a5ae03930dda29345feb7e25dccb7fe90f8394b8147afbc34243071c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 283B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fb5e0c95030283c4ab08662619450057037c35c6ee42195870c260ec1ecfa67a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 132B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 90d41d67531084108daf76cfce6872b5ccf63b41031098acba4e102eaae09065
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 130B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 98e2c7da3944f73d6f6dc5bf284cd7a76b4593b787cbbe49f8f4903eac031369
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 276B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4086cda74a2c8cc5a5aa6599879c6af20d791ff38bdfec85506cb43685d5b5a6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            index.txt~RFe5cfce6.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5cfce6.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 137B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 852721a6d34ec27ac32bfdd5aeeacd3e63d6b8d50f5dd8f2b7681bb4d18c073c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 120B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a5f0cc86b86bc2740401823465f27756b1a3af37bd5b2816d952d93a01ae5f83
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 168B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fbcbd6f857225981558e07e6136cdf33794ae40d453ba847c42b2baf6aa12295
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 144B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b8586e7bc2f113279de2a50a8bc3f89784f93966b51ed041902d0f93eacd7a84
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 168B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 baa3a4921071da3eca60977d8b6dc9b88ba23804036b838882269b7029817c5f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index~RFe5a6fd2.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a6fd2.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f01ede33e87e6a4e658eb513ac4f23da72e0ffd31be9a7cec285139f9d6fe1bd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 781cc3c027be5bcae628ac73954c25bbf416bc28ca193c60430eff72163d01f7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            512.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5584_1423883139\Shortcuts Menu Icons\0\512.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            512.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5584_1423883139\Shortcuts Menu Icons\1\512.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            512.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5584_1423883139\Shortcuts Menu Icons\2\512.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 231KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 24ead11d04e422a67a3d20a04d4c8695d117ed2414ffc0a4107e70977c4cb7c4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 232KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3b132f7e4d665d77cd9ed58801155553bfd3c8e5f26f04231bdb57507ecab9dd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 231KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3ed5ad40507e9bfaa0205d2919f853c820a1e23d4b5083295b18f6e6aae94873
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 115KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4013e90d797ea39f1ae728af7885cea5a6a958f382be2c8392277e4583e95208
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 232KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ab84bf2d2009f076822733ae1e06cc1a13205da7be535fe605535f3dce388a4d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 232KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1270e34cc0c1d4c700a8922b42c2eafd9b240e88e82dcfad1b2cf3bfc4566164
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 232KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b96b67930ae0b4ca3d0d0ead97b854dae20c41233239b24ce61490f3dd6aea3b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 67c3d537374abf4a4065bd49eb5e79e4d5afe358a5731186278c6aee60766d9d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 984d305b3eec7405de5508e1308b8480628443e2d86e9725d026105394ea0028
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 03125d677cbabc2636a28fca006f76a1fd6832a6a5d8063667aa0d6cf9fa13ca
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            data_1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 264KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            SiteList-Enterprise.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Edge Profile.ico

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 70KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ac085f3768b6509b7306eac52b883e984a34d7c90b3167e85172d274433e4007
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 111B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a8a409b476dca4f7c9770a0adda304153c5336a3cf6fa191a999b61daba49377
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 472de73fd7a21e5533f0330721657855f8147c76a69e60a55bee8f27f5474843
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Secure Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 38KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 50c8b1836fa869e8572461fe72bcea8a634bac271a8aeaf98ceb854d30885ae7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            sync_diagnostic.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f5d694952c3d37274be20511fb4c27ec902a291f074a2f5a27c5a23f9c704961
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f5a4c2d7604efef0a14357cf34139a1657b274f35839440d0d175047b1f35951
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 25KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 16ae52404b7bd5704924768ce9cc7fa06d64156f6a715c4bffe90c84d119702c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 122c3301190bb0b8c0a02c14a8b36055d5f995def7f1d0ef989146562080ad35
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6f43bfdac653f99cce61bbdde6b7c7425019292ee73c694075ecace5c1bb3ea3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5d8902cd-cf2b-4330-81a2-faa3c20d319e.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5d8902cd-cf2b-4330-81a2-faa3c20d319e.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 13B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            www.bing[1].xml

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2WMBHWE0\www.bing[1].xml
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b8288d33842da3f21a37e05263e6ba693625dee55b3df269d638313620f65e68
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            www.bing[1].xml

