Resubmissions

23/10/2026, 16:18

261023-tsb2dacw7w10

23/10/2026, 16:16

261023-tq64qscw6y

Analysis

  • user interaction
    yes
  • max time kernel
    1331s
  • max time network
    1363s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/10/2026, 16:18

General

  • Target
    camtasia.exe
  • Size 306.2MB
  • Sample261023-tsb2dacw7w
  • SHA256 9bc4a48a348248b67fdbbd7bf8c53c4cd31270143e3d921166737e0eecbe65b7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Suspicious use of NtCreateProcessExOtherParentProcess 1 TTPs 2 IoCs
  • Drops file in Drivers directory 1 IoCs
  • Adds Run key to start application 2 TTPs 3 IoCs
  • Downloads MZ/PE file 1 IoCs
  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Modifies Windows Firewall 2 TTPs 3 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Drops file in System32 directory 56 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 23 IoCs
  • Loads dropped DLL 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Checks whether UAC is enabled 1 TTPs 4 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 12 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 30 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 26 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 11 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 11 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 15 IoCs
  • Gathers network information 2 TTPs 1 IoCs

    Uses commandline utility to view network configuration.

  • Modifies data under HKEY_USERS 23 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 13 IoCs
  • Suspicious behavior: AddClipboardFormatListener 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 3 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\camtasia.exe
    "C:\Users\Admin\AppData\Local\Temp\camtasia.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5508
    • C:\Windows\TEMP\{DE4C5D77-6A48-4B36-A5BE-DFEF1F615B8F}\.ba\CamtasiaInstallerUI.exe
      "C:\Windows\TEMP\{DE4C5D77-6A48-4B36-A5BE-DFEF1F615B8F}\.ba\CamtasiaInstallerUI.exe" -burn.ba.apiver 569705357157400576 -burn.ba.pipe BurnPipe.{85527FBD-1568-41AC-B37A-E29565F0F354} {897972A1-E9C9-416F-93A7-422940F10CD4}
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4932
      • C:\Program Files\TechSmith\Camtasia\CamtasiaStudio.exe
        "C:\Program Files\TechSmith\Camtasia\CamtasiaStudio.exe"
        3⤵
        • Executes dropped EXE
        • Checks whether UAC is enabled
        • Reads the TCP/IP host and domain name from the registry
        • Checks processor information in registry
        • Modifies registry class
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:200
        • C:\Program Files\TechSmith\Camtasia\crashpad_handler.exe
          "C:\Program Files\TechSmith\Camtasia\crashpad_handler.exe" --no-rate-limit --database=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\CrashReportingNative --metrics-dir=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\CrashReportingNative --url=https://submit.backtrace.io/techsmith/252ca6f32f8a07a44ceb1046d56ffdae143ffbae8f1c0fb906b4c9aea03dad15/minidump --annotation=format=minidump --annotation=token=252ca6f32f8a07a44ceb1046d56ffdae143ffbae8f1c0fb906b4c9aea03dad15 --initial-client-data=0xba8,0xbac,0xbb0,0xb84,0xbc4,0x7ffffb941f98,0x7ffffb941fb0,0x7ffffb941fc8
          4⤵
          • Executes dropped EXE
          PID:1148
        • C:\Windows\System32\wbem\wmic.exe
          C:\Windows\System32\wbem\wmic.exe /namespace:'\\root\virtualization\v2' path msvm_computersystem get caption
          4⤵
          • Reads the TCP/IP host and domain name from the registry
          • Suspicious behavior: EnumeratesProcesses
          PID:2492
        • C:\Windows\System32\wbem\wmic.exe
          C:\Windows\System32\wbem\wmic.exe /namespace:'\\root\virtualization\v2' path msvm_computersystem get caption
          4⤵
          • Reads the TCP/IP host and domain name from the registry
          • Suspicious behavior: EnumeratesProcesses
          PID:5088
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-features=msSmartScreenProtection --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=200.5372.18029394416124083047 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
          4⤵
          • Enumerates system info in registry
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of WriteProcessMemory
          PID:2284
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView /prefetch:4 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x198,0x7ffff2ad5fd8,0x7ffff2ad5fe4,0x7ffff2ad5ff0
            5⤵
              PID:4980
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1692 --field-trial-handle=1700,i,17337615861515634067,9816585635109159678,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:2 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
              5⤵
                PID:5364
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2192 --field-trial-handle=1700,i,17337615861515634067,9816585635109159678,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:3 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                5⤵
                  PID:5980
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2380 --field-trial-handle=1700,i,17337615861515634067,9816585635109159678,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:8 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                  5⤵
                    PID:1888
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3300 --field-trial-handle=1700,i,17337615861515634067,9816585635109159678,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                    5⤵
                      PID:1160
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3456 --field-trial-handle=1700,i,17337615861515634067,9816585635109159678,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                      5⤵
                        PID:2080
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3584 --field-trial-handle=1700,i,17337615861515634067,9816585635109159678,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                        5⤵
                          PID:3388
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3792 --field-trial-handle=1700,i,17337615861515634067,9816585635109159678,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                          5⤵
                            PID:4900
                    • C:\Windows\TEMP\{DE4C5D77-6A48-4B36-A5BE-DFEF1F615B8F}\.be\CamtasiaInstaller.exe
                      "C:\Windows\TEMP\{DE4C5D77-6A48-4B36-A5BE-DFEF1F615B8F}\.be\CamtasiaInstaller.exe" -q -burn.elevated BurnPipe.{5A166C22-9CED-42DB-82C8-E52F82F82DD3} {28D342C5-2B58-4ED1-ACF5-FEE2C07A20AB} 5508
                      2⤵
                      • Adds Run key to start application
                      • Executes dropped EXE
                      • System Location Discovery: System Language Discovery
                      • Suspicious use of WriteProcessMemory
                      PID:5936
                      • C:\ProgramData\Package Cache\C42C82CFD5EAA2165B600F6109CB14FF4308CDF4CFF656A1375B4A933F1630BF\vc_redist.x64.exe
                        "C:\ProgramData\Package Cache\C42C82CFD5EAA2165B600F6109CB14FF4308CDF4CFF656A1375B4A933F1630BF\vc_redist.x64.exe" /install /quiet /norestart
                        3⤵
                        • Executes dropped EXE
                        • System Location Discovery: System Language Discovery
                        • Suspicious use of WriteProcessMemory
                        PID:3304
                        • C:\Windows\Temp\{3DEA67B1-C0B6-4309-8324-6C350BE8B069}\.cr\vc_redist.x64.exe
                          "C:\Windows\Temp\{3DEA67B1-C0B6-4309-8324-6C350BE8B069}\.cr\vc_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\C42C82CFD5EAA2165B600F6109CB14FF4308CDF4CFF656A1375B4A933F1630BF\vc_redist.x64.exe" -burn.filehandle.attached=748 -burn.filehandle.self=752 /install /quiet /norestart
                          4⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • System Location Discovery: System Language Discovery
                          • Suspicious use of WriteProcessMemory
                          PID:4232
                          • C:\Windows\Temp\{DB4EC45F-80BF-4EB6-B9AC-402BAAFAD25C}\.be\VC_redist.x64.exe
                            "C:\Windows\Temp\{DB4EC45F-80BF-4EB6-B9AC-402BAAFAD25C}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{2D635F98-11DA-4419-B161-C830EEDD7856} {118D5F50-914D-455B-A156-DFF97CD1FFCB} 4232
                            5⤵
                            • Adds Run key to start application
                            • Executes dropped EXE
                            • System Location Discovery: System Language Discovery
                            • Suspicious use of AdjustPrivilegeToken
                            • Suspicious use of WriteProcessMemory
                            PID:3976
                            • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                              "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={0e3bb569-69d6-4c34-bff9-c2f81db5e5f0} -burn.filehandle.self=932 -burn.embedded BurnPipe.{5A21AEA7-2C47-4E72-9E11-21B154A27AC4} {DA3B9C18-81CE-42B2-A1AF-B70074D2FADC} 3976
                              6⤵
                              • System Location Discovery: System Language Discovery
                              • Suspicious use of WriteProcessMemory
                              PID:3000
                              • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=556 -burn.filehandle.self=576 -uninstall -quiet -burn.related.upgrade -burn.ancestors={0e3bb569-69d6-4c34-bff9-c2f81db5e5f0} -burn.filehandle.self=932 -burn.embedded BurnPipe.{5A21AEA7-2C47-4E72-9E11-21B154A27AC4} {DA3B9C18-81CE-42B2-A1AF-B70074D2FADC} 3976
                                7⤵
                                • Loads dropped DLL
                                • System Location Discovery: System Language Discovery
                                • Suspicious use of WriteProcessMemory
                                PID:3736
                                • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                  "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{01957B3B-921F-4440-85DB-E5FC275F5AE4} {431E5445-4829-4D00-AEDA-CD456412C54A} 3736
                                  8⤵
                                  • System Location Discovery: System Language Discovery
                                  PID:4888
                  • C:\Windows\system32\vssvc.exe
                    C:\Windows\system32\vssvc.exe
                    1⤵
                    • Checks SCSI registry key(s)
                    • Suspicious use of AdjustPrivilegeToken
                    PID:3588
                  • C:\Windows\System32\rundll32.exe
                    C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {24AC8F2B-4D4A-4C17-9607-6A4B14068F97} -Embedding
                    1⤵
                      PID:5912
                    • C:\Windows\system32\mmc.exe
                      "C:\Windows\system32\mmc.exe" "C:\Windows\system32\WF.msc"
                      1⤵
                      • Drops file in System32 directory
                      • Modifies registry class
                      • Suspicious behavior: GetForegroundWindowSpam
                      • Suspicious use of AdjustPrivilegeToken
                      • Suspicious use of SetWindowsHookEx
                      PID:4804
                    • C:\Windows\system32\srtasks.exe
                      C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
                      1⤵
                      • Suspicious use of AdjustPrivilegeToken
                      PID:2720
                    • C:\Windows\system32\svchost.exe
                      C:\Windows\system32\svchost.exe -k GPSvcGroup
                      1⤵
                        PID:5668
                      • C:\ProgramData\Package Cache\{A70C4630-EA5A-4956-B048-7EC8FF8670E9}\CamtasiaInstaller.exe
                        "C:\ProgramData\Package Cache\{A70C4630-EA5A-4956-B048-7EC8FF8670E9}\CamtasiaInstaller.exe" /burn.runonce
                        1⤵
                        • Executes dropped EXE
                        • System Location Discovery: System Language Discovery
                        • Suspicious use of WriteProcessMemory
                        PID:6044
                        • C:\ProgramData\Package Cache\{A70C4630-EA5A-4956-B048-7EC8FF8670E9}\CamtasiaInstaller.exe
                          "C:\ProgramData\Package Cache\{A70C4630-EA5A-4956-B048-7EC8FF8670E9}\CamtasiaInstaller.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\Camtasia_20261023172836.log"
                          2⤵
                          • Executes dropped EXE
                          • System Location Discovery: System Language Discovery
                          • Suspicious use of WriteProcessMemory
                          PID:6028
                          • C:\Windows\TEMP\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\CamtasiaInstallerUI.exe
                            "C:\Windows\TEMP\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\CamtasiaInstallerUI.exe" -burn.ba.apiver 569705357157400576 -burn.ba.pipe BurnPipe.{600EF4BB-724D-420C-A2FA-3406D2BB39A6} {9D8047AF-88B8-4518-A295-012EABA82430}
                            3⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • System Location Discovery: System Language Discovery
                            PID:6008
                      • C:\Windows\system32\msiexec.exe
                        C:\Windows\system32\msiexec.exe /V
                        1⤵
                        • Enumerates connected drives
                        • Drops file in System32 directory
                        • Drops file in Program Files directory
                        • Drops file in Windows directory
                        • Modifies data under HKEY_USERS
                        • Modifies registry class
                        • Suspicious behavior: EnumeratesProcesses
                        • Suspicious use of AdjustPrivilegeToken
                        • Suspicious use of SetWindowsHookEx
                        • Suspicious use of WriteProcessMemory
                        PID:3308
                        • C:\Windows\syswow64\MsiExec.exe
