Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://dev.farmsuch...

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    483s
  • max time network
    486s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260617-de
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260617-delocale:de-deos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/06/2026, 12:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://dev.farmsucht.eu/
  • Sample260622-pvbfeact5x
Score
8/10
discoverypersistenceransomware

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates processes with tasklist 1 TTPs 1 IoCs
    discovery
  • Drops file in Windows directory 6 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 11 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 47 IoCs
  • Suspicious use of SendNotifyMessage 20 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://dev.farmsucht.eu/
    1⤵
    • Drops file in Windows directory
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1956
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2dc,0x7ffb8fb9c188,0x7ffb8fb9c194,0x7ffb8fb9c1a0
      2⤵
        PID:5076
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,10835011375990479935,8135485206787514858,262144 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:2
        2⤵
          PID:2376
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,5787003278423057754,14231360149046511966,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:11
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:2040
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=de --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,16397013626426188003,3348480760325339315,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:13
          2⤵
            PID:1100
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3628,i,15332865211857408100,3257441899407279478,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
            2⤵
              PID:4268
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3664,i,11895285007331330270,1068771865298582599,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
              2⤵
                PID:5520
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,3935359853851611888,982494628410316248,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:1
                2⤵
                  PID:2556
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,12772404641807699045,13569411687674163513,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:9
                  2⤵
                    PID:5080
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,15579061336689532025,9478729097699433661,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
                    2⤵
                      PID:2148
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=de --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,15298481139046478660,14850533964478463040,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
                      2⤵
                        PID:5548
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,10212235218048185121,9072797293439679819,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
                        2⤵
                          PID:5612
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,10212235218048185121,9072797293439679819,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
                          2⤵
                            PID:2640
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6500,i,12736341476437047895,12017667790832102437,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=6596 /prefetch:1
                            2⤵
                              PID:708
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6232,i,4057489239654020432,10406742976890987945,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:1
                              2⤵
                                PID:572
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,626002863596084810,456627003463614256,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
                                2⤵
                                  PID:2368
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,626002863596084810,456627003463614256,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
                                  2⤵
                                    PID:1792
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,8043341034622337605,10126973301752977633,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:14
                                    2⤵
                                      PID:2972
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,8461030081766963705,9478503390094827281,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:14
                                      2⤵
                                        PID:5972
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,17416445530390421028,10526098621729769277,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=6708 /prefetch:14
                                        2⤵
                                          PID:1732
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=de --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,12052300076459401488,3128795454932435298,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:14
                                          2⤵
                                            PID:3820
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4752,i,5280459894239180098,12695013813383433896,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:1
                                            2⤵
                                              PID:1544
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=de --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6732,i,17478549830574749606,5578607578526936036,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:14
                                              2⤵
                                                PID:5548
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=de --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6712,i,18087429103287930338,8676049084960098845,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:14
                                                2⤵
                                                  PID:1448
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4600,i,13046116436962955770,4212788608217410744,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=3912 /prefetch:1
                                                  2⤵
                                                    PID:5792
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6964,i,7926978251577902821,9772042141929335490,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=6936 /prefetch:1
                                                    2⤵
                                                      PID:6128
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=de --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7140,i,4404796708883701735,17744985996213863541,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=7232 /prefetch:14
                                                      2⤵
                                                        PID:6120
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7224,i,10523198157161349193,1344200307843951633,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
                                                        2⤵
                                                          PID:5304
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7744,i,11081546092373963467,4566090620234734314,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=7748 /prefetch:14
                                                          2⤵
                                                            PID:2412
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6992,i,3102089649413476597,3777268038814613585,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=6928 /prefetch:1
                                                            2⤵
                                                              PID:2496
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6976,i,17639075315881815934,8732788329288132719,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=7576 /prefetch:1
                                                              2⤵
                                                                PID:2868
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7120,i,8420308013709072584,11644267182468822920,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=7904 /prefetch:1
                                                                2⤵
                                                                  PID:5784
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=6668,i,699482183366753953,1856300324330979213,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=7692 /prefetch:1
                                                                  2⤵
                                                                    PID:2464
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7080,i,3985997838801289861,761187768853952368,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=7776 /prefetch:1
                                                                    2⤵
                                                                      PID:4344
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8200,i,10934916683039081726,10642975207250837015,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=7940 /prefetch:1
                                                                      2⤵
                                                                        PID:4520
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7768,i,18340404230292631687,2515561340493823436,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=8424 /prefetch:1
                                                                        2⤵
                                                                          PID:1076
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8608,i,8504507399628203629,14461355282467319472,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=8616 /prefetch:1
                                                                          2⤵
                                                                            PID:1860
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8528,i,16945013256742595596,14235785381223044825,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=8612 /prefetch:1
                                                                            2⤵
                                                                              PID:1664
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8788,i,9933685903688734654,3824023569113210466,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=8852 /prefetch:1
                                                                              2⤵
                                                                                PID:5496
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=9016,i,9408282166253333965,3924653334166297744,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=8884 /prefetch:1
                                                                                2⤵
                                                                                  PID:1732
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=9144,i,12179939395518000469,10067346539553834494,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=9176 /prefetch:1
                                                                                  2⤵
                                                                                    PID:6104
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=9164,i,16556559411324017453,8630898359920107754,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=9204 /prefetch:1
                                                                                    2⤵
                                                                                      PID:3260
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=9564,i,11559354968133617244,1853770418154916395,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=9580 /prefetch:1
                                                                                      2⤵
                                                                                        PID:5704
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9648,i,17892537168149231073,11652423611175008863,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=9800 /prefetch:1
                                                                                        2⤵
                                                                                          PID:4960
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=9680,i,7264280658877086844,7760140773157037697,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=9808 /prefetch:1
                                                                                          2⤵
                                                                                            PID:1296
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=9716,i,15450402791549040533,6449009202675958299,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=9820 /prefetch:1
                                                                                            2⤵
                                                                                              PID:1788
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=9732,i,304571673594215147,14337117445705285654,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=9832 /prefetch:1
                                                                                              2⤵
                                                                                                PID:4316
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=9796,i,15651298524844748448,1231285169099652857,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=9852 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:5172
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=9696,i,10838435999503624595,13662425286798853317,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=9784 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:556
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=9728,i,730182667461241781,2443481365628771060,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=10672 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:456
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=10904,i,5980921394697605939,7985943396156108076,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=10920 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:4012
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=11112,i,8151437074093045851,9725041174204772399,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=11076 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:2640
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=11204,i,3186598542409024842,11368276197981463578,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=11236 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:2916
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=11464,i,12286882716379673996,6019194720004751918,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=11480 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:6192
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=7568,i,11514125553001550354,3305004511498147014,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=11072 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:6256
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=11452,i,3338312893522477544,10689777288995648425,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=11644 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:6264
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=11884,i,6967262419049865121,17652221940555203790,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=11872 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:6320
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=11452,i,15892881130312199700,5139912500847457832,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=10852 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:6400
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=10924,i,8191768161567207492,13804705972508447900,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=11444 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:6424
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=12124,i,10176287124466143765,872552919184595073,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=12176 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:6584
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=11440,i,15850781477465571710,1004192744714719,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=12292 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:6632
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=12436,i,15490501655611658754,2673262977493265488,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=12452 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:6724
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=12712,i,11455320718548926697,18416246262609391243,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=12700 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:6836
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=12860,i,2942011260126148282,7977594721626093046,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=12664 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:6988
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=13048,i,10584688433141626259,4958702804663356994,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=13064 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:7004
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=13192,i,8204969553444590579,7758881928167111860,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=13208 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:7020
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=13320,i,10269441872090628397,2617291924871132378,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=13336 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:7036
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=13464,i,14988581749095545402,7350645118914102632,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=13480 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:7052
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=13612,i,10208467902080337795,18200384255816481710,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=13628 /prefetch:1
                                                                                                                                          2⤵
                                                                                                                                            PID:7068
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=13756,i,17422970174699250689,1236938062891120490,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=13772 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:7084
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=12880,i,16465866194533871660,11723375962639823145,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=13980 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:7100
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=12908,i,13903570315386726876,18347943993818822526,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=13988 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:7108
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=12928,i,11650601725474870509,13506033630081705716,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=13984 /prefetch:1
                                                                                                                                                  2⤵
                                                                                                                                                    PID:7116
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=12592,i,2122516238527646234,495176545624353396,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=14052 /prefetch:1
                                                                                                                                                    2⤵
                                                                                                                                                      PID:7124
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=12900,i,2304988175670474283,10194067165365988667,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=14000 /prefetch:1
                                                                                                                                                      2⤵
                                                                                                                                                        PID:7132
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=12888,i,4492364361904603880,12940907609316570217,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=14012 /prefetch:1
                                                                                                                                                        2⤵
                                                                                                                                                          PID:7140
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=12640,i,7694780274667018625,10955288270049209245,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=14032 /prefetch:1
                                                                                                                                                          2⤵
                                                                                                                                                            PID:7148
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=12612,i,5581853613157071777,4143502927633981638,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=14132 /prefetch:1
                                                                                                                                                            2⤵
                                                                                                                                                              PID:7156
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=12620,i,14162911013071756032,3642494056953446774,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=14112 /prefetch:1
                                                                                                                                                              2⤵
                                                                                                                                                                PID:7164
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=12636,i,7284438830514858015,9682213567348984286,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=14072 /prefetch:1
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:1944
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=12628,i,1338203821408012351,12504956824255473619,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=14092 /prefetch:1
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:4924