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2WMBHWE0\www.bing[1].xml
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2ce1e5fa1ef3538efb5f378d151dd3dd95ce454e2506c31b101de8863a93b3ce
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            FileSyncConfig.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 553KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a3a4b648e4dcf3a4e5f7d13cc3d21b0353e496da75f83246cc8a15fada463bdf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            OneDriveSmallTile.contrast-black_scale-100.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-100.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 783B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 292cac291af7b45f12404f968759afc7145b2189e778b14d681449132b14f06b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            OneDriveSmallTile.contrast-black_scale-125.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-125.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1018B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8efeacefb92d64dfb1c4df2568165df6436777f176accfd24f4f7970605d16c2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            OneDriveSmallTile.contrast-black_scale-150.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-150.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 262b9a30bb8db4fc59b5bc348aa3813c75e113066a087135d0946ad916f72535
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            OneDriveSmallTile.contrast-black_scale-200.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-200.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9833b80def72b73fca150af17d4b98c8cd484401f0e2d44320ecd75b5bb57c42
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            OneDriveSmallTile.contrast-black_scale-400.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-400.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3a7ef7c0bda402fdaff19a479d6c18577c436a5f4e188da4c058a42ef09a7633
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Microsoft.ListSync.Settings.db

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\ListSync\Business1\settings\Microsoft.ListSync.Settings.db
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e1b72fdb6fb9da58322f43b4ac4d23a84be5800fefd87fea07b6895ce091fea6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            OneDriveSetup.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 40.2MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e70e80dbbc9baba7ddcee70eda1bb8d0e6612dfb1d93827fe7b594a59f3b48b9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            DeviceHealthSummaryConfiguration.ini

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\setup\logs\DeviceHealthSummaryConfiguration.ini
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 77B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 88354672648f554878f4142fb101b6047e5fba873ad8f4baced6fb5a65d89417
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0dfd18b55bec3e49730926f7c720d940a42bd0b97cd87dd2c28fb25a7bc4e47f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            iconcache_idx.db

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 28KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7a168480a0f56833bbc56f646985571714ae7e4c71fac990bc8b161a846bb89b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PreSignInSettingsConfig[1].json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\K20AJ31L\PreSignInSettingsConfig[1].json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 63KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 543796a1b343b4ebc0285d89cb8eb70667ac7b513da37495e38003704e9d88d7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            NA01FcDoQNBG4hrb0M_2gwXhWHc[1].css

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\P3Z1RYVX\NA01FcDoQNBG4hrb0M_2gwXhWHc[1].css
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2f19d8785b187da8f368dc842673e4b685d46c8b5be5d37bec3c4f4b3aba1ebb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            tY7549g5C2RGC80-nBWHs0eUunw.gz[1].css

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\P3Z1RYVX\tY7549g5C2RGC80-nBWHs0eUunw.gz[1].css
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 41KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 889b7207db2affba77d3a3f1a7ec097273e35c78cd78f52c76da1eef87542990
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            update100[1].xml

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\P3Z1RYVX\update100[1].xml
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 726B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 36a6bd38a8a6f5a75b73caffae5ae66dfabcaefd83da65b493fa881ea8a64e7d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            favicon-trans-bg-blue-mg[1].ico

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RJZQVUBC\favicon-trans-bg-blue-mg[1].ico
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 439b6089e45ef1e0c37ef88764d5c99a3b2752609c4e2af3376480d7ffcfaf2e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            activity-stream.contile.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\activity-stream.contile.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 75f79c2dcfaa318eddac22e946ef43eacd03a411b477cd367c52737a7504568b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            03D74D5ED346B6A425AA45C38A54C3F6BCFF5085

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\03D74D5ED346B6A425AA45C38A54C3F6BCFF5085
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 47KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d963bc1433d0aaa4f2ff615171e108e02235b834844f9369e089af75b6f14e2e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            0C3CCD44C55E398403BB467763C6CF66630E1941

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\0C3CCD44C55E398403BB467763C6CF66630E1941
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 32KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 467174ff3b9916c9de5b3a4aefffa6c11ef06fd9aea1c3bb78d2e8ccd7295dc7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            137DF5863B4059F05072C93E67B65710D05749B4

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\137DF5863B4059F05072C93E67B65710D05749B4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7172622a2dfc4f64134f71d933a76039b9629e02d95682b3c5ff9ac2d71590c2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            397BAF6B0F1571B6927B65B8C808BD25A5962EC5

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\397BAF6B0F1571B6927B65B8C808BD25A5962EC5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 71KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4ec51f13d9f00a9c236eaf617220d02cba5005093b49a891e4a98594ce2b520b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4392D0BE70E66D31AFA99C7CC32155C4D6C4AEA5

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\4392D0BE70E66D31AFA99C7CC32155C4D6C4AEA5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 45KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5bb537379366665dc73034e6583e10dfd90a159b1f94ac26a4c6bcd306a0907b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            53CF23FB80666D2B5FACFEFD6FFD88E5664584DB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\53CF23FB80666D2B5FACFEFD6FFD88E5664584DB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 51KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5b5bb196f182533157dabce0404fd2cc37ba484a79348f92a8e1846874a1e860
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            56BE5CE2B2088BB5BCEFE799528C7004265F4CED