                          C:\Windows\syswow64\MsiExec.exe -Embedding 2DAA4BB79F61B1E12B5B089EA66EDA7B
                          2⤵
                          • Loads dropped DLL
                          • System Location Discovery: System Language Discovery
                          • Suspicious use of SetWindowsHookEx
                          • Suspicious use of WriteProcessMemory
                          PID:3828
                          • C:\Windows\SysWOW64\rundll32.exe
                            rundll32.exe "C:\Windows\Installer\MSI85DB.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_240879281 7 CamtasiaManagedCA!CamtasiaManagedCA.CustomActions.IsWebView2RuntimeInstalled
                            3⤵
                            • Drops file in Windows directory
                            • Loads dropped DLL
                            • System Location Discovery: System Language Discovery
                            PID:4340
                          • C:\Windows\SysWOW64\rundll32.exe
                            rundll32.exe "C:\Windows\Installer\MSI8ACE.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_240880390 11 FileSystemCA!FileSystemCA.CustomActions.TSC_SetPropertyFromIniFile
                            3⤵
                            • Loads dropped DLL
                            • System Location Discovery: System Language Discovery
                            PID:4848
                          • C:\Windows\SysWOW64\rundll32.exe
                            rundll32.exe "C:\Windows\Installer\MSI8D11.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_240880937 19 FileSystemCA!FileSystemCA.CustomActions.TSC_SetPropertyFromIniFile
                            3⤵
                            • Loads dropped DLL
                            • System Location Discovery: System Language Discovery
                            PID:5472
                          • C:\Windows\SysWOW64\rundll32.exe
                            rundll32.exe "C:\Windows\Installer\MSI8EA8.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_240881390 27 FileSystemCA!FileSystemCA.CustomActions.TSC_SetPropertyFromIniFile
                            3⤵
                            • Drops file in Windows directory
                            • Loads dropped DLL
                            • System Location Discovery: System Language Discovery
                            PID:5788
                          • C:\Windows\SysWOW64\rundll32.exe
                            rundll32.exe "C:\Windows\Installer\MSIA550.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_240887140 58 FuseCA!FuseCA.CertificateCustomActions.TSC_FindFuseCertificate
                            3⤵
                            • Drops file in Windows directory
                            • Loads dropped DLL
                            • System Location Discovery: System Language Discovery
                            PID:816
                          • C:\Windows\SysWOW64\rundll32.exe
                            rundll32.exe "C:\Windows\Installer\MSIA62C.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_240887359 62 FuseCA!FuseCA.CertificateCustomActions.TSC_CreateFuseCertificate
                            3⤵
                            • Loads dropped DLL
                            • System Location Discovery: System Language Discovery
                            PID:4464
                        • C:\Windows\System32\MsiExec.exe
                          C:\Windows\System32\MsiExec.exe -Embedding 193E1D0949BBDF2DF6B450D03B938293
                          2⤵
                          • Loads dropped DLL
                          • Suspicious use of SetWindowsHookEx
                          PID:4396
                        • C:\Windows\System32\MsiExec.exe
                          C:\Windows\System32\MsiExec.exe -Embedding E8ADE10F52EA6363B8FB23FC0B102772 E Global\MSI0000
                          2⤵
                          • Modifies data under HKEY_USERS
                          • Suspicious use of SetWindowsHookEx
                          • Suspicious use of WriteProcessMemory
                          PID:6100
                          • C:\Windows\System32\cmd.exe
                            "cmd" /c netsh http add sslcert ipport=0.0.0.0:8327 certhash=DE294FFF5DF1AC6E4CD561A687D2A287AD6F15C9 appid={817B37FD-3113-4C86-A0FF-FA63798C2CEC}
                            3⤵
                            • Executes a command shell one-liner
                            • Suspicious use of WriteProcessMemory
                            PID:6116
                            • C:\Windows\System32\netsh.exe
                              netsh http add sslcert ipport=0.0.0.0:8327 certhash=DE294FFF5DF1AC6E4CD561A687D2A287AD6F15C9 appid={817B37FD-3113-4C86-A0FF-FA63798C2CEC}
                              4⤵
                              • Event Triggered Execution: Netsh Helper DLL
                              PID:5576
                        • C:\Windows\syswow64\MsiExec.exe
                          C:\Windows\syswow64\MsiExec.exe -Embedding 15758D448BDC27C20EDF547E7C0B6F69 E Global\MSI0000
                          2⤵
                          • System Location Discovery: System Language Discovery
                          • Suspicious use of SetWindowsHookEx
                          • Suspicious use of WriteProcessMemory
                          PID:464
                          • C:\Windows\SysWOW64\rundll32.exe
                            rundll32.exe "C:\Windows\Installer\MSI3893.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_240924953 484 FileSystemCA!FileSystemCA.SupportToolCustomAction.TSC_ReplaceTokenInSupportToolConfig
                            3⤵
                            • Drops file in Windows directory
                            • System Location Discovery: System Language Discovery
                            PID:5872
                          • C:\Windows\SysWOW64\rundll32.exe
                            rundll32.exe "C:\Windows\Installer\MSI3B73.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_240925640 494 FuseCA!FuseCA.CertificateCustomActions.TSC_InstallFuseCertificate
                            3⤵
                            • Drops file in Windows directory
                            • System Location Discovery: System Language Discovery
                            • Modifies system certificate store
                            PID:3328
                      • C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe
                        "C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe" /burn.runonce
                        1⤵
                        • Executes dropped EXE
                        • System Location Discovery: System Language Discovery
                        • Suspicious use of WriteProcessMemory
                        PID:4520
                        • C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe
                          "C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261023172926.log" /install
                          2⤵
                          • Executes dropped EXE
                          • System Location Discovery: System Language Discovery
                          • Suspicious use of WriteProcessMemory
                          PID:4896
                          • C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe
                            "C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe" -burn.filehandle.attached=560 -burn.filehandle.self=580 /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261023172926.log" /install
                            3⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • System Location Discovery: System Language Discovery
                            • Suspicious use of WriteProcessMemory
                            PID:1884
                            • C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe
                              "C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{26543351-148A-48F8-8864-7509492B8A1A} {0BAD803B-A61B-47B2-920F-593272BBFD1A} 1884
                              4⤵
                              • Adds Run key to start application
                              • Enumerates connected drives
                              • Executes dropped EXE
                              • System Location Discovery: System Language Discovery
                              PID:5660
                      • C:\Program Files\Common Files\TechSmith Shared\TechSmith Agent\TechSmithAgent.exe
                        "C:\Program Files\Common Files\TechSmith Shared\TechSmith Agent\TechSmithAgent.exe"
                        1⤵
                        • Executes dropped EXE
                        • Reads the TCP/IP host and domain name from the registry
                        PID:5616
                      • C:\Windows\system32\svchost.exe
                        C:\Windows\system32\svchost.exe -k SDRSVC
                        1⤵
                          PID:5728
                        • C:\Windows\system32\taskmgr.exe
                          "C:\Windows\system32\taskmgr.exe" /0
                          1⤵
                          • Suspicious use of NtCreateProcessExOtherParentProcess
                          • Checks SCSI registry key(s)
                          • Suspicious behavior: EnumeratesProcesses
                          • Suspicious use of FindShellTrayWindow
                          • Suspicious use of SendNotifyMessage
                          • Suspicious use of SetWindowsHookEx
                          PID:6280
                        • C:\Windows\system32\werfault.exe
                          werfault.exe /h /shared Global\adee361f4c2d4abcb6e7689c799fc323 /t 2820 /p 200
                          1⤵
                            PID:6880
                          • C:\Windows\System32\SecurityHealthHost.exe
                            \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                            1⤵
                              PID:6240
                            • C:\Program Files\TechSmith\Camtasia\CamtasiaStudio.exe
                              "C:\Program Files\TechSmith\Camtasia\CamtasiaStudio.exe"
                              1⤵
                              • Executes dropped EXE
                              • Checks whether UAC is enabled
                              • Reads the TCP/IP host and domain name from the registry
                              • Checks processor information in registry
                              • Modifies registry class
                              • Modifies system certificate store
                              • Suspicious behavior: AddClipboardFormatListener
                              • Suspicious use of SetWindowsHookEx
                              • Suspicious use of WriteProcessMemory
                              PID:6024
                              • C:\Program Files\TechSmith\Camtasia\crashpad_handler.exe
                                "C:\Program Files\TechSmith\Camtasia\crashpad_handler.exe" --no-rate-limit --database=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\CrashReportingNative --metrics-dir=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\CrashReportingNative --url=https://submit.backtrace.io/techsmith/252ca6f32f8a07a44ceb1046d56ffdae143ffbae8f1c0fb906b4c9aea03dad15/minidump --annotation=format=minidump --annotation=token=252ca6f32f8a07a44ceb1046d56ffdae143ffbae8f1c0fb906b4c9aea03dad15 --initial-client-data=0xb78,0xb7c,0xb80,0xb18,0xba8,0x7ff800031f98,0x7ff800031fb0,0x7ff800031fc8
                                2⤵
                                • Executes dropped EXE
                                PID:716
                              • C:\Windows\System32\wbem\wmic.exe
                                C:\Windows\System32\wbem\wmic.exe /namespace:'\\root\virtualization\v2' path msvm_computersystem get caption
                                2⤵
                                • Reads the TCP/IP host and domain name from the registry
                                PID:5208
                              • C:\Windows\System32\wbem\wmic.exe
                                C:\Windows\System32\wbem\wmic.exe /namespace:'\\root\virtualization\v2' path msvm_computersystem get caption
                                2⤵
                                • Reads the TCP/IP host and domain name from the registry
                                PID:3092
                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-features=msSmartScreenProtection --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=6024.4616.3649838822523038751 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                2⤵
                                • Drops file in Windows directory
                                • Enumerates system info in registry
                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                PID:7080
                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView /prefetch:4 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x18c,0x190,0x194,0x168,0x110,0x7ffff2ad5fd8,0x7ffff2ad5fe4,0x7ffff2ad5ff0
                                  3⤵
                                    PID:6452
                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1732 --field-trial-handle=1740,i,4108807677146123524,1568651395533495814,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:2 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                    3⤵
                                      PID:6700
                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2256 --field-trial-handle=1740,i,4108807677146123524,1568651395533495814,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:3 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                      3⤵
                                        PID:5548
                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2292 --field-trial-handle=1740,i,4108807677146123524,1568651395533495814,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:8 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                        3⤵
                                          PID:4032