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=13180,i,5414873911684006440,4620461484371259288,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=15488 /prefetch:1
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:6748
                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=15764,i,8178893683948711633,3881190479302575877,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=15780 /prefetch:1
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:6756
                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=15624,i,18311152183226460424,4411589215901941935,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=15612 /prefetch:1
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:6860
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7284,i,7825057748827990225,7708718395718692437,262144 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=7220 /prefetch:10
                                                                                                                                                                          2⤵
                                                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                          PID:7580
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=9696,i,3314579516599113315,1331485233739129616,2097152 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:1
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:6892
                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=de --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6440,i,17173824682953207956,14317517663552463407,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:14
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:2972
                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,1588177683639295463,15368034264312232038,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:14
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:1280
                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=de --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,12411676342790264559,8766199669255841143,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=12888 /prefetch:14
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:2528
                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,14463708483439214536,5523016087037409233,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=8812 /prefetch:14
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:4260
                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=de --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8352,i,4707742157677948977,13977647730959867945,524288 --field-trial-handle=2212,i,13085808206345613965,17067730213206576016,262144 --variations-seed-version --mojo-platform-channel-handle=8364 /prefetch:14
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:7552
                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                    1⤵
                                                                                                                                                                                      PID:2928
                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                                                                                                                      1⤵
                                                                                                                                                                                        PID:2028
                                                                                                                                                                                      • C:\Windows\System32\rundll32.exe
                                                                                                                                                                                        C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                                                                                        1⤵
                                                                                                                                                                                          PID:7264
                                                                                                                                                                                        • C:\Users\Admin\Downloads\FARMSUCHT.Browser.Setup.2.0.0.exe
                                                                                                                                                                                          "C:\Users\Admin\Downloads\FARMSUCHT.Browser.Setup.2.0.0.exe"
                                                                                                                                                                                          1⤵
                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                          • Modifies registry class
                                                                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                          • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                          PID:6736
                                                                                                                                                                                          • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                                                            "C:\Windows\system32\cmd.exe" /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq FARMSUCHT Browser.exe" /FO csv | "C:\Windows\system32\find.exe" "FARMSUCHT Browser.exe"
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                            PID:7164
                                                                                                                                                                                            • C:\Windows\SysWOW64\tasklist.exe
                                                                                                                                                                                              tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq FARMSUCHT Browser.exe" /FO csv
                                                                                                                                                                                              3⤵
                                                                                                                                                                                              • Enumerates processes with tasklist
                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                              PID:6704
                                                                                                                                                                                            • C:\Windows\SysWOW64\find.exe
                                                                                                                                                                                              "C:\Windows\system32\find.exe" "FARMSUCHT Browser.exe"
                                                                                                                                                                                              3⤵
                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                              PID:7008
                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe"
                                                                                                                                                                                          1⤵
                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                                                          • Drops file in Windows directory
                                                                                                                                                                                          • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                          • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                          • Suspicious use of SendNotifyMessage
                                                                                                                                                                                          PID:7232
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --gpu-preferences=UAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1744,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1736 /prefetch:2
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:6912
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --field-trial-handle=2200,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:11
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:6596
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2512,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:7100
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3164,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:3008
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3512,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:1696
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4552,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:5820
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --gpu-preferences=UAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=4704,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:10
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                            PID:7580
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=3548,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:7792
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4840,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:7948
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4968,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:8044
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=de --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --field-trial-handle=4940,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:12
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:8024
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5524,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:6720
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=3624,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:2744
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5756,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:5300
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=5768,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:2028
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5884,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:1392
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5844,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:6940
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=6196,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:4612
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=6320,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:7616
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=6468,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:3452
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6592,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:6020
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6728,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            PID:7500
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6884,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:2120
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=7020,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=7016 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:2640
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=7148,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=7044 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:2400
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=7288,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=7284 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:5892
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=7476,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=7480 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:4512
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=7608,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=7604 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:4052
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=7740,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=7736 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:260
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=7972,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=7912 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:2592
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=8048,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=8052 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:2924
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=8176,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=8180 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:7424
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=8308,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=8324 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:4204
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=8484,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=8488 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:7052
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=8648,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=8652 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:7064
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=8664,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=8760 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:1800
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=8920,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=8868 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:7476
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=9032,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=9036 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:5408
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=8316,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=9156 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:6508
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=9276,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=8452 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:4468
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=9428,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=9424 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:1888
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=9560,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=9556 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:2448
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=9700,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=9436 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:3740
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=9820,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=9824 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:3260
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=9952,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=9856 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:2544
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=10164,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=10168 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:2716
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=9724,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=9264 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:1316
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=8344,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=9292 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                            PID:4504
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=10564,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=10560 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            PID:3468
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=10668,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=10680 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            PID:6356
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=10804,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=10800 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            PID:4688
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --field-trial-handle=10932,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=10928 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            PID:1452
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --field-trial-handle=11064,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=11060 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            PID:7320
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --field-trial-handle=11196,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=10400 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            PID:8168
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --field-trial-handle=11320,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=11316 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            PID:6960
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=11452,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=11448 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            PID:2980
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --field-trial-handle=8508,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=8624 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            PID:1056
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --field-trial-handle=11692,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=11688 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            PID:8180
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=11816,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=11812 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            PID:5640
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=11948,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=11944 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            PID:2056
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --field-trial-handle=11472,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=11092 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            PID:2968
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --field-trial-handle=6840,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                            PID:6204
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=6832,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=6820 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:7588
                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe
                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\FARMSUCHT Browser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\farmsucht-browser" --app-path="C:\Users\Admin\AppData\Local\Programs\FARMSUCHT Browser\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --field-trial-handle=11888,i,1154123618307079676,6159440867292011053,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=11872 /prefetch:1
                                                                                                                                                                                              2⤵
                                                                                                                                                                                                PID:3456
                                                                                                                                                                                            • C:\Windows\system32\svchost.exe
                                                                                                                                                                                              C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                                                                                                                                                              1⤵
                                                                                                                                                                                                PID:1672
                                                                                                                                                                                              • C:\Windows\System32\oobe\UserOOBEBroker.exe
                                                                                                                                                                                                C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
                                                                                                                                                                                                1⤵
                                                                                                                                                                                                • Drops file in Windows directory
                                                                                                                                                                                                PID:2468
                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
                                                                                                                                                                                                1⤵
                                                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                                                PID:3428
                                                                                                                                                                                              • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                                                                                1⤵
                                                                                                                                                                                                  PID:7312

                                                                                                                                                                                                Network

                                                                                                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                      Replay Monitor

                                                                                                                                                                                                      Loading Replay Monitor...