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\56BE5CE2B2088BB5BCEFE799528C7004265F4CED
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 34KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 36a45491e789df028d3244ff2a428a619954c28e0df311c6303151201ddcbcfd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            6D89348819C8881868053197CA0754F36784BF5F

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\6D89348819C8881868053197CA0754F36784BF5F
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 55e3fe99d776ac0ca3bf7674ada155073f57c534b2369e3c8a91e646ecc66aa6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            79A8A2CC9373CCCA410405082E630638C0A0C2FF

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\79A8A2CC9373CCCA410405082E630638C0A0C2FF
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 69KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 daee51f54c36c9894b9895297954c6b4d019c959598ee6c9054ddbbaa721bc0e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            B96C2B1204AC41DBD23366B09CE5D4E4648AF20E

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\B96C2B1204AC41DBD23366B09CE5D4E4648AF20E
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 207KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 acb4560a4d285118d5bddc20d95e479868c47ec124f6dba53d383e4836bd4b0f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            C5643FFFEA92A5665EA3F3F42C97FA8CC3904334

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\C5643FFFEA92A5665EA3F3F42C97FA8CC3904334
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7be1edd706fe2a2de05433f748a4752b4c4a4f592cb00252dba98d0344b1b550
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            D081F05D87FB87C47A6992FEE7805848C0CA5C4E

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\D081F05D87FB87C47A6992FEE7805848C0CA5C4E
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 91KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5b8789367d8d03967f14b29d312597d540cfc9ae252e89654509d60343064c89
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            EF766A10D3F616BB88AC79920EC6513CC8B2B501

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\EF766A10D3F616BB88AC79920EC6513CC8B2B501
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 153KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7b6cf9af90e82ea3693478ab3383d63a12b4b0e5294ecb087c85970af126da0d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            F6A409383098BBD7C74873C5430025F0EA68205C

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0olu2cg3.default-release\cache2\entries\F6A409383098BBD7C74873C5430025F0EA68205C
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 122b8fbb21a58f374b311cd99d55fd05778b52e88b9691d6d86d7db770eea458
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2c9fa395-d721-410b-b5bc-2954b3661629.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\2c9fa395-d721-410b-b5bc-2954b3661629.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            NewTextreplace.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsb492B.tmp\NewTextreplace.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 86b6cb434a0491ea16bf480e6ad16c935d0668535da17aa7df0dc4392e10d74e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            System.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsb492B.tmp\System.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            nsDialogs.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsb492B.tmp\nsDialogs.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            nsExec.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsb492B.tmp\nsExec.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3a101fa91d4e8831dfb748a1e345ab74fd4a551e64254710bdf53972ba9b473c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            registry.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\nsb492B.tmp\registry.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            content.js

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5584_948319380\CRX_INSTALL\content.js
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 28KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3d27b82fa254299985b86d093c3a8a607eb5111a4dc6a0ce24e31ae9b5837952
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\ar\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5973951d6113e9419f006895978465117f0ce04b13bb0a40c97c37c403b9d6d1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\de\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 524B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3c3560309e09d5cd91d53a946c943f7e4322e825cb16de27c4d5d1c050319d36
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 99aad33d4fe0dd9f54a43eeaa99cf2b7874f2fdde16ba2e98270e6d97680a022
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4bde9375572bea04b287d9811d02ab5cc93ae8f2118f6b803275899644bb5dc4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\es\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 226B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 dfa2def6ebbf1ccf735edafa507bce95ed624ecccd91717949e96f58d40898db
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\fa\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 685B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 70145621753a3149757fcc320c567ddccc61f1ceb833720acdadc4fb09c6253c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\fr\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 339B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8b1136aa83c0958c70b5a97494be380807a1cf5e45662d2d0c74b7073075bc9f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\he\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 594B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b41d5287c8d6b1bad251235e16ed223ad31fd008990d9359ad50358d77a5991d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\it\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 624bcfd864df9675a08084de664bb73650a88d7e81f9c27208e872bb4ed3605c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\nl\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 215B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8e4959947f9781f8aaf253049b60ee0ba341571a745fd20c6a6c0033ca7991d9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\pl\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 563B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7162e18acd5f67a3e321fcde0dc75290c7c73c551732d733c74e377bf46fcc75
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\pt\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 556B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d1bb1e348b413035ddd754e1dd8fb5fac215ad8bcb6c91bda2e80ff738725e59
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\ru\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 140208963c850e7d3d5e4ec7099f56c866e32a16894432f28ff873f431f4f95b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\th\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 293B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e306358b32d1211dcbe7cc76768ef253810a97637bb6543b97c8e2a77154afa0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\tr\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 829B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fc7d9163f43427466fcca3e616a1a79bd0cb106ef4feb351d3d69c3a756d47fd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\vn\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 234B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7ea73da3bd6130c6384e3e6fef25254dde6553a2977ab6e2793fc79ba137f672
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\zh_cn\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 495B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3b24da8301abaf61b184f29b58d6f6b90191419e7eda40e292bb4594bbd46915
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\_locales\zh_tw\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 537B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 718af7b40e4238fd2f836a532fcd7e991e15ba4edba7feb6ac3ed851937c7c57
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            content.js