                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3556 --field-trial-handle=1740,i,4108807677146123524,1568651395533495814,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                          3⤵
                                            PID:4548
                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3736 --field-trial-handle=1740,i,4108807677146123524,1568651395533495814,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                            3⤵
                                              PID:5576
                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3860 --field-trial-handle=1740,i,4108807677146123524,1568651395533495814,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                              3⤵
                                                PID:3264
                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4008 --field-trial-handle=1740,i,4108807677146123524,1568651395533495814,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                                3⤵
                                                  PID:3320
                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4952 --field-trial-handle=1740,i,4108807677146123524,1568651395533495814,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                                  3⤵
                                                    PID:6872
                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=5236 --field-trial-handle=1740,i,4108807677146123524,1568651395533495814,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:8 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                                    3⤵
                                                      PID:6828
                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=5376 --field-trial-handle=1740,i,4108807677146123524,1568651395533495814,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:8 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                                      3⤵
                                                        PID:6860
                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=5368 --field-trial-handle=1740,i,4108807677146123524,1568651395533495814,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:8 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                                        3⤵
                                                          PID:5632
                                                    • C:\Windows\system32\taskmgr.exe
                                                      "C:\Windows\system32\taskmgr.exe" /0
                                                      1⤵
                                                      • Checks SCSI registry key(s)
                                                      • Suspicious behavior: GetForegroundWindowSpam
                                                      • Suspicious use of FindShellTrayWindow
                                                      • Suspicious use of SendNotifyMessage
                                                      • Suspicious use of SetWindowsHookEx
                                                      PID:6616
                                                    • C:\Windows\System32\rundll32.exe
                                                      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                      1⤵
                                                        PID:5212
                                                      • C:\Windows\system32\notepad.exe
                                                        "C:\Windows\system32\notepad.exe"
                                                        1⤵
                                                          PID:5912
                                                        • C:\Windows\system32\notepad.exe
                                                          "C:\Windows\system32\notepad.exe"
                                                          1⤵
                                                            PID:3516
                                                          • C:\Windows\system32\notepad.exe
                                                            "C:\Windows\system32\notepad.exe"
                                                            1⤵
                                                            • Drops file in Drivers directory
                                                            • Modifies registry class
                                                            • Suspicious behavior: GetForegroundWindowSpam
                                                            • Suspicious use of SetWindowsHookEx
                                                            PID:3780
                                                          • C:\Program Files\TechSmith\Camtasia\CamtasiaStudio.exe
                                                            "C:\Program Files\TechSmith\Camtasia\CamtasiaStudio.exe"
                                                            1⤵
                                                            • Executes dropped EXE
                                                            • Checks whether UAC is enabled
                                                            • Reads the TCP/IP host and domain name from the registry
                                                            • Checks processor information in registry
                                                            • Suspicious behavior: AddClipboardFormatListener
                                                            PID:2896
                                                            • C:\Program Files\TechSmith\Camtasia\crashpad_handler.exe
                                                              "C:\Program Files\TechSmith\Camtasia\crashpad_handler.exe" --no-rate-limit --database=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\CrashReportingNative --metrics-dir=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\CrashReportingNative --url=https://submit.backtrace.io/techsmith/252ca6f32f8a07a44ceb1046d56ffdae143ffbae8f1c0fb906b4c9aea03dad15/minidump --annotation=format=minidump --annotation=token=252ca6f32f8a07a44ceb1046d56ffdae143ffbae8f1c0fb906b4c9aea03dad15 --initial-client-data=0xb04,0xb08,0xb0c,0xb5c,0xbb8,0x7ffffdcd1f98,0x7ffffdcd1fb0,0x7ffffdcd1fc8
                                                              2⤵
                                                              • Executes dropped EXE
                                                              PID:7040
                                                            • C:\Windows\System32\wbem\wmic.exe
                                                              C:\Windows\System32\wbem\wmic.exe /namespace:'\\root\virtualization\v2' path msvm_computersystem get caption
                                                              2⤵
                                                              • Reads the TCP/IP host and domain name from the registry
                                                              PID:3064
                                                            • C:\Windows\System32\wbem\wmic.exe
                                                              C:\Windows\System32\wbem\wmic.exe service where (Name='vmcompute') get Name, State
                                                              2⤵
                                                              • Reads the TCP/IP host and domain name from the registry
                                                              PID:716
                                                            • C:\Windows\System32\wbem\wmic.exe
                                                              C:\Windows\System32\wbem\wmic.exe /namespace:'\\root\virtualization\v2' path msvm_computersystem get caption
                                                              2⤵
                                                              • Reads the TCP/IP host and domain name from the registry
                                                              PID:4516
                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-features=msSmartScreenProtection --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2896.3084.12008131914335511529 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                                              2⤵
                                                              • Enumerates system info in registry
                                                              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                              PID:5380
                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView /prefetch:4 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x1cc,0x7ffff2ad5fd8,0x7ffff2ad5fe4,0x7ffff2ad5ff0
                                                                3⤵
                                                                  PID:6560
                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1712 --field-trial-handle=1716,i,11014567666293422916,12384632737418936210,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:2 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                                                  3⤵
                                                                    PID:7052
                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=1964 --field-trial-handle=1716,i,11014567666293422916,12384632737418936210,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:3 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                                                    3⤵
                                                                      PID:424
                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2444 --field-trial-handle=1716,i,11014567666293422916,12384632737418936210,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:8 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                                                      3⤵
                                                                        PID:4008
                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3612 --field-trial-handle=1716,i,11014567666293422916,12384632737418936210,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                                                        3⤵
                                                                          PID:6984
                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3804 --field-trial-handle=1716,i,11014567666293422916,12384632737418936210,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                                                          3⤵
                                                                            PID:4396
                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3920 --field-trial-handle=1716,i,11014567666293422916,12384632737418936210,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                                                            3⤵
                                                                              PID:4640
                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4064 --field-trial-handle=1716,i,11014567666293422916,12384632737418936210,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                                                              3⤵
                                                                                PID:6976
                                                                          • C:\Program Files\TechSmith\Camtasia\CamtasiaStudio.exe
                                                                            "C:\Program Files\TechSmith\Camtasia\CamtasiaStudio.exe"
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            PID:2584
                                                                          • C:\Windows\system32\cmd.exe
                                                                            "C:\Windows\system32\cmd.exe"
                                                                            1⤵
                                                                              PID:5012
                                                                              • C:\Windows\system32\ipconfig.exe
                                                                                ipconfig /flushdns
                                                                                2⤵
                                                                                • Gathers network information
                                                                                PID:6392
                                                                            • C:\Program Files\TechSmith\Camtasia\CamtasiaStudio.exe
                                                                              "C:\Program Files\TechSmith\Camtasia\CamtasiaStudio.exe"
                                                                              1⤵
                                                                              • Executes dropped EXE
                                                                              • Checks whether UAC is enabled
                                                                              • Reads the TCP/IP host and domain name from the registry
                                                                              • Checks processor information in registry
                                                                              • Suspicious behavior: AddClipboardFormatListener
                                                                              PID:6860
                                                                              • C:\Program Files\TechSmith\Camtasia\crashpad_handler.exe
                                                                                "C:\Program Files\TechSmith\Camtasia\crashpad_handler.exe" --no-rate-limit --database=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\CrashReportingNative --metrics-dir=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\CrashReportingNative --url=https://submit.backtrace.io/techsmith/252ca6f32f8a07a44ceb1046d56ffdae143ffbae8f1c0fb906b4c9aea03dad15/minidump --annotation=format=minidump --annotation=token=252ca6f32f8a07a44ceb1046d56ffdae143ffbae8f1c0fb906b4c9aea03dad15 --initial-client-data=0xb44,0xb7c,0xb80,0xb58,0xc38,0x7ffffd9a1f98,0x7ffffd9a1fb0,0x7ffffd9a1fc8