                                                                                                                                                                                                      Downloads

                                                                                                                                                                                                      0a5fca36-3805-4692-b079-26f1e3288697.tmp
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0a5fca36-3805-4692-b079-26f1e3288697.tmp
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 d8aa703b4029ace9e7c2fa4b122b7b83bb88221e5f9d7766155a28c987fe3436
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      blocklist
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                                                                                      • Size 105KB
                                                                                                                                                                                                      • SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      settings.dat
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                      • Size 280B
                                                                                                                                                                                                      • SHA256 b778cc535cfe9ef8131b9d727f221c5d63c7f15bcd4cd19db345f2c97bdf5594
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      settings.dat
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                      • Size 280B
                                                                                                                                                                                                      • SHA256 b4edbbe62f29386512f6cd1726c675b23fdeee21a26a2896a394ff9b87143167
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      LOG.old
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                                      • Size 352B
                                                                                                                                                                                                      • SHA256 0a0c93d23e92d55cf6ef0e5e1651a598949ca4176e88d1a0ae2e5f3b3fce948d
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      MANIFEST-000001
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                                                                                                                                                      • Size 158B
                                                                                                                                                                                                      • SHA256 249358b1eab901f0b034023569e7f01b1f94c9179591789d99d6f279761d6e1c
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                      • Size 6B
                                                                                                                                                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_00007e
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
                                                                                                                                                                                                      • Size 161KB
                                                                                                                                                                                                      • SHA256 ee2634cf958889d202c63999c79ef6c9249a88e739107118a6bd911e52e24d6d
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_000080
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
                                                                                                                                                                                                      • Size 17KB
                                                                                                                                                                                                      • SHA256 5e7860755e4e8d250dff8b44a59d73472aec8cb985e59759c4e3383d43f143bf
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_000081
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
                                                                                                                                                                                                      • Size 55KB
                                                                                                                                                                                                      • SHA256 c654086e0a26939f965f607435679d19fbea65c2b41b677161d9d317f522c500
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_000083
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
                                                                                                                                                                                                      • Size 40KB
                                                                                                                                                                                                      • SHA256 6710534877b62f10e7db1b692cdf7dffb99ee4da219926787ec05628529c0df0
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_000085
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
                                                                                                                                                                                                      • Size 512KB
                                                                                                                                                                                                      • SHA256 0e169dfd532e84c92cc907faf5b74f77c485659a069564f3fb4df09db5d7d473
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_000087
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
                                                                                                                                                                                                      • Size 512KB
                                                                                                                                                                                                      • SHA256 889414a46a93eda8fbde6dc6c0b2b86a5ddd2d4c74c7e78748f1ad4c50cd9720
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_000088
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
                                                                                                                                                                                                      • Size 256KB
                                                                                                                                                                                                      • SHA256 058eb9674b820893fff9e55cfe93bd695bd889d05f0f90334d3b989715777d83
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_00008a
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
                                                                                                                                                                                                      • Size 19KB
                                                                                                                                                                                                      • SHA256 45c86a68cae71ab990bfd357685caaceb95cd2cf434c8bf3e4b448d34c6e73ee
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_00008f
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
                                                                                                                                                                                                      • Size 32KB
                                                                                                                                                                                                      • SHA256 562abc60ffa4033dd80700bd049aec76503088f07547d0b4940d5d9cf7262b79
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_000098
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                                                                                                                                                                                      • Size 27KB
                                                                                                                                                                                                      • SHA256 fdcf237c280b21cfe55b8037058dc076a6903b58efd93e173d44edbb428082fb
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000a2
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
                                                                                                                                                                                                      • Size 29KB
                                                                                                                                                                                                      • SHA256 2878999ca42446d29f8bc879cf32d28c4946fc3abac8000bfc65c7d4b0272503
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_00010c
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010c
                                                                                                                                                                                                      • Size 16KB
                                                                                                                                                                                                      • SHA256 31b8af5d23addf7e2458d83082c0a19c0a4cad8536722ad119d66091debc7423
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_00010e
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010e
                                                                                                                                                                                                      • Size 18KB
                                                                                                                                                                                                      • SHA256 1fe53f98c65e156f3ba3280eca6e304d7d76491c97346ce56f90911b14df288c
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                      • SHA256 26347a8535b0d9a9a538dd8c4b2ac0425874ff7dd0e77feb6b633a1161687130
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                      • Size 6KB
                                                                                                                                                                                                      • SHA256 e1a02165362aaab8440dc84e0e11936942682a72543ef7e7ae5507a19b77a0cb
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index~RFe59a4e1.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a4e1.TMP
                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                      • SHA256 c2e61fb2a71e139c4e3c48696272e0f56d5634999922ac39da18dad9f1c1ba9c
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      SiteList-Enterprise.json
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                                                      • Size 2B
                                                                                                                                                                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Edge Profile.ico
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                                                      • Size 70KB
                                                                                                                                                                                                      • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      MANIFEST-000001
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_dev.farmsucht.eu_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                      • Size 71B
                                                                                                                                                                                                      • SHA256 29fdef85f6f354ca37f1e8f65996d0d5642b6e8a8c7c9814426949e872e2316e
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      000003.log
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
                                                                                                                                                                                                      • Size 17KB
                                                                                                                                                                                                      • SHA256 40d8b748f3110065d0a9103746aa8db5cb0032a91496d2c4c369503c823839c4
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      LOG.old
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                                                                                      • Size 343B
                                                                                                                                                                                                      • SHA256 e9680121dcdf277ca29ca59dee90892c39d57e58715f87de1198f4fd5ad483f3
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      MANIFEST-000001
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.speedtest.net_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                      • Size 23B
                                                                                                                                                                                                      • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                      • SHA256 2d73799bbdbdec39fd1e43b036f6211290d7dddc2dcd5346fa0645bcb3a01f93
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                      • Size 38KB
                                                                                                                                                                                                      • SHA256 fe3081a88c5f11153f584e7cb30bd98c91d56ea5401ab5a2241a562a44a91c28
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                      • Size 38KB
                                                                                                                                                                                                      • SHA256 ada71e47f99e76d3f0eb03c69af5341d25c943bc3c35b180942bd2605b382077
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      SCT Auditing Pending Reports
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                      • Size 2B
                                                                                                                                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Sdch Dictionaries
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                      • Size 40B
                                                                                                                                                                                                      • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Sdch Dictionaries
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                      • Size 211B
                                                                                                                                                                                                      • SHA256 15051f6f0a7d0e43bbf5b2aaf9bd6ab9280ed0590e1c8b1ccdd9a192f2d08571
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                      • Size 14KB
                                                                                                                                                                                                      • SHA256 197211e941e5ce7cabb155c463c7baf0821ed5485ee6f42ec1108c6c74f79c8f
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                      • SHA256 8593b1f704b5409a7aa6b213718ba7425cdc66fb1a41457bafc5feff785af1a5
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                      • Size 18KB
                                                                                                                                                                                                      • SHA256 d70d8245667bb938485068536767715854f8823f9a1f45cd694e17c7aaabb2fc