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\content.js
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 26KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 db85c3b72249f7e74b8c1687a76d50ede39c2d93252ffead3a92e262a3fbcb97
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            document.js

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\document.js
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3325cb99851c441e7593783ba8671f73b5455effaeec7189d8b176be8723b820
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            headBkgd.gif

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\images\headBkgd.gif
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 909B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a022ded24e2e2b5e8c0388109f4617647b72a9a06540f438b0243985aa3fc43e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            headTitle.gif

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\images\headTitle.gif
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 15KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 46a531f88a1e5682b4f5f5eab6003a3e12e9bdaeb95e1d0421fc2f4c6553cecf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            logo128.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\images\logo128.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e4cc1b0bc7c1f2e46484f2beec395bed9c0224e2feb8e4bc758c96f7f394104e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            logo128.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\images\logo128.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 20KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a32b057e5fe9e24dbcfe4a330219f2afff5cf78f09ef799d0132f4b21294935c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            logo16.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\images\logo16.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 852B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5c41980b14181def6030af9e82d1a88bad62b839c913df166211f099fd34b4cf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            logo16.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\images\logo16.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 885B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9bf3a8c13d588ddd1cfdc9be77dec8dc48a3b476363c727bdfd0daeda1b71d23
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            logo16x.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\images\logo16x.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 854B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 feb1f8ba850388cde225fc9d9a9bc6f27ce84eb399d3bf8b7422e0cb31ae467a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            logo32.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\images\logo32.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 642ba33d0f62ecafcf2c1b6e9c03f199c60a5241e234a003ff24b98a4dd83cc9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            logo32.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\images\logo32.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 05aadcf38a4f8d3c2c34c09a03573730c6e6ae3cddd985dbed4f6e22794d7117
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            logo32x.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\images\logo32x.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 16181b64e00841b68cf605a5e39d7fd56e24499825b404fe4fb3b477e56e84e8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            logo48.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\images\logo48.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 33c6c2eab1547dcee90dc28bf346e6c90a190f63ac271c0e03562ad04ad515c6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            logo48.png

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\images\logo48.png
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4535a0ad195e45fdc95c462466a278ef687469e38839b97e85cc393c33aa6740
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            logoTonec.gif

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\images\logoTonec.gif
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4a7aa9148bffa220e01ea106dfaec432a42d8d55005ada6b6f47bc058dcc6a50
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            welcome.html

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\welcome.html
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b979599aed579ddc5f5cbf4cd3e2d7394c8f8c956ff8cc8780e5c899d96013d8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            welcome.js

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_72545105\CRX_INSTALL\welcome.js
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b4c4c95b9aeebbd74759aa3856e508056d2d80de3136d457b6876805ae4637c9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            content_new.js

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6932_845679545\CRX_INSTALL\content_new.js
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            tmp-88x.xpi

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\tmp-88x.xpi
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 107KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 49bb13b02857c8d0d98d9f5ea7eb83d77a9b9bdd072ec6e04ac7ce11c948990f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            tmpF268.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\tmpF268.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 35.9MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 bbc70091b3834af5413b9658b07269badd4cae8d96724bf1f7919f6aab595009
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            tmpaddon