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                PID:1820
                                                                              • C:\Windows\System32\wbem\wmic.exe
                                                                                C:\Windows\System32\wbem\wmic.exe /namespace:'\\root\virtualization\v2' path msvm_computersystem get caption
                                                                                2⤵
                                                                                • Reads the TCP/IP host and domain name from the registry
                                                                                PID:6092
                                                                              • C:\Windows\System32\wbem\wmic.exe
                                                                                C:\Windows\System32\wbem\wmic.exe /namespace:'\\root\virtualization\v2' path msvm_computersystem get caption
                                                                                2⤵
                                                                                • Reads the TCP/IP host and domain name from the registry
                                                                                PID:6188
                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-features=msSmartScreenProtection --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=6860.6768.1428813326277976550 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                                                                2⤵
                                                                                • Enumerates system info in registry
                                                                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                PID:5208
                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView /prefetch:4 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x1cc,0x7ffff2ad5fd8,0x7ffff2ad5fe4,0x7ffff2ad5ff0
                                                                                  3⤵
                                                                                    PID:3876
                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1772 --field-trial-handle=1784,i,6590446402152346419,10373251400591588540,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:2 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                                                                    3⤵
                                                                                      PID:2576
                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2656 --field-trial-handle=1784,i,6590446402152346419,10373251400591588540,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:3 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                                                                      3⤵
                                                                                        PID:5848
                                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2724 --field-trial-handle=1784,i,6590446402152346419,10373251400591588540,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:8 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                                                                        3⤵
                                                                                          PID:7148
                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3540 --field-trial-handle=1784,i,6590446402152346419,10373251400591588540,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                                                                          3⤵
                                                                                            PID:4508
                                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3740 --field-trial-handle=1784,i,6590446402152346419,10373251400591588540,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                                                                            3⤵
                                                                                              PID:4620
                                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3860 --field-trial-handle=1784,i,6590446402152346419,10373251400591588540,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                                                                              3⤵
                                                                                                PID:6428
                                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4004 --field-trial-handle=1784,i,6590446402152346419,10373251400591588540,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                                                                                3⤵
                                                                                                  PID:3008
                                                                                            • C:\Windows\system32\cmd.exe
                                                                                              "C:\Windows\system32\cmd.exe"
                                                                                              1⤵
                                                                                                PID:5088
                                                                                                • C:\Windows\system32\netsh.exe
                                                                                                  netsh advfirewall firewall add rule name="Blocked_Repack_CamtasiaRecorder" dir=out action=block program="C:\Program Files\TechSmith\Camtasia\CamtasiaRecorder.exe" enable=yes
                                                                                                  2⤵
                                                                                                  • Modifies Windows Firewall
                                                                                                  • Event Triggered Execution: Netsh Helper DLL
                                                                                                  PID:5140
                                                                                                • C:\Windows\system32\netsh.exe
                                                                                                  netsh advfirewall firewall add rule name="Blocked_Repack_CamtasiaStudio" dir=out action=block program="C:\Program Files\TechSmith\Camtasia\CamtasiaStudio.exe" enable=yes
                                                                                                  2⤵
                                                                                                  • Modifies Windows Firewall
                                                                                                  • Event Triggered Execution: Netsh Helper DLL
                                                                                                  PID:3940
                                                                                                • C:\Windows\system32\netsh.exe
                                                                                                  netsh advfirewall firewall add rule name="Blocked_Repack_crashpad_handler" dir=out action=block program="C:\Program Files\TechSmith\Camtasia\crashpad_handler.exe" enable=yes
                                                                                                  2⤵
                                                                                                  • Modifies Windows Firewall
                                                                                                  • Event Triggered Execution: Netsh Helper DLL
                                                                                                  PID:6372
                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                                                1⤵
                                                                                                • Enumerates system info in registry
                                                                                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                PID:5948
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0xc4,0x134,0x7ff812f6c728,0x7ff812f6c734,0x7ff812f6c740
                                                                                                  2⤵
                                                                                                    PID:6960
                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,18161374196019330414,17234697993001378452,262144 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=1864 /prefetch:2
                                                                                                    2⤵
                                                                                                      PID:7016
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1544,i,4890754030717483863,8713298565009039512,524288 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:11
                                                                                                      2⤵
                                                                                                      • System Time Discovery
                                                                                                      PID:6992
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2340,i,859340930286979609,1240841195977412239,524288 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:13
                                                                                                      2⤵
                                                                                                        PID:5396
                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3288,i,10503984293175439051,13309881947688562505,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=3324 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:4888
                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3264,i,12688830781634498548,28628387555565015,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=3296 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:1668
                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4828,i,5145987968295732364,14559124721439738333,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:4712
                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4924,i,5322156402773106050,9889472874204368080,524288 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
                                                                                                              2⤵
                                                                                                                PID:6088
                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5156,i,10021552681499766099,11057608917243118637,524288 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
                                                                                                                2⤵
                                                                                                                  PID:6308
                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5484,i,14040324740390975734,8201607130328252034,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:6776
                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5512,i,13878196028296415530,1188578358172543889,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:5160
                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5780,i,13056683088538557817,16782017379526026150,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:5640
                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5800,i,9313442669622464826,2488370583696206192,524288 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:14
                                                                                                                        2⤵
                                                                                                                          PID:5692
                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5940,i,4688904020330701,4597168160649749149,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:6952
                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6240,i,4139284396543779631,15463249242911129974,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:2612
                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6024,i,16388281574076334130,4955772517436186483,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:5656
                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5688,i,5757126101491388484,7126320518605235499,524288 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:14
                                                                                                                                2⤵
                                                                                                                                  PID:4196
                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6468,i,6619722960622427030,15309160338270146511,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:5956
                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6008,i,4631106596193726237,10270301999016031996,524288 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:14
                                                                                                                                    2⤵