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                      • Size 14KB
                                                                                                                                                                                                      • SHA256 7159734583560861a49ed470b39b9f81b6ffd64cf66984c4fc5ec9f5bfac7692
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                      • Size 22KB
                                                                                                                                                                                                      • SHA256 ad1baa03847a89656a2264863c067bdc43636a4dc1d4c5a91666a1b823c08951
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                      • Size 23KB
                                                                                                                                                                                                      • SHA256 24ec1c6b9e2c6677989ae0389eec05247d89109b6ad5f07b2744cb405dbb8614
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                      • Size 37KB
                                                                                                                                                                                                      • SHA256 ccdee747965da8c7f7b5aba140aa1ef7027936ab822b0b96ae96cff08c50d293
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Secure Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                      • Size 27KB
                                                                                                                                                                                                      • SHA256 c753261d579c1646e0346996423a77b171f6f8a54920182e9c6f508ae993921b
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      7b1b59698c1ba902_0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\43282e29-e798-4952-bee0-d777e4e033b6\7b1b59698c1ba902_0
                                                                                                                                                                                                      • Size 62KB
                                                                                                                                                                                                      • SHA256 f2fc51552f99f4738580c300713dfccd05d1ccd5c6dcbb4279756bfd1285f79d
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\43282e29-e798-4952-bee0-d777e4e033b6\index-dir\the-real-index
                                                                                                                                                                                                      • Size 96B
                                                                                                                                                                                                      • SHA256 8945f172c1f9402721dde3f53b3fe49a19e9caf5c3255e64a755a5224301cf63
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\43282e29-e798-4952-bee0-d777e4e033b6\index-dir\the-real-index
                                                                                                                                                                                                      • Size 96B
                                                                                                                                                                                                      • SHA256 435cf8e57b72bc31e7ede683eef09e75fe2a4f9392d0eef5b4c315c2c13d804b
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\43282e29-e798-4952-bee0-d777e4e033b6\index-dir\the-real-index
                                                                                                                                                                                                      • Size 96B
                                                                                                                                                                                                      • SHA256 180ff127b347a129c2515123545c39419f9b8e873be8ef95128c1d1ad7f0df70
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\64539bed-c69a-4a7b-9c03-abf7e20069d0\index-dir\the-real-index
                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                      • SHA256 4e8e79987967f24f075a7ed29bb910c875579c3a18c7596501536532a4458047
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\64539bed-c69a-4a7b-9c03-abf7e20069d0\index-dir\the-real-index
                                                                                                                                                                                                      • Size 96B
                                                                                                                                                                                                      • SHA256 77cda17dbaff60556020666d4b19e2f74133586aec9e5c2de56f7e5041fa92e4
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index~RFe5af917.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\64539bed-c69a-4a7b-9c03-abf7e20069d0\index-dir\the-real-index~RFe5af917.TMP
                                                                                                                                                                                                      • Size 48B
                                                                                                                                                                                                      • SHA256 4691e62f2ab1e6d6001b703ece406d26816e92c042b47e5a6d2f5dee921e762c
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bf0f2bcf-977f-4243-ace4-f010a0a49b81\index-dir\the-real-index
                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                      • SHA256 64ca65d914dab136239a51d3ae7bc1aa521fc283d31d31eb874a7ab868102aed
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bf0f2bcf-977f-4243-ace4-f010a0a49b81\index-dir\the-real-index
                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                      • SHA256 50201862f37b83de66dd5bc4d62120442e4d01c0aa5812053ce56cf09591379d
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ef1b156f-db04-4cfd-bb9d-932ec8d97dd6\index-dir\the-real-index
                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                      • SHA256 cae7fbc2502f75303ae7ae0da25e5d740570814ce12eddc9ff66b03f9ae31c29
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ef1b156f-db04-4cfd-bb9d-932ec8d97dd6\index-dir\the-real-index
                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                      • SHA256 23687d8a5a43f08e2ff958c3a0b744359f36a6c45699b91b8838cc3bf6e67f7b
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ef1b156f-db04-4cfd-bb9d-932ec8d97dd6\index-dir\the-real-index
                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                      • SHA256 9b999bf289e2dd5595538c629cc210291ac183d9e6fec8fc32231a5ac3928181
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index~RFe5a2c80.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ef1b156f-db04-4cfd-bb9d-932ec8d97dd6\index-dir\the-real-index~RFe5a2c80.TMP
                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                      • SHA256 157db426086c1f08172068c3fe0b27ff1f65252ffe6ab1fdc5e2fd1b55eab498
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                      • Size 481B
                                                                                                                                                                                                      • SHA256 54f1bae22596a1a8ed650b3da6012b8aa707a64680284e09c450f46237553844
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                      • Size 371B
                                                                                                                                                                                                      • SHA256 f588cea6e0e9774d1d6a289be396bd4e929b2903ae929eac9bd2976aa3048358
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                      • Size 476B
                                                                                                                                                                                                      • SHA256 b20a11d016489f5d1867efc2102ae7a680b13f16463de1c5fad0380b916aba3c
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                      • Size 476B
                                                                                                                                                                                                      • SHA256 24307f5b0781185c9f3e2ec6e389d5793e0a8ee76a8cf658b0fbd504b10e250b
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      ba23d8ecda68de77_0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
                                                                                                                                                                                                      • Size 117KB
                                                                                                                                                                                                      • SHA256 7ef992bd46d5c65f82d99ce90fbd2f238ffa2abd8791a65d3963d3a34a232051
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                      • SHA256 0d69947528532a3a18897eae20644037f14ee6af66c95ecdeffa254e40d626ba
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index~RFe5a96a4.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a96a4.TMP
                                                                                                                                                                                                      • Size 48B
                                                                                                                                                                                                      • SHA256 2e80901e86e83dbf1160cc3c11edda3c5aa42ea17caaa58f70dc8d16acb4ad2e
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                      • SHA256 d786755abb080ed372837bd70417c295160bc9b392dce2cfc47c7cba908c895a
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      sync_diagnostic.log
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                                      • Size 4KB
                                                                                                                                                                                                      • SHA256 220d62a2a64341061a76b56d99e6f8f6fbcd86d36c58faf75964301b38cbe14a
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      CURRENT
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                                                                                                                                                                      • Size 16B
                                                                                                                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      MANIFEST-000001
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                                                                                                                                                                      • Size 41B
                                                                                                                                                                                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      c962e33a-7a9d-452f-bdba-d1831e1f6756.tmp
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c962e33a-7a9d-452f-bdba-d1831e1f6756.tmp
                                                                                                                                                                                                      • Size 107KB
                                                                                                                                                                                                      • SHA256 2d15d1a30785666c49831a5f576a862cbcf96e20e769a85459f93b023a1fb8d0
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      OperationConfig
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                                                                                      • Size 22KB
                                                                                                                                                                                                      • SHA256 e482e0287f5d53c3ba44f707953029fd78a279155339825c80835c329a77ac98
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      OperationConfig~RFe5a3e62.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a3e62.TMP
                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                      • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Local State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                      • Size 38KB
                                                                                                                                                                                                      • SHA256 ef40172a9ac35d60aeff0c7339705fd7cce4b33e52579e6c19103290c798266f
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Local State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                      • Size 38KB
                                                                                                                                                                                                      • SHA256 29736c00c4884845ec643e37705515e9dc13a20a0b2d708c7ad81727bb11ddf5
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Local State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                      • Size 32KB
                                                                                                                                                                                                      • SHA256 d9fc884e6ac2684412b0270370892f354ed64ec4900b216a565f863f5d45e084
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Local State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                      • Size 40KB
                                                                                                                                                                                                      • SHA256 d2c6a2a26b8a6eea7b11775eeb772a220ac4aa0f72c54d466d8bdca0edbe89bc
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Local State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                      • Size 34KB
                                                                                                                                                                                                      • SHA256 242ea24db1406f3384c45a1c9b87167c91881cc0ceb0774e887a6f35e8177412
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 f01055af217fab78ce39c9ab7b96fda886d9111999790738cfd952f8075499a3
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 a62351ffe306da1f45b999a40833e2ba4408b8b405c2d6eb968047f4beb19246
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter~RFe5a690c.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a690c.TMP
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 bd778391fa359d71ffe6e3075149e3e7d1a06cbf1129a96021191d8704501daf
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      22a160eb-e826-43d9-824f-6d9feed9c0eb.tmp
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\22a160eb-e826-43d9-824f-6d9feed9c0eb.tmp
                                                                                                                                                                                                      • Size 13B
                                                                                                                                                                                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      LICENSE.electron.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\LICENSE.electron.txt
                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                      • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      LICENSES.chromium.html
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\LICENSES.chromium.html
                                                                                                                                                                                                      • Size 9.0MB