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            tmpaddon

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 502KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ~DF71EE2ED55358F446.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\~DF71EE2ED55358F446.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f00f4e97fb112b78dc341b6f54fd9f8465b0291b63511631e92b79098324ff2a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            log_0.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\1780777225f1_0\log_0.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 414B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 332389704ac70aee018ab4c8a9f84f782bdc794ba534339b060234dcbbbfd87d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            log_0.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\1780777227f6_0\log_0.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 414B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5e4676d13453d769f8951364da9a54e1270795e4be07c11cf06138d42a176a38
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            log_0.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\1780777228f7_0\log_0.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5d77aaa6c2f5e05144f76e3cbc6c8b9d00bca9d318261cdbcebb308f768b6fa3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            log_0.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\1780777228f8_0\log_0.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 414B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 eba432f470b9b06704c7703f205e4a434038314f482a6d8ec1abc29c2e2a187a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            log_0.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\1780777229f9_0\log_0.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 312B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9c94a4966d66c807c873ce3fa4ea87aa6b599aeb0270cdb1445eca708cf99496
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            log_0.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\1780777743f10_0\log_0.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 414B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 befafe730c1b78c71d1da1469c294372612cf8eb508c40d3beb8381e3783fb04
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            log_0.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\1780777743f11_0\log_0.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 414B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0cee52baf6b69f69e6bfc06384da41be69182d7d7b4ca5c7e84aa3b035c34e6f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            log_0.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\1780777744f12_0\log_0.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 498B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 536ed3d2cfef33a31697f3f1f557a0b5eefd19457c4317547a45cf7c10c81d6c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            log_0.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\1780777744f13_0\log_0.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 414B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7ab1992edb6713ae54e29031924c8e7006834076e12b9e0fe6b2a7489b00dc60
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            log_0.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\1780777744f14_0\log_0.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 502B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 37d23145abd61a4de30072e3c7984c21cb433405bd3f37e358fac067d6ce5389
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            log_0.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\1780777744f15_0\log_0.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 414B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a6ec984c7beebdbcd6526280df511c9566af8813520281a029a078fa3696835c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            log_0.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\1780777745f16_0\log_0.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 414B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 10fcd0eac04f4f69ff57fbc8ab5a21a7607cc6fa3b9f81e656021d7013f601c1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            log_0.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\1780777746f18_0\log_0.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 414B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4909c2de5b2c5dcab6c9de3f1822f5e0d1645e90a01e8a029b837144607f540f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            log_0.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\IDM\DwnlData\Admin\1780777746f19_0\log_0.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 315B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 04fd8a10ab168e36f3c6f97d37bbb9af5a3abf3f26a45a6bafff626b43d061e8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idmcchandler2.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\IDM\idmmzcc5\components2\idmcchandler2.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 326KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1450146b904919474ef6d528b20a672a33a32afc4a1e40f69d515b523d72fa19
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idmcchandler2_64.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\IDM\idmmzcc5\components2\idmcchandler2_64.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 451KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 59ac02f5a0644bf56b7ad7e2b48fc8f89083f8cfe12a0a93f63163a5573a876f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            default.dic

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            5IK1UJ1ZXMXSONQMH391.temp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5IK1UJ1ZXMXSONQMH391.temp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3cd1b702ede1ce2429730f2615437fc8926938c37f58ea6f2a4e85878addb3ca
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            6824f4a902c78fbd.customDestinations-ms

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ccef60c0cb63b2af4ba9f2de927703a5fcb8d050edfe57efa04033720fc0843c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            6824f4a902c78fbd.customDestinations-ms

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 110ada655bffcfe668ffea4cbce031fb5295e63cd68f1012590690a2d50c63f5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            6824f4a902c78fbd.customDestinations-ms

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 78ce39f2c2b2b72382882559ff87799c339b0f81a33eac6981223ed7cf3a2a8e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            6824f4a902c78fbd.customDestinations-ms

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 485133b70647aeb824fbbed365dad7202d6d3dd5cf11c9823b1ef8f269d47109
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            6824f4a902c78fbd.customDestinations-ms

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 20KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d10c2f952d3c6a1832fbd7fb70c0c2877b09ea8d95344b361aee22fed1c14e51
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            AlternateServices.bin

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\AlternateServices.bin
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1b73005f1d4ec9d76c04c8b1f4e07ab16d077f775c3436594874e93d719249b3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            AlternateServices.bin

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\AlternateServices.bin
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 41KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2e4b1ff4f2e021a928beff2ad39a460d5b0223541f1652bb32672b861ff07ad1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            data.safe.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 54KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a49f83d38a6cce3eda19e8a1adbd4b6f0a76a596a6cd982217c3b8412f3743a5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            data.safe.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 55KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c1200c1580e93ed335f62b1fe4cf653e2fa9825dc287ffc3ee1a03c70eaee75c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            data.safe.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0d64d0417d4019261791aa6a30be906fb2fac92a193ba1a3c368ec436e330e84
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            data.safe.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 53KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 241b1373bdb6efef284b9c52f846139bf5c8405ebd158d381d8a33345f37d5dd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            data.safe.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 84KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1a2aef9a2a295e979b6598de9996d8fb498328df5e050fc3ae05c250d6bb73a7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            data.safe.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\db\data.safe.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 70856640ac126bc2a9c7af57592ab918f904b1cb25844082dd66fcbd9261c6e7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            events

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\events\events
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1b21d1598baea50fe110b8d90b6c973398f2409d863237b2ff5887578c327ef4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            events

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\events\events
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fd121fff773ca181efeda3a55912a58cf063424b6ca6e6dbe556facd6a936522
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2fc7eb95-f6db-4dcd-91a3-264f21eaa491