                                                                                                                                      PID:4304
                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6076,i,7256799270321478280,17712771324885943832,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:1140
                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6012,i,1933729588444298094,8727316068019607439,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:5072
                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6148,i,17727386729025374651,6494983161798344661,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:9
                                                                                                                                          2⤵
                                                                                                                                            PID:2864
                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6084,i,12069660601984018114,3720762175003719024,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:3068
                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5648,i,4012279324316616602,9978643761311024724,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:108
                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6280,i,15935683825653700280,16474092547954270005,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:3720
                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6584,i,16986669962412795272,3271458626237022767,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:1
                                                                                                                                                  2⤵
                                                                                                                                                    PID:5648
                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=4656,i,4281828704497652644,5634558281071837108,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
                                                                                                                                                    2⤵
                                                                                                                                                      PID:6120
                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6304,i,535738589250051346,5426323695009935557,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:1
                                                                                                                                                      2⤵
                                                                                                                                                        PID:1908
                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6812,i,5181964404704976704,17553615749149765485,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:1
                                                                                                                                                        2⤵
                                                                                                                                                          PID:6108
                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6928,i,6526279115427064596,16555890355436177501,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6964 /prefetch:1
                                                                                                                                                          2⤵
                                                                                                                                                            PID:3664
                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6492,i,2835166159123196447,4044072365351334272,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:1
                                                                                                                                                            2⤵
                                                                                                                                                              PID:3092
                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7236,i,13518876227876262073,5033322765184219878,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7248 /prefetch:1
                                                                                                                                                              2⤵
                                                                                                                                                                PID:6996
                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7288,i,17678788550800282446,6017599697292766039,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7284 /prefetch:1
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:7012
                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7404,i,8880571413927397107,995650232042406862,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7416 /prefetch:1
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:6416
                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7456,i,1950819320357500672,9408735842924612467,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7560 /prefetch:1
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:6620
                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7604,i,15022232274565032974,14776776530946633173,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7608 /prefetch:1
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:2704
                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7752,i,1341133037769227075,11173025659352774484,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7760 /prefetch:1
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:1064
                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=7896,i,6539991783995597507,5260514735418186361,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7908 /prefetch:1
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:6648
                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=8040,i,16533291892378384925,4497602730989013079,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8036 /prefetch:1
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:6972
                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=8288,i,10175898157992165607,8089294452581535080,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8304 /prefetch:1
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:6836
                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=8348,i,11631858492523169261,93680820021542876,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8312 /prefetch:1
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:5160
                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=8476,i,17040373585653943925,2830380784055283616,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8484 /prefetch:1
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:1276
                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=8740,i,16153018123348611498,15262347295886468999,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8756 /prefetch:1
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:2712
                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=8892,i,11256824285193815342,3397950536703366854,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8904 /prefetch:1
                                                                                                                                                                                      2⤵
                                                                                                                                                                                        PID:2956
                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=8948,i,4748825216171525986,17750210399391661598,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8932 /prefetch:1
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:6104
                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=8840,i,2838870450421601532,11980452808434543413,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=9376 /prefetch:1
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:6952
                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=5712,i,10287621297961608335,4671123915184069639,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=9352 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:6784
                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=5488,i,17294781574514973258,10520151656591866484,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7312 /prefetch:1
                                                                                                                                                                                              2⤵
                                                                                                                                                                                                PID:4056
                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=6360,i,5108884872690638964,15917369570903758038,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:1
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:4880
                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=5708,i,17957832114702133716,1740479362779688037,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=9408 /prefetch:1
                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                    PID:3552
                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=6184,i,13281617734698237628,14206603402923486259,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7832 /prefetch:1
                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                      PID:5640
                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=8836,i,2422560106075981631,7760325539482741471,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=9276 /prefetch:1
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:1852
                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=9464,i,16949535697356508514,14944066352377244918,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=9480 /prefetch:1
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                          PID:1636
                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=9600,i,12623092431041360369,7362761170879403117,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=9620 /prefetch:1
                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                            PID:1440
                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=9760,i,15565590988301804400,9526319792897791394,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=9756 /prefetch:1
                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                              PID:6864
                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=9896,i,9071522968876712841,5638348011881963706,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=9920 /prefetch:1
                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                PID:2452
                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=9944,i,3803320762961609651,4795562148755371919,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=9960 /prefetch:1
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                  PID:3972
                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=10224,i,9614944078935552669,11644853920333950889,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=10092 /prefetch:1
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:1244
                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=10248,i,2190476680814867341,2351053525878569628,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=10256 /prefetch:1
                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                      PID:4176
                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=10520,i,4869193213637858480,5899788711700236848,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=10300 /prefetch:1
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:5876
                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=10660,i,1223302067849581154,12263908937405224588,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=10540 /prefetch:1
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:4088
                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=10500,i,6021285293609583596,15622409008047995924,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=10888 /prefetch:1
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                            PID:836
                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=10984,i,6743971429062372569,10831005811667002369,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=10988 /prefetch:1
                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                              PID:3764
                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=11116,i,10957226050550772435,3374092320965570369,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=11128 /prefetch:1
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:1580
                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=11148,i,10466395147487663573,1419672533944565179,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=10304 /prefetch:1
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                  PID:6760
                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=11236,i,5666811658423587860,9107286985304305114,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=11272 /prefetch:1
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                    PID:2156