                                                                                                                                                                                                      • SHA256 b1ac2fb5c8f0407ec73ffbfcff46aa634a3acf034eb10ef3f69cf483f43e591e
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      chrome_100_percent.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\chrome_100_percent.pak
                                                                                                                                                                                                      • Size 147KB
                                                                                                                                                                                                      • SHA256 14a6a393c60f62df9bc1036e98346cd557e0ae73e8c7552d163fa64da77804d7
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      chrome_200_percent.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\chrome_200_percent.pak
                                                                                                                                                                                                      • Size 222KB
                                                                                                                                                                                                      • SHA256 20c93f2cfd69f3249cdfd46f317b37a9432ecc0de73323d24ecf65ce0f3c1bb6
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      d3dcompiler_47.dll
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\d3dcompiler_47.dll
                                                                                                                                                                                                      • Size 4.7MB
                                                                                                                                                                                                      • SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      ffmpeg.dll
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\ffmpeg.dll
                                                                                                                                                                                                      • Size 2.8MB
                                                                                                                                                                                                      • SHA256 94efdb523162f7a55884f6bc423012f3dd046f85504deccfeef59603307db71b
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      icudtl.dat
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\icudtl.dat
                                                                                                                                                                                                      • Size 10.0MB
                                                                                                                                                                                                      • SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      libEGL.dll
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\libEGL.dll
                                                                                                                                                                                                      • Size 473KB
                                                                                                                                                                                                      • SHA256 c9f1fb6b4ded3404ad29e629874ff05852f48f82ac33ba606847cac0ebef79e4
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      libGLESv2.dll
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\libGLESv2.dll
                                                                                                                                                                                                      • Size 8.0MB
                                                                                                                                                                                                      • SHA256 c636de2892cb651220331734ecc578003dfe31f6ed528ffffe66370b2114b086
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      af.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\af.pak
                                                                                                                                                                                                      • Size 509KB
                                                                                                                                                                                                      • SHA256 5bd93621de82965b8a7d425660d4afef8102d058e48e8b42e0a45ea2b32ab2fb
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      am.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\am.pak
                                                                                                                                                                                                      • Size 822KB
                                                                                                                                                                                                      • SHA256 d759c21b9569163629f2443e69f274ffdb3b1417eaa2b72d1dacc9a31819dbf3
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      ar.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\ar.pak
                                                                                                                                                                                                      • Size 901KB
                                                                                                                                                                                                      • SHA256 3883cff8aacb76e0ee906eb27eb5e5437674bb9af85bce1087fb49667d0c47d1
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      bg.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\bg.pak
                                                                                                                                                                                                      • Size 938KB
                                                                                                                                                                                                      • SHA256 c87083562fe57e1168aaed1f432e74372919c2008aa690ca6ce719f1787d9522
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      bn.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\bn.pak
                                                                                                                                                                                                      • Size 1.2MB
                                                                                                                                                                                                      • SHA256 09dc06e2f6fbf4089cad32a23151cdc8fd873c17def2e85eaad31353743aac70
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      ca.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\ca.pak
                                                                                                                                                                                                      • Size 571KB
                                                                                                                                                                                                      • SHA256 17db67b5c28354db5bfa08697fae29c3555728a6409a653e0f136216c2d05e6d
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      cs.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\cs.pak
                                                                                                                                                                                                      • Size 589KB
                                                                                                                                                                                                      • SHA256 09483aa859d024639f5bd2325007b4d2a35ce339231e051a943e1f0eed1b3336
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      da.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\da.pak
                                                                                                                                                                                                      • Size 533KB
                                                                                                                                                                                                      • SHA256 19d135158a35608e646299defa1647743132a9436c0411ccce2b595ef9738b45
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      de.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\de.pak
                                                                                                                                                                                                      • Size 569KB
                                                                                                                                                                                                      • SHA256 954451a308b8c451f080ab628f53a16e6638c201b4d79a094ac5f3ae263c50e2
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      el.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\el.pak
                                                                                                                                                                                                      • Size 1.0MB
                                                                                                                                                                                                      • SHA256 627dfa327bd3971ae2f26048c247fcbeaa33b3301c3b78f72ec3f199a365ca2d
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      en-GB.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\en-GB.pak
                                                                                                                                                                                                      • Size 463KB
                                                                                                                                                                                                      • SHA256 811cc30238e961c852267a897c579d6cbebfb957fde9be662d23e4ad989ec894
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      en-US.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\en-US.pak
                                                                                                                                                                                                      • Size 467KB
                                                                                                                                                                                                      • SHA256 de60674fcae1e9395cb9a2a2987dfbd97defba59dcf7e5e61a452602e38179c0
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      es-419.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\es-419.pak
                                                                                                                                                                                                      • Size 562KB
                                                                                                                                                                                                      • SHA256 99d5177b232925a00917b191ac358d88cd8e9a3eed73ed456ac4a62928345b49
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      es.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\es.pak
                                                                                                                                                                                                      • Size 562KB
                                                                                                                                                                                                      • SHA256 d66d7ac73c09edc6dd00dcb1b414bb662de6b588c06621764eb2e212db80fe9e
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      et.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\et.pak
                                                                                                                                                                                                      • Size 511KB
                                                                                                                                                                                                      • SHA256 7b17cf34b75cbcf65476af00a0751f55f77ade6caa68513ab3629a5254742b9c
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      fa.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\fa.pak
                                                                                                                                                                                                      • Size 836KB
                                                                                                                                                                                                      • SHA256 00a9c5e4915408b948667b7b5c5715fc3fc8e6d628210bf9a341a55e86b6dfd3
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      fi.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\fi.pak
                                                                                                                                                                                                      • Size 522KB
                                                                                                                                                                                                      • SHA256 c2e954d937baa4a8ad382d064d8c6b0ce2fc3375c576dde7b8f8adccb83e4bc5
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      fil.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\fil.pak
                                                                                                                                                                                                      • Size 590KB
                                                                                                                                                                                                      • SHA256 70e5b30013027e3406ee0a9953bb34e27229d3e0ff60758a7c53837336966833
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      fr.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\fr.pak
                                                                                                                                                                                                      • Size 609KB
                                                                                                                                                                                                      • SHA256 fae930c71e897b3a6275d526384e9a5ac62fedc562b76904dd108b55b26f1246
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      gu.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\gu.pak
                                                                                                                                                                                                      • Size 1.2MB
                                                                                                                                                                                                      • SHA256 391a825c8f33718bc87ba6d8407e7fbe951b0fe554d0db689a6762eed38f3006
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      he.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\he.pak
                                                                                                                                                                                                      • Size 734KB
                                                                                                                                                                                                      • SHA256 1325b70d40e5d5019276c50b4777451875f6dda15e9bb4e23df0de404a2bf76a
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      hi.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\hi.pak