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\pending_pings\2fc7eb95-f6db-4dcd-91a3-264f21eaa491
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 235B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 53dceea2faf69b99bc04d9f4ae184cc24b03cc2eb6f0257b6a1114b8a4ed4277
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            32c1d4d0-7d66-45ba-8db4-cc824e72683e

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\pending_pings\32c1d4d0-7d66-45ba-8db4-cc824e72683e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 235B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 34081f24e93a13d098bf2efe894dc3c20f04a9c91e65bc7aed7bc055a981927b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            36648d6a-9d0b-4a0a-9e40-476a9217d034

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\pending_pings\36648d6a-9d0b-4a0a-9e40-476a9217d034
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 15KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cae57b4b4c2a6419b3c3be3a03349b991c4952eacabaebdb9688d1b1580e06a3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            69093c21-4a71-4732-90a1-466f213604d1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\pending_pings\69093c21-4a71-4732-90a1-466f213604d1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 886B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 357f8a06d60642be00c0ba9efd18503d86cacfcb90015b48b47567f491b368d5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            bf7e7f6e-0358-4532-a6c1-f9850fd72d59

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\pending_pings\bf7e7f6e-0358-4532-a6c1-f9850fd72d59
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 883B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 caa1dd1c8dd2753ad833fd18ae0c7bfb3dcdbe7fa1ab232d2174c3f233dd7507
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            e9ee7d5b-b43f-4c4d-a283-09bad31f0ef1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\pending_pings\e9ee7d5b-b43f-4c4d-a283-09bad31f0ef1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8a32c0568004098d40fbbbc89be3c4433db994fea6c7dc8532794952363a9e1d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            ed47b9d2-bf3f-41ad-8f5a-c2066297887c

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\datareporting\glean\pending_pings\ed47b9d2-bf3f-41ad-8f5a-c2066297887c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 20KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7a57f4cd3d44673b2b9eb4f2e167031c3ad41ed318e930b8ddac67eef5b58744
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            extensions.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\extensions.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1488b727f664a1c3f0a738ba0d6eb9312ec73dd3c1f74cc6698821c51a51c37c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            gmpopenh264.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1.1MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            gmpopenh264.info

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 116B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1002B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            widevinecdm.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 21.6MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            prefs-1.js

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\prefs-1.js
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 42c85899f3c74078348efcbced79df7e14aaba9cc93e8dbc396034a939a24fc5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            prefs-1.js

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\prefs-1.js
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 dcf9a9c9ecb5cb09f4d6ca171f1c81f8fa6f3950393afb806c70c6f574cba30b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            prefs-1.js

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\prefs-1.js
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4d8ab5ef7652f7862e3958893ac4f805d66ff27087c14f11dcf01a6a7a98fc81
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            prefs.js

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\prefs.js
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4aa2888fbfda74a431eb0c9683e77411966733e823ea296bb2a3a9ef6df1c2a5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            prefs.js

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\prefs.js
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7b5b857c143a720f14d9a4fa4bab5ab76da2e0978c06faec62ddae44e8f9ecd3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            prefs.js

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\prefs.js
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1e7f8d3b2a0ab5d1c86674a32e1f16b84f70e259e7c1dceb9845d7de6d68b650
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            prefs.js

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\prefs.js
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5d5be059ace7084bfc5a34f0b63cd1e16a9a3264ef6ff3ea51eeffb4f8a8a6ca
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            recovery.baklz4

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 28467d81d11494915dfa26a61e815cdcb62777a2a4664a6cbd1d518e225b7e97
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            recovery.baklz4

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1fd768666f12f5a0d51e140367d76362beb9301c114cdff3ad4f1e5e206d387c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            recovery.baklz4

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6f3101baea0029643907e20d7964e01235ab3283d37b40ae2b900525d85b0cd2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            recovery.baklz4

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0916466bbedd8b9c5eb27722f6a9440b39ab70d41d609bc53126875bc522d7d2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            recovery.baklz4

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 87faa53f6cbe28d310e5bd0515049bdfd640e3c31b15fe298c51b2514bcae304
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            recovery.baklz4

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 29fbbe2a6d14ccb07863c8a730e02e0e5c315e608760d8a5c3b36109d0d90c12
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            recovery.baklz4

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 088b3fe7a29b7cb57bf04de34b0327dd1ce5711e41d738aafd88e8d62c5988e0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            recovery.baklz4

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.baklz4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9c067e38f36378be44937fa7118e67dd7763ad29af554023bfc7392257d04b01
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            recovery.jsonlz4

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 41c2f18887157d15cb0ef65bbf5fc4217559bcc7dcedb7ac5492438d60ea1643
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            {eca6668e-ef83-4b4d-9682-7f72db31204d}.final

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\storage\default\https+++www.youtube.com\cache\morgue\77\{eca6668e-ef83-4b4d-9682-7f72db31204d}.final
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 192B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 04cae3c7b208fc55b25763913d0bbdc99232942086efdf705f2a27764be6f5ee
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2788106338PCe7r%sCi7s%tae2ndt2E.sqlite