                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=9896,i,7891557661101642496,9983909644603492080,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:1
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                      PID:7276
                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=11604,i,18071565512804505210,11093622751002021969,524288 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=11616 /prefetch:14
                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                        PID:7576
                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=11668,i,12923170230308591831,7988587549327495334,524288 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=11576 /prefetch:14
                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                          PID:7584
                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=11620,i,3652869394971091892,7840808034401712172,524288 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=11592 /prefetch:14
                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                            PID:7592
                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=12076,i,17831313129716753942,1605328484642162856,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=12080 /prefetch:1
                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                              PID:4144
                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=10544,i,5981083274845382865,14656967748524119979,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=11492 /prefetch:1
                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                PID:7244
                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=5432,i,8662460691536441136,1085481245915722452,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=11416 /prefetch:1
                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                  PID:7272
                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=10000,i,235201764714553590,11190720506929537972,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:1
                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                    PID:7264
                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=5612,i,2538897303090981439,10747689048459892508,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:1
                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                      PID:7252
                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=5580,i,1344770088162986345,17067493462819857685,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7344 /prefetch:1
                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                        PID:5568
                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=8984,i,9525928958676817752,16739656598383389385,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7924 /prefetch:1
                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                          PID:4032
                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=9632,i,5460944441478057237,2431777458279111258,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8044 /prefetch:1
                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                            PID:4568
                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=8236,i,13547774860102724399,17488844391153866696,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=9684 /prefetch:1
                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                              PID:1472
                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=8240,i,16222401007663692467,8726210106475558281,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8228 /prefetch:1
                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                PID:4756
                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=8268,i,4921080401467514670,112454002283163708,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8232 /prefetch:1
                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                  PID:1444
                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=11376,i,4612580644695004204,17741745763931973369,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8840 /prefetch:1
                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                    PID:5576
                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=9056,i,12446598551793267197,5651768703173319966,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8448 /prefetch:1
                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                      PID:4892
                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=5488,i,3141621516232125898,13456033824546556627,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8580 /prefetch:1
                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                        PID:6744
                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=8544,i,15232508162845777372,3169259297437164165,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8548 /prefetch:1
                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                          PID:4428
                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=7144,i,11185690344398068701,16298729541747493088,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:1
                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                            PID:4004
                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=9632,i,10766083259110483666,14846719904078678587,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:1
                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                              PID:7860
                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=6196,i,14244170036761050100,10769133008900865519,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5736 /prefetch:1
                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                PID:4972
                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=5940,i,10911301821117396040,11629333638977663993,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=9168 /prefetch:1
                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                  PID:8032
                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=6496,i,16749506171365363055,5546612716157516447,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7592 /prefetch:1
                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                    PID:8040
                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=6260,i,16881234537660002056,13658591007954521450,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:1
                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                      PID:1892
                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=9316,i,14600814350802211811,6342475844907419974,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8004 /prefetch:1
                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                        PID:6976
                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=7564,i,11030080295093823450,3011427829345021686,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:1
                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                          PID:4036
                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=6696,i,10732043421150270658,2069387397439411079,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:1
                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                            PID:5140
                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=11456,i,5827832508790679436,6192655559309241569,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=9300 /prefetch:1
                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                              PID:2792
                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=7212,i,3709886215529965333,3684637803710788235,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8248 /prefetch:1
                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                PID:5592
                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=6956,i,16807432345177712024,2215345874405162235,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7008 /prefetch:1
                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                  PID:6584
                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=11720,i,861039007886688399,1305536711837137268,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=11688 /prefetch:1
                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                    PID:4600
                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=11756,i,6459844238407984567,11646951570608285405,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6820 /prefetch:1
                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                      PID:7128
                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=11752,i,2246712173664469120,10848468204258704399,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=11696 /prefetch:1
                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                        PID:2676
                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=11776,i,16308071175944358010,12205787553049374362,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=10896 /prefetch:1
                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                          PID:2632
                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=8348,i,1168795280400792093,18337303052984508091,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8828 /prefetch:1
                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                            PID:2252
                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=7404,i,13392993692075802205,6382762677716075252,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=11088 /prefetch:1
                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                              PID:6540
                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=9872,i,13772784310587247406,6595285040767286093,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8088 /prefetch:1
                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                PID:3088
                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --metrics-shmem-handle=6852,i,17690130813891654260,589295333305127888,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=9680 /prefetch:1
                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                  PID:5584
                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --metrics-shmem-handle=8676,i,3632401299996885323,14239713209063138308,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8712 /prefetch:1
                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                    PID:3264
                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --metrics-shmem-handle=8512,i,16122776355094855466,15886594924091654229,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:1
                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                      PID:1304
                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --metrics-shmem-handle=8652,i,705135015349548562,15029151979607395335,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=11876 /prefetch:1
                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                        PID:6232
                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --metrics-shmem-handle=11788,i,15784821195101584061,8269016877897447055,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6852 /prefetch:1
                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                          PID:4752
                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --metrics-shmem-handle=7724,i,18027888842552332938,8732740664053724481,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8768 /prefetch:1
                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                            PID:4408
                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --metrics-shmem-handle=7752,i,16262352082498884880,543840736867668011,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=900 /prefetch:1
                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                              PID:3552
                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --metrics-shmem-handle=6852,i,10680364529916026538,9991092330882517402,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8308 /prefetch:1
                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                PID:5980
                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --metrics-shmem-handle=7208,i,3181597436888781641,4109209129231488120,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:1
                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                  PID:7296
                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --metrics-shmem-handle=9872,i,13248760533019780259,7217927768619232255,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:1
                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                    PID:1956
                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --metrics-shmem-handle=8688,i,965409065875035324,13357406394911055368,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8536 /prefetch:1
                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                      PID:7324
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --metrics-shmem-handle=6524,i,8051470349032129232,830854382401882444,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8680 /prefetch:1