                                                                                                                                                                                                      • Size 1.2MB
                                                                                                                                                                                                      • SHA256 92b057a1e57bef223a3fd8c4789c0b8b94825822a07c29b2e7c057853cc627ef
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      hr.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\hr.pak
                                                                                                                                                                                                      • Size 567KB
                                                                                                                                                                                                      • SHA256 5df6daf8c34c3e74eea274c8d608b3a177f4d6070a3bfb481cec19ae853b58dc
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      hu.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\hu.pak
                                                                                                                                                                                                      • Size 611KB
                                                                                                                                                                                                      • SHA256 a09f07ffc112438f9e79b88907b7853de161bbb91a807af96f57d01339e365bf
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      id.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\id.pak
                                                                                                                                                                                                      • Size 505KB
                                                                                                                                                                                                      • SHA256 8bd54bf3b8cd369b4a92804c160bd3d2b888cc0a716d910c7a324569777f4e95
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      it.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\it.pak
                                                                                                                                                                                                      • Size 554KB
                                                                                                                                                                                                      • SHA256 d881daf64575dab20072130995d602d21381ec4536b7c57d862b511fc7b34e63
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      ja.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\ja.pak
                                                                                                                                                                                                      • Size 675KB
                                                                                                                                                                                                      • SHA256 c772f5030a7fa6437e8ec2161694566c8e22319b68c2a2d4777eea7b327f8142
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      kn.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\kn.pak
                                                                                                                                                                                                      • Size 1.3MB
                                                                                                                                                                                                      • SHA256 29e2613bc55ebf10dc0e6318233aaac0b39428a3af0b1e0867805ba60194e88e
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      ko.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\ko.pak
                                                                                                                                                                                                      • Size 572KB
                                                                                                                                                                                                      • SHA256 6b32ceb4d71dc8fbebde2f4ca3a543dbc4963525345c9298e8daaa3279663340
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      lt.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\lt.pak
                                                                                                                                                                                                      • Size 615KB
                                                                                                                                                                                                      • SHA256 1334d488e5b1a8357cb480508c8f6ce2ad211a9997f347e9ed1b9f712c60f74d
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      lv.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\lv.pak
                                                                                                                                                                                                      • Size 614KB
                                                                                                                                                                                                      • SHA256 2486f896cf18c55462835ad2f363866995cbb992d5d9d39239b569727afa58b0
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      ml.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\ml.pak
                                                                                                                                                                                                      • Size 1.4MB
                                                                                                                                                                                                      • SHA256 3335642c3f0c852beb595889d8a86431001133cb8c14c45bba688b764008b1d0
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      mr.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\mr.pak
                                                                                                                                                                                                      • Size 1.1MB
                                                                                                                                                                                                      • SHA256 39b3080a83994129a5dd5222dce549640bf51de644da13f2769e836126b7b782
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      ms.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\ms.pak
                                                                                                                                                                                                      • Size 529KB
                                                                                                                                                                                                      • SHA256 0615106f5c7adbeccd9bb1ea207c8bbdf5e917499e3860103a3fa60069b835b2
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      nb.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\nb.pak
                                                                                                                                                                                                      • Size 513KB
                                                                                                                                                                                                      • SHA256 114ca3cf8ba38df9885e54feced2db9f25c789c12fbf41ded07e58ffeb7d852b
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      nl.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\nl.pak
                                                                                                                                                                                                      • Size 530KB
                                                                                                                                                                                                      • SHA256 f7577370e356b5d1868b0faee46a3030aad4d7a72ff068e8910972862f7e43be
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      pl.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\pl.pak
                                                                                                                                                                                                      • Size 591KB
                                                                                                                                                                                                      • SHA256 4f12dccb61513bad8306c4f8865daf59d5f666c3540c81bb9c56ef52a972819f
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      pt-BR.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\pt-BR.pak
                                                                                                                                                                                                      • Size 555KB
                                                                                                                                                                                                      • SHA256 74f1be3440a80f55b028cb3c42f291fe41c1626267603d94f57fdececeda3358
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      pt-PT.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\pt-PT.pak
                                                                                                                                                                                                      • Size 558KB
                                                                                                                                                                                                      • SHA256 72d9a069944ccf2ac4a6ef44110a2e3e70e8aa550664bc70445947ff72847038
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      ro.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\ro.pak
                                                                                                                                                                                                      • Size 579KB
                                                                                                                                                                                                      • SHA256 432c9424a471857301b724035c973ad009502a7dec2a9df95ccfa73fc46dd0f9
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      ru.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\ru.pak
                                                                                                                                                                                                      • Size 952KB
                                                                                                                                                                                                      • SHA256 d9dd48e68d20de6d90f8ae074b4f0f94ad8a9a9fcf20fb86a9a2a41caa618ea5
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      sk.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\sk.pak
                                                                                                                                                                                                      • Size 598KB
                                                                                                                                                                                                      • SHA256 99ed2b13a2804a399a6f4bd5e5608221ffb5874229dea14c33ceb24d99dcbbea
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      sl.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\sl.pak
                                                                                                                                                                                                      • Size 574KB
                                                                                                                                                                                                      • SHA256 d6a8d1e4539dc08fc4dd6ac5a048dc20047b6f202103e3782ce59e3f2d908696
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      sr.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\sr.pak
                                                                                                                                                                                                      • Size 884KB
                                                                                                                                                                                                      • SHA256 de79d880a33f7ba3e5cd8ae457321671582e8fe513eb4e6f5b9e257f6fd3581d
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      sv.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\sv.pak
                                                                                                                                                                                                      • Size 516KB
                                                                                                                                                                                                      • SHA256 298cadec1174abc1b918bce83b22a09835cf8dcba87a3438dbe114bbc0463bd9
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      sw.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\sw.pak
                                                                                                                                                                                                      • Size 543KB
                                                                                                                                                                                                      • SHA256 c39c3ada455757bfcaecc3d80652e79201d2264578d42d221c52d7c50a601b0e
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      ta.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\ta.pak
                                                                                                                                                                                                      • Size 1.4MB
                                                                                                                                                                                                      • SHA256 c66ce9d65f8691cc431db79178e77bc615bc1f212b27a754d395e5c8adc0fe13
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      te.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\te.pak
                                                                                                                                                                                                      • Size 1.3MB
                                                                                                                                                                                                      • SHA256 4d9ba6b2727f5f62d90dd45019c68137f3d55efc23a85f62b4fa52ece972a073
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      th.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\th.pak
                                                                                                                                                                                                      • Size 1.1MB
                                                                                                                                                                                                      • SHA256 77209d15decca546704f621bf4e8d9269c56add000c057c568d0fe977c447e21
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      tr.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\tr.pak
                                                                                                                                                                                                      • Size 554KB