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\storage\default\https+++www.youtube.com\idb\2788106338PCe7r%sCi7s%tae2ndt2E.sqlite
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 48KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1888e6014122ce09a6b2a5bb89aa63c33cb33b6aabde0de650f751ac7d661049
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3870112724rsegmnoittet-es.sqlite

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0olu2cg3.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 6.2MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cf5b38222a824b7d0910fb934d73b378a6e2c86fc375cc8ddb2a9046bc648f9a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idmwfp.cat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\INTERN~1\idmwfp.cat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 52818c67be219bc3b05c58b40e51b99a65c2f4bcafe38a995610b4ec10928def
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idmwfp64.sys

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\INTERN~1\idmwfp64.sys
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 169KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 753a1386e7b37ee313db908183afe7238f1a2aec5e6c1e59e9c11d471b6aaa8d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            IDMGetAll64.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMGetAll64.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 93KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 117abaeb27451944c72ffee804e674046c58d769bd2e940c71e66edec0725bd1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            IDMIECC64.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMIECC64.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 656KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d0c6d455d067e8717efe2cfb9bdcbeae27b48830fe77e9d45c351fbfb164716d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            IDMNetMon64.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMNetMon64.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 555KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c08ff1c6ffa6242f693ffe98dad40425a0770e78e774265e5038117a8fcd54a4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            IDMShellExt64.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMShellExt64.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 36KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 48e5c5916f100880e68c9e667c4457eb0065c5c7ab40fb6d85028fd23d3e4838
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            IDMan.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\IDMan.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5.8MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2ddf8b32df4a71b0bc984f2912d0d560dc4cd1bf826501a0f7e97c3a50df827f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_ar.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_ar.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 98KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 51884df6595ae8e040e2314f2a4a8781ee750cbc727f0d5cd7c6451c173114e1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_ba.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_ba.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 59KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6d34028032eb6611231dca18061488ded276de76cd63666fbe044b312d376603
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_be.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_be.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 116KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 34f313d060cb99945e9ee78542ac4fd5e3eee966a4e3a0d8290f1bf8cfcfd23a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_bg.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_bg.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 88KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 986641895958578451a225562b20efd8fde001440e1063063d05c24a5f7b83b3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_chn2.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_chn2.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 104KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6048b086fbaa559cbff6725c1aa624d47b8454e8f1ba37a7affff536aa372211
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_cht.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_cht.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 77KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cc4d2f3698d5b48f3bcecf3a69019a1f26a0f59355a438bd12081398477f1c28
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_cz.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_cz.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 96KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 449f23660278b268ce198c7ca7c1988e5aac4aa18928c45282f4f75a89904b66
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_de.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_de.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 118KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 28ab2b5d1fa85028ed966398fd4ee07b181f1509c27b0d039659331bd8379889
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_dk.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_dk.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 89KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ee7c0d5597d536e68c0916a6923a8e9fcdeaac9c0953814bfe30b8daf92fdcbf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_es.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_es.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 122KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f70d8386e91e2dcc86c31a65da9ad5bbac74e3a0585a00fcefe367c3e0e90c0e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_et.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_et.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 113KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a529bc69da471a5bea6b21442997a2faabd75756b5ca7bd099075b3ed2fb6c12
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_fa.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_fa.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 111KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 92f60cda7a7395d5d4cace82c7270afac5d1b68a2b7714bb1510058fac23879f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_fi.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_fi.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 87KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1d70a8b610f092cf30e45c5ba579350535491f5c102df5684de10ba03c4c9684
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_fr.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_fr.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 131KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 56358f089d82d85b3815961a9422660cd6ea367a1ed7ff5cd9d4ed8e018fc3cf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_ge.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_ge.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 255KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e84e133ad8b0fc2585c044913e8ad4cb17d7ceed622de4a56bd92376d5a350cb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_gr.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_gr.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 107KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 db65ef51d8abda581c13994d13186e1efb3c16879e6475720c841d72d41ebe15
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_hi.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_hi.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 211KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 48d20f3a5ab095ff6b378c8850ff1eeafe030a1c0b5a0c343e625bfeb8ab7ba0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_hu.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_hu.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 98KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 35469c7f7d4c6e877a0101091f39ab4dd5abe81b2f6ba200d2c12c3f51614ac3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_id.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_id.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 116KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 225fdf1269be2b83549c9da018c1b340b4b4973b6dfcd576ed15424762e0b816
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_it.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_it.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 126KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e29d86b915569486e9c6601994efb53b623be41fc79be6def4f2ce4f528f204c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_iw.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_iw.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 88KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e549814b7eff8d22a2ab0df9fc4113b7a1e3e72316531eff7ec01db52af61468
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_jp.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_jp.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 149KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4eef1fc6605ccc0b825f875835cdac67748f735150f35fc01fab35f2a9429f8a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_kr.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_kr.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 101KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7ef5b0d823f6b9fd19c7590defdd87b4cda46482fe57a308b6cd55f3e5a5f89c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_mn.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_mn.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 167KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e3cbb6136377e92d5668d5ce0ae15628f14641bf1e00111a2ea85fa884eed4ab
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_my.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_my.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 115KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1c0611bd21a7b9983edff8289862098519f8119201ffb8559e3af5ff1505f178
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idm_nl.lng