                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                        PID:7288
                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --metrics-shmem-handle=6364,i,11625121283642250992,14394746003355320705,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=11316 /prefetch:1
                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                          PID:2612
                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --metrics-shmem-handle=5740,i,2274358517405947576,10746185652916892069,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8500 /prefetch:1
                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                            PID:6996
                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --metrics-shmem-handle=8668,i,404797404307095538,4657130879985382778,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7760 /prefetch:1
                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                              PID:2528
                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --metrics-shmem-handle=10404,i,12423597253743184840,14059237870575505421,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:1
                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                PID:7124
                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --metrics-shmem-handle=7908,i,3182702610437679488,13798559768349383189,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7808 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                  PID:7316
                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --metrics-shmem-handle=7204,i,7133169693051577865,10282103456212506785,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                    PID:7304
                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --metrics-shmem-handle=8476,i,530835755280009151,16369006162166868978,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=11644 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                      PID:7392
                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --metrics-shmem-handle=8092,i,6351644897544999281,2653102218512441985,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=9068 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                        PID:5160
                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --metrics-shmem-handle=7096,i,5432767903503103783,9588949963620645496,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=11616 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                          PID:5112
                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --metrics-shmem-handle=9160,i,10911394426817650607,16666936031859098082,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8428 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                            PID:4368
                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --metrics-shmem-handle=9788,i,10720270743465749752,7306365070960389323,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=11268 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                              PID:5796
                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --metrics-shmem-handle=8868,i,940420803781739120,7434164952659671499,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7932 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                PID:6536
                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --metrics-shmem-handle=11440,i,9493786228393337316,15427036544176571471,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=12272 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:8116
                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --metrics-shmem-handle=10104,i,4759708247077054931,9964546394236593975,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=9724 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:8124
                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --metrics-shmem-handle=11948,i,15710246327635385405,13860223388674318236,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7140 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:6400
                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --metrics-shmem-handle=11984,i,4323689342874637583,9908885971551659507,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=12284 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:4728
                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --metrics-shmem-handle=7156,i,9818542886250436407,4708998631314145363,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=7148 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:5832
                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --metrics-shmem-handle=6516,i,2301039135997696075,6646204535548265826,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:5484
                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --metrics-shmem-handle=8856,i,7656351540136589080,17817511204429179285,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                              PID:5700
                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --metrics-shmem-handle=8112,i,3774338565747638153,1528849027101530840,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8400 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                PID:7396
                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --metrics-shmem-handle=7332,i,6337347190758863259,9431171472057787814,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8396 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                  PID:7432
                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --metrics-shmem-handle=7364,i,14480782096405962188,13932177466864839173,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8084 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:5096
                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --metrics-shmem-handle=10700,i,1645241200922322370,5819010814025855726,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                      PID:7544
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --metrics-shmem-handle=11008,i,2412983353426351654,14557172198072665553,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=12244 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                        PID:6696
                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --metrics-shmem-handle=7372,i,10877839402282709446,10894538001844678423,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:7552
                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --metrics-shmem-handle=7164,i,13416393317261362870,12241512877038329940,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=8772 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                            PID:7568
                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --metrics-shmem-handle=11936,i,4628407897013246445,133751984237799172,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=4652 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                              PID:7572
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --metrics-shmem-handle=8996,i,4057354596482690996,2652006424225821308,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:3532
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --metrics-shmem-handle=9200,i,1984102912992864608,16713575027789702160,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=9096 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:4144
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --metrics-shmem-handle=7288,i,5815394450178857185,195355885266662499,2097152 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                    PID:5640
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=11304,i,8670308209831068735,8208055637124238418,262144 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=11028 /prefetch:10
                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:1344
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=896,i,10996284046815599754,3846395341638011160,524288 --field-trial-handle=1872,i,6527332412088033659,11603764161627568940,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:676
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:7120
                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                          PID:1904
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                                                          • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                                                                                                                                                                          PID:4480
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:6320
                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\TechSmith\Camtasia\CamtasiaStudio.exe
                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\TechSmith\Camtasia\CamtasiaStudio.exe"
                                                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                            • Reads the TCP/IP host and domain name from the registry
                                                                                                                                                                                                                                                                                                                                                                                                            PID:2888
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\TechSmith\Camtasia\crashpad_handler.exe
                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\TechSmith\Camtasia\crashpad_handler.exe" --no-rate-limit --database=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\CrashReportingNative --metrics-dir=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\CrashReportingNative --url=https://submit.backtrace.io/techsmith/252ca6f32f8a07a44ceb1046d56ffdae143ffbae8f1c0fb906b4c9aea03dad15/minidump --annotation=format=minidump --annotation=token=252ca6f32f8a07a44ceb1046d56ffdae143ffbae8f1c0fb906b4c9aea03dad15 --initial-client-data=0xa40,0xa44,0xa48,0xa10,0xa60,0x7ffffd4b1f98,0x7ffffd4b1fb0,0x7ffffd4b1fc8
                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:7504
                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\System32\wbem\wmic.exe
                                                                                                                                                                                                                                                                                                                                                                                                                C:\Windows\System32\wbem\wmic.exe /namespace:'\\root\virtualization\v2' path msvm_computersystem get caption
                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                  PID:4756
                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\System32\wbem\wmic.exe
                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Windows\System32\wbem\wmic.exe /namespace:'\\root\virtualization\v2' path msvm_computersystem get caption
                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                    PID:352
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-features=msSmartScreenProtection --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2888.1564.14679095963740968641 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1144
                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView /prefetch:4 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x18c,0x190,0x194,0x168,0x1cc,0x7ffff2ad5fd8,0x7ffff2ad5fe4,0x7ffff2ad5ff0
                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3428
                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2008 --field-trial-handle=2012,i,16760511979816762814,14277252222215518912,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:2 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                            PID:6192
                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2096 --field-trial-handle=2012,i,16760511979816762814,14277252222215518912,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:3 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6404
                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2372 --field-trial-handle=2012,i,16760511979816762814,14277252222215518912,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /prefetch:8 /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00
                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                PID:7020
                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3456 --field-trial-handle=2012,i,16760511979816762814,14277252222215518912,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:4340
                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3608 --field-trial-handle=2012,i,16760511979816762814,14277252222215518912,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6692
                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3768 --field-trial-handle=2012,i,16760511979816762814,14277252222215518912,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:3320
                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView" --webview-exe-name=CamtasiaStudio.exe --webview-exe-version=26.2.0.19099+305077fe3a4f3e9fe148bcaa26631962f2ed4b2e --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3900 --field-trial-handle=2012,i,16760511979816762814,14277252222215518912,262144 --enable-features=MojoIpcz --disable-features=msSmartScreenProtection --variations-seed-version /pfhostedapp:b154073187985de401242cf60ad31c09e7a00c00 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3856