                                                                                                                                                                                                      • SHA256 df9220e39703440ea7c9d9b74796ab5196fdd0ce7b5953af8813567f39ff500f
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      uk.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\uk.pak
                                                                                                                                                                                                      • Size 952KB
                                                                                                                                                                                                      • SHA256 b76695b9352440d27c0319f59cd66df2d8d76eb1162d5f78a8374748562ad210
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      ur.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\ur.pak
                                                                                                                                                                                                      • Size 831KB
                                                                                                                                                                                                      • SHA256 78799d1065fe84bc64c8c851d5457639172830516ee5c74f08e210973908770e
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      vi.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\vi.pak
                                                                                                                                                                                                      • Size 658KB
                                                                                                                                                                                                      • SHA256 55bbd8fed3330da92aee877fb18640cf7c6391d7a6c6bb5aa2d072b4800d3ac4
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      zh-CN.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\zh-CN.pak
                                                                                                                                                                                                      • Size 473KB
                                                                                                                                                                                                      • SHA256 67e96bfc54394701cb91e112bb07b7b7042ce9f285db3332a19476af566444f6
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      zh-TW.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\locales\zh-TW.pak
                                                                                                                                                                                                      • Size 468KB
                                                                                                                                                                                                      • SHA256 ed372b000597fce75c14edd18ccad1c99e2100be884b58a7e7498488163f2554
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      resources.pak
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\resources.pak
                                                                                                                                                                                                      • Size 5.4MB
                                                                                                                                                                                                      • SHA256 c8cea345bb0b6878b329c9ffa0a1d0e99036bca70ba40ac7be5842ac3ffe45d6
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      app.asar
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\resources\app.asar
                                                                                                                                                                                                      • Size 637KB
                                                                                                                                                                                                      • SHA256 98f21285943e5270453ed2e929bdc0f038a0b0cfbc3c47e52c746b216aae6d8d
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      elevate.exe
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\resources\elevate.exe
                                                                                                                                                                                                      • Size 105KB
                                                                                                                                                                                                      • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      icon.ico
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\resources\resources\icon.ico
                                                                                                                                                                                                      • Size 165KB
                                                                                                                                                                                                      • SHA256 10eefc1d74673fb0629e80ef7aefbbf1207611b333115e7c0e0fa939561bed77
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      icon.png
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\resources\resources\icon.png
                                                                                                                                                                                                      • Size 104KB
                                                                                                                                                                                                      • SHA256 5eafb2ef5cc6ad5b0c43880e4b1b3989aa3c1ef8d05db4ee64f546bb8605f317
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      snapshot_blob.bin
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\snapshot_blob.bin
                                                                                                                                                                                                      • Size 306KB
                                                                                                                                                                                                      • SHA256 012485d0f26435a42f27c1852433e18d065952c8290b426b5e3ac12286ad8fe8
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      v8_context_snapshot.bin
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\v8_context_snapshot.bin
                                                                                                                                                                                                      • Size 650KB
                                                                                                                                                                                                      • SHA256 f4bf1406c6e521f98dd39a2ceb6d81a8c0bf35055f062bdd708d98c53cd82536
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      vk_swiftshader.dll
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\vk_swiftshader.dll
                                                                                                                                                                                                      • Size 5.2MB
                                                                                                                                                                                                      • SHA256 a4c0d966165bbc827c8ed00ab4ecd4a611d17872f6c2beacdd1ffa39dd08f275
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      vk_swiftshader_icd.json
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\vk_swiftshader_icd.json
                                                                                                                                                                                                      • Size 106B
                                                                                                                                                                                                      • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      vulkan-1.dll
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\7z-out\vulkan-1.dll
                                                                                                                                                                                                      • Size 874KB
                                                                                                                                                                                                      • SHA256 36d6a57e7f6bad5a82c096fa21a2e0c1e2b27801891c0f5f3319de18b4c1cd8b
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      StdUtils.dll
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\StdUtils.dll
                                                                                                                                                                                                      • Size 100KB
                                                                                                                                                                                                      • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      WinShell.dll
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsf4A84.tmp\WinShell.dll
                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                      • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                      • SHA256 531df854268fdf67b739ea53fb35fabd897ebf96ff4a606dcddede239e205665
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      data_0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\GPUCache\data_0
                                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      data_1
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\GPUCache\data_1
                                                                                                                                                                                                      • Size 264KB
                                                                                                                                                                                                      • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      data_2
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\GPUCache\data_2
                                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      data_3
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\GPUCache\data_3
                                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Network\Network Persistent State
                                                                                                                                                                                                      • Size 636B
                                                                                                                                                                                                      • SHA256 64b54e5e38a49ebdb3654d95670630623ccc81f1f8c9e6ddf88362ab9c9a1598
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Network\Network Persistent State
                                                                                                                                                                                                      • Size 555B
                                                                                                                                                                                                      • SHA256 9ccc959836ad5161530681d623f447c7619c7fc1891afc16bdb7f8abb0e12525
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Network\Network Persistent State
                                                                                                                                                                                                      • Size 59B
                                                                                                                                                                                                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      TransportSecurity
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Network\TransportSecurity
                                                                                                                                                                                                      • Size 357B
                                                                                                                                                                                                      • SHA256 87a4a5049ab0b426446d02462a033d15bc890ea38a322491d33068b4471467f9
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      TransportSecurity~RFe5e9529.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Network\TransportSecurity~RFe5e9529.TMP
                                                                                                                                                                                                      • Size 189B
                                                                                                                                                                                                      • SHA256 9d34ee806d0c2e3813de72328f937275b4a65b9889a99b40c47c06eb134356b7
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_000001
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\farmsucht\Cache\Cache_Data\f_000001
                                                                                                                                                                                                      • Size 6.5MB
                                                                                                                                                                                                      • SHA256 076a470700dbd0aa62bb8b3d24c34e1340bdfe83cbbcfc035ce972f23c140400
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_000033
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\farmsucht\Cache\Cache_Data\f_000033
                                                                                                                                                                                                      • Size 73KB
                                                                                                                                                                                                      • SHA256 91f9f6e870f94dcf0add22ffa5ab68eb7bf5a100da53b04da61563a22326556b
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_00003c
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\farmsucht\Cache\Cache_Data\f_00003c
                                                                                                                                                                                                      • Size 21KB
                                                                                                                                                                                                      • SHA256 bb915f6e3e29924292b507c72c064b60c4f82b3f97ae287747dae1535bf82e9f
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\farmsucht\Network\Network Persistent State
                                                                                                                                                                                                      • Size 554B
                                                                                                                                                                                                      • SHA256 a93b97ed021ee152d44f0367ad6cd2b11d13bdcd94299ac37852c3f1596d4141
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\farmsucht\Network\Network Persistent State
                                                                                                                                                                                                      • Size 635B
                                                                                                                                                                                                      • SHA256 e95f34066fb2c505bdc21945cbedd198cdf691c300111727646eef2cc0f75835