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Languages\idm_nl.lng
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 116KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fbee9ee9fe61bf239b97f5d1226993efecc005893e78a8b200f09185eacdd944
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Uninstall.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\Uninstall.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 163KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6f6201b354dbf3c59c3bb0c01cd32264d9f68e0d3ad03b0681f5fbb629c40c83
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            downlWithIDM64.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\downlWithIDM64.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 155KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8a51ece1c4c8bcb8c56ca10cb9d97bff0dfe75052412a8d8d970a5eb6933427b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idmBroker.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\idmBroker.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 153KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 97810e0b3838a7dca94d73a8b9e170107642b064713c084c231de6632cb68a9c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idmvs.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\idmvs.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 20KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a2e28177b51a556742a164955f8b62dcf2bdf848c2f6907fea0c92ee8e4ccddd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            idmwfp.inf

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\Desktop\xxx\Internet Download Manager\idmwfp.inf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a54e0ac05254a464180e30f21a6b26651e7495427353bba9c246ba1d2388e7cc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/760-5293-0x0000000000400000-0x000000000042B000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/1744-445-0x0000000000400000-0x000000000042B000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/1828-547-0x0000000000400000-0x000000000042B000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/1828-930-0x0000000000400000-0x000000000042B000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7186-0x0000000006070000-0x0000000006071000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7206-0x0000000006090000-0x0000000006091000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7230-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7142-0x0000000002F20000-0x0000000003120000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7141-0x000000000E8D0000-0x000000000ED10000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7145-0x0000000003240000-0x0000000003242000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7146-0x0000000003240000-0x0000000003242000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7144-0x0000000003240000-0x0000000003242000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7169-0x0000000006040000-0x0000000006044000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7168-0x0000000006040000-0x0000000006044000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7170-0x0000000003240000-0x0000000003242000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7231-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7185-0x0000000006070000-0x0000000006071000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7184-0x0000000006070000-0x0000000006071000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7183-0x0000000006070000-0x0000000006071000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7182-0x0000000006070000-0x0000000006071000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7187-0x0000000006070000-0x0000000006071000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7181-0x0000000006040000-0x0000000006044000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7180-0x0000000006040000-0x0000000006044000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7179-0x0000000006040000-0x0000000006044000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7178-0x0000000006040000-0x0000000006044000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7177-0x0000000006040000-0x0000000006044000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7176-0x0000000006040000-0x0000000006044000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7175-0x0000000006040000-0x0000000006044000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7174-0x0000000006040000-0x0000000006044000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7173-0x0000000006040000-0x0000000006044000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7172-0x0000000006040000-0x0000000006044000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7171-0x0000000003240000-0x0000000003242000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7188-0x0000000006070000-0x0000000006071000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7189-0x0000000006070000-0x0000000006071000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7190-0x0000000006070000-0x0000000006071000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7194-0x0000000006070000-0x0000000006071000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7207-0x0000000006090000-0x0000000006091000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7215-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7205-0x0000000006090000-0x0000000006091000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7204-0x0000000006090000-0x0000000006091000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7203-0x0000000006090000-0x0000000006091000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7202-0x0000000006090000-0x0000000006091000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7201-0x0000000006090000-0x0000000006091000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7200-0x0000000006090000-0x0000000006091000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7199-0x0000000006090000-0x0000000006091000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7198-0x0000000006090000-0x0000000006091000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7197-0x0000000006090000-0x0000000006091000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7195-0x0000000006070000-0x0000000006071000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7214-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7213-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7211-0x0000000006090000-0x0000000006091000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7210-0x0000000006090000-0x0000000006091000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7209-0x0000000006090000-0x0000000006091000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7208-0x0000000006090000-0x0000000006091000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7229-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7228-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7227-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7226-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7225-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7224-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7223-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7222-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7221-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7220-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7219-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7218-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7217-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/2244-7216-0x00000000060A0000-0x00000000060A1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/5532-1003-0x0000000000400000-0x000000000042B000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6576-5131-0x0000000000400000-0x000000000042B000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            memory/7160-3092-0x0000000000400000-0x000000000042B000-memory.dmp