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      TransportSecurity
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\farmsucht\Network\TransportSecurity
                                                                                                                                                                                                      • Size 189B
                                                                                                                                                                                                      • SHA256 a84ac4788f21de43ab87280a7ad05388ef60bdee7e6ce16a65b393f965966343
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      TransportSecurity
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\farmsucht\Network\TransportSecurity
                                                                                                                                                                                                      • Size 5KB
                                                                                                                                                                                                      • SHA256 1c8aa9b013d85a370ac388600c06c89aa3a3e534f60d842a770c51b2c6bda960
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      TransportSecurity
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\farmsucht\Network\TransportSecurity
                                                                                                                                                                                                      • Size 357B
                                                                                                                                                                                                      • SHA256 f28f772e2489ee23c62070ba96036202804a0f9ae17a6dafe36dfe030c4f10cd
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      TransportSecurity
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\farmsucht\Network\TransportSecurity
                                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                                      • SHA256 74693cb18ba8fbf3c5ff732999266e44f402a5ea8d06ed33cf56117ecc5004d3
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_000066
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Cache\Cache_Data\f_000066
                                                                                                                                                                                                      • Size 55KB
                                                                                                                                                                                                      • SHA256 c0b1c3c6995c24eabd1a6fcc4f00523e022b546cf1fa4fce6c30d04763244d1b
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                      • Size 4KB
                                                                                                                                                                                                      • SHA256 3813d06b6f8e0329696eb371bfde036d8a02dbbfc4bfff2cc27bfc4798eadfab
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index~RFe5e4e7c.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Code Cache\js\index-dir\the-real-index~RFe5e4e7c.TMP
                                                                                                                                                                                                      • Size 48B
                                                                                                                                                                                                      • SHA256 eb4f584a07a6ceb13bad176d082618dcc51e48f30b25d94791f959e0cc591798
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      0151d507-7ca4-4868-b3d9-7d1bbf7906fa.tmp
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Network\0151d507-7ca4-4868-b3d9-7d1bbf7906fa.tmp
                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                      • SHA256 412845165d96b6b56a2f204072859939d14aedf427cb9a1f60ad02107ecad51c
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Network\Network Persistent State
                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                      • SHA256 43a31e65b9f8287cad12ea330601955d29d5979d2795c0d8e2c77f35aabb0816
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      TransportSecurity
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Network\TransportSecurity
                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                      • SHA256 e33176ea177f4e42b36bf1ee757d32b0c52d8175324951687d2936e4080749e0
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      TransportSecurity
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Network\TransportSecurity
                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                      • SHA256 5e020e30fec88bcd149158aee78c7575eac62e1d7e5bb995ad8d4e1f42f5c657
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      TransportSecurity
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Network\TransportSecurity
                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                      • SHA256 88c44fb0ec7d34723080076f1c768749be3b589bc537deb788078960e12a5676
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      TransportSecurity
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Network\TransportSecurity
                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                      • SHA256 7774e3e32a60606f1879539bdf943c5085f5fbebdd688a067224e38a416f001b
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      TransportSecurity
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Network\TransportSecurity
                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                      • SHA256 69bfd1996ec807447e32e73725128d1dbac6a7c1515fcf59095d0f1dc69d7e0c
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      TransportSecurity~RFe5e1710.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Network\TransportSecurity~RFe5e1710.TMP
                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                      • SHA256 30519662b63f79f9f9201e270c5d475026632c62189771d561b0f8d4a6bb1bca
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\1418ed1a-7ec9-46d1-bbbe-d53328488a3a\index-dir\the-real-index
                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                      • SHA256 74c854c26a2ae784d73470cb8557d8e4f7dbb3d4507c685c9520abe6cac04ddf
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\1418ed1a-7ec9-46d1-bbbe-d53328488a3a\index-dir\the-real-index
                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                      • SHA256 255217c015b0d1b8a0c2f7e275789c92e1568a12be534d0a8a378be913b81dcb
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\1418ed1a-7ec9-46d1-bbbe-d53328488a3a\index-dir\the-real-index
                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                      • SHA256 9585a7ca654bad1b46252b0841e122e90bb1e7fb130e39552eb14935f575cd60
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index~RFe5e1c11.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\1418ed1a-7ec9-46d1-bbbe-d53328488a3a\index-dir\the-real-index~RFe5e1c11.TMP
                                                                                                                                                                                                      • Size 48B
                                                                                                                                                                                                      • SHA256 4fd74f52fbb0690df2a89f7f4283516137879d160c8d3888ac7c29d14910b9e8
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index~RFe5fd02a.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\1418ed1a-7ec9-46d1-bbbe-d53328488a3a\index-dir\the-real-index~RFe5fd02a.TMP
                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                      • SHA256 cc750e16e64498f2ebc881601b0a348e1506f663bf080a34fda3490d504a5326
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt
                                                                                                                                                                                                      • Size 121B
                                                                                                                                                                                                      • SHA256 8150c0730dc9c0fb7cc17c291aa5a6c7d447b9f4dd99071852e388d98e26d3c6
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt
                                                                                                                                                                                                      • Size 121B
                                                                                                                                                                                                      • SHA256 476fbd71e98e9416af41b13050aee5fd59d88c7adf66c3809d51b0acfe7564e6
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt~RFe5e1c50.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt~RFe5e1c50.TMP
                                                                                                                                                                                                      • Size 127B
                                                                                                                                                                                                      • SHA256 71b2d79792f07eca448549f3af69a853e8af1b3ee6dac1ffcf8622ff886a1439
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      2cc80dabc69f58b6_0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Service Worker\ScriptCache\2cc80dabc69f58b6_0
                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                      • SHA256 bf06d1f2ac9896ef1115a8f5ba49ff0fae44a87c6d831b814f06f3b8816aa5f9
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      4cb013792b196a35_0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Service Worker\ScriptCache\4cb013792b196a35_0
                                                                                                                                                                                                      • Size 15KB
                                                                                                                                                                                                      • SHA256 b775b45576ce5e00a35ba4d0ddcb032561d32248c0ac96570ed53f7ca83866e9
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      67a473248953641b_0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Service Worker\ScriptCache\67a473248953641b_0
                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                      • SHA256 90baf9a9a8e084e50beea5ca700d49b29e11b2ccbbc66d8e5147c84b413675b8
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      ba23d8ecda68de77_0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Service Worker\ScriptCache\ba23d8ecda68de77_0
                                                                                                                                                                                                      • Size 4KB
                                                                                                                                                                                                      • SHA256 129b2c135e0a6de4a322df95bbbe22c2c950d6d90d3aa97ab62ef8c2e53e56fa
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f1cdccba37924bda_0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Service Worker\ScriptCache\f1cdccba37924bda_0
                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                      • SHA256 59c24ead406dac9fdafca7ec830e5e971280a8f0f6cb184e15d247ad8e0f41c4
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                      • Size 168B
                                                                                                                                                                                                      • SHA256 5c719e16bd130a8e71f4add025a82567283bc6f3316503ae7e6c90026d86c8d5
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index~RFe5e1b94.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\Service Worker\ScriptCache\index-dir\the-real-index~RFe5e1b94.TMP
                                                                                                                                                                                                      • Size 48B
                                                                                                                                                                                                      • SHA256 15a212f3b084ca4ba6c672ce3e049e813fa42ed2917a93324387900197be5eb2
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      c8832dc3-ccd6-4267-90fb-1f7a7eb80ae0.tmp
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Partitions\social\c8832dc3-ccd6-4267-90fb-1f7a7eb80ae0.tmp
                                                                                                                                                                                                      • Size 83B
                                                                                                                                                                                                      • SHA256 a72150ccc318778081bee9c4d5f2d2b33e32aa1d87b12ef97d850ab5647c4792
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\farmsucht-browser\Shared Dictionary\cache\index
                                                                                                                                                                                                      • Size 24B
                                                                                                                                                                                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      memory/6912-3626-0x000001E2D82C0000-0x000001E2D82C8000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/6912-3640-0x000001E2D8710000-0x000001E2D8714000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/6912-3618-0x000001E2D82A0000-0x000001E2D82A1000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/6912-3619-0x000001E2D82B0000-0x000001E2D82B5000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/6912-3620-0x000001E2D82A0000-0x000001E2D82AA000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/6912-3622-0x000001E2D82C0000-0x000001E2D82C2000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/6912-3623-0x000001E2D82B0000-0x000001E2D82B4000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/6912-3633-0x000001E2D86E0000-0x000001E2D86EB000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/6912-3632-0x000001E2D86F0000-0x000001E2D86F6000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/6912-3637-0x000001E2D8700000-0x000001E2D8702000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/6912-3641-0x000001E2D8700000-0x000001E2D8708000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/6912-3625-0x000001E2D86E0000-0x000001E2D86E4000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/6912-3638-0x000001E2D86F0000-0x000001E2D86F4000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/7100-2257-0x00007FFBB0320000-0x00007FFBB0321000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/7100-2258-0x00007FFBB0550000-0x00007FFBB0551000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/7580-2522-0x000001C969CC0000-0x000001C969CC1000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/7580-2523-0x000001C969CC0000-0x000001C969CC1000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/7580-2516-0x000001C969CC0000-0x000001C969CC1000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/7580-2521-0x000001C969CC0000-0x000001C969CC1000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/7580-2525-0x000001C969CC0000-0x000001C969CC1000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/7580-2524-0x000001C969CC0000-0x000001C969CC1000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/7580-2514-0x000001C969CC0000-0x000001C969CC1000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/7580-2520-0x000001C969CC0000-0x000001C969CC1000-memory.dmp
                                                                                                                                                                                                      Download