                                                                                                                                                                                                                                                                                                                                                                                                                                  Network

                                                                                                                                                                                                                                                                                                                                                                                                                                        MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                                                                                                                                                                                        Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                                                                        Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                                                                        Downloads

                                                                                                                                                                                                                                                                                                                                                                                                                                        e5b276f.rbs

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5b276f.rbs
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3a38dbfd22270f5ffade1c3abbf7f2feb5f48c046305495dfc3b933bd34cfcb4
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        e5b277b.rbs

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5b277b.rbs
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 197a45f3f82954689e20e4f692708b7aed1892e2ab72c1d65f0ab82384948447
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        e5b2782.rbs

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5b2782.rbs
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c98e254c2ebcbd02e8b8a4b76388984fb2d9481590e2dffcf183455d8291025c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        e5b2791.rbs

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5b2791.rbs
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 704689c41bd614b8e052fb5d5b96db1b597dbffff0a95ad73a575cf5fe3683b9
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        e5b2795.rbs

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5b2795.rbs
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2d11eb77c64d38a9b5f82cef9ffae6584027e4233b2679fc490708a217e5d8a9
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        e5b2797.rbs

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Config.Msi\e5b2797.rbs
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1.6MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3cce1386c1d54de9f9ede4e96326b22cb4df1d82bbc911c841721cc7f10f5a9d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        DynamicCaptionPreviewBaseProject_pt-BR.tscproj

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\CamtasiaMediaResource\ToolPreviews\DynamicCaptions\DynamicCaptionPreviewBaseProject_pt-BR.tscproj
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 29KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 00d4d0d08f82d011676f5bfd5a1506b45f6dfaa07c8fafadbb1764099a9a0d12
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        imsss_v1p0delivery.xsd

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\HTML\SmartPlayer\scorm04_3rd\imsss_v1p0delivery.xsd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1decbd57c376729b009e77bf99847d305b796e983df24d391c691c85fd958f51
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Template.html

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\HTML\SmartPlayer\scorm04_4th\Template.html
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 677B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 efe1ce928484cdbef3d2d0011a30ec18ca5e6d1e4fa6dd4005056d3ff94b0b9a
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        embed.css

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\HTML\SmartPlayer\scorm04_4th\embed.css
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 790B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b88283422cf4f2547b4eb7ac5f485ca2983b752cdc13bf28cbe71217470e99d3
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        embedded-smart-player.min.js

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\HTML\SmartPlayer\scorm04_4th\scripts\embedded-smart-player.min.js
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e162e932023582744df842a0f1245bd72bcb0e8d788ef6528d4ca75ae511de87
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        techsmith-smart-player.min.js

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\HTML\SmartPlayer\scorm04_4th\scripts\techsmith-smart-player.min.js
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 572KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 65400b899a041aa879bf6fe4b929e10c765aff4b0f9a93354b10d76e55b59043
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        techsmith-smart-player.min.css

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\HTML\SmartPlayer\scorm04_4th\skins\Remix\techsmith-smart-player.min.css
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 107KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 69b0e8a62d53797661a9f7e6fee2c2de0900a2cc88bb2cf1c8764f6ae88c8db5
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Template_Player.html

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\HTML\SmartPlayer\scorm12\Template_Player.html
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 dca29a16675a68427f9d8fd2d5b1b9979972ccc3d62a7f1e35bf7343e10c4e95
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        plusWhite.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\Keystrokes\CommonImages\WhiteOutline\plusWhite.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c1ff7a05e9e939a5c67ac657add0755ca27aa679f8ccd3125d624278d6089795
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Keystroke_Clear.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\Keystrokes\ja-JP\Images\Keystroke_Clear.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f8e9d39e992d2c8bd374c0f29bd5e6a289786cff4beef684316f507294c31f32
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Keystroke_Clear32.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\Keystrokes\ja-JP\Images\Keystroke_Clear32.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ba797dfc7606a00de578165d0c11f60378e6be7e7a2deb689d81cab7f3734ce7
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Keystroke_Gray.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\Keystrokes\ja-JP\Images\Keystroke_Gray.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 781a24a0445d2c14bce23b1555c617d777cc549a221c04e3d7865dc940de9437
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Keystroke_Gray32.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\Keystrokes\ja-JP\Images\Keystroke_Gray32.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c17b26cb1dce4b1755f15ac80a4c1dd92d7d00702ccc3726882f4227e2bfb2da
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Keystroke_Traditional.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\Keystrokes\ja-JP\Images\Keystroke_Traditional.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7e82b24f0c0e7fbba47f3cbca6e4d509048967fa92b4d257096a7688d36fe44b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Keystroke_Traditional32.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\Keystrokes\ja-JP\Images\Keystroke_Traditional32.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 608e47d001901229e59ad5dd2c684f39ace965918dcd7729e693ec37c1b25666
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Keystroke_White_outline.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\Keystrokes\ja-JP\Images\Keystroke_White_outline.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 55d999ecd380557fb0b9294518251360c324cb82c2c0f2d46d1f01e8472b83e1
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Keystroke_White_outline32.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\Keystrokes\ja-JP\Images\Keystroke_White_outline32.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 781156fa6e1cebce3286b09328060abf1e12f0dbf3ec75738357a3af6ba24159
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        KeystrokeData.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\Keystrokes\pt-BR\Information\Clear\KeystrokeData.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bc783394d36adce6923477872a1aeb70751130a6878f1ac5bef0c9d849a3f44f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        KeystrokeData.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\Keystrokes\pt-BR\Information\GrayKeys\KeystrokeData.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 32dc3c928778b879a907bf7c84feb8f4965b50feaeb9be91228c94fc6b0f03ce
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Keystrokes.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\Keystrokes\pt-BR\Information\Keystrokes.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 472B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 294879afbd31bcff0dca791addfc10170a9098399dd7d807e8a2221393f78524
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        KeystrokeData.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\Keystrokes\pt-BR\Information\Traditional\KeystrokeData.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fe49a65c2a68eee5a8d69dcb61a801d74b922792d72467289b623a4dcd2b75d4
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        KeystrokeData.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Media\Studio\Keystrokes\pt-BR\Information\WhiteOutline\KeystrokeData.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b954712005a5b861da457d2b44cecf6826d732e60bf4b75593bb83dad8106af0
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Microsoft.Web.WebView2.Core.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\TechSmith\Camtasia\Microsoft.Web.WebView2.Core.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 589KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 88a3b62f45225a811cdb85df6dfd95c2bff9a0e43e3b04f813b125eaca56cc9f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Camtasia.lnk

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith\Camtasia.lnk
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 632f0a66a24872c455b015170972581b4dbd9fac886b38d0eeaa1747bb02f37a
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        ~amtasia.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith\~amtasia.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c6514ac3428415bfad0e4a87a21990592b8b38e17fe8c3715c325004962a98b8
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        ~amtasia.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith\~amtasia.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f58fe9ea17554e614e81e0bab7326cfcf5322b83f9166e77df87a4aafb5f043c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        state.rsm

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\state.rsm
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fc376306b3140e5c2a2732a704d2e7f4cdbd747d670fd96e29bed9d4d6d505dc
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        state.rsm

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\ProgramData\Package Cache\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}\state.rsm
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e34a5dcc55ee29254dca0795895611e0c0a36bb252a8ce31e0544e5e5af01416
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        vc_runtimeMinimum_x64.msi

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\ProgramData\Package Cache\{931A2CF0-2404-45EA-82F5-345735AE6A90}v14.51.36247\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 208KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bab5d0257e6a18a4a008e683442e3077b38172dd61af3cb1c588b46724a714e2
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        state.rsm

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\ProgramData\Package Cache\{A70C4630-EA5A-4956-B048-7EC8FF8670E9}\state.rsm
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c3b43953094e9ffbf5bebe16dd55ce78ef3d23f9871a2dcb56c335cde9f28180
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\D3DSCache\b7c78e20530d35f\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                        F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\D3DSCache\c59bf8fd2ebb78c6\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 64KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 40cee42ff50173585abb23170c4d098c083cd21588143cd85d9e12b05551ea16
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\D3DSCache\c59bf8fd2ebb78c6\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1008B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 13e0f78dc7a6d04a6ed7fba9aa7294b6c0315ac9c46b5bbdcdfbc2f0885dc253
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        200b8d66-0365-4c1b-a168-63cb296c3286.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\200b8d66-0365-4c1b-a168-63cb296c3286.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 144KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 78397e59bbd574f0b873d7778f30c565665ecb9a7a97bd02a2932a0d9996a7b8
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        348cc54f-c866-435a-b600-1855348a8bbf.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\348cc54f-c866-435a-b600-1855348a8bbf.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9f8ad32e3ed152c5df9695a9e6defcceb5a2e3918cc7e6cf5afcedec6cd3a3d0
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        6603053c-2fce-458c-8a9a-2b0ab6ff16cb.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\6603053c-2fce-458c-8a9a-2b0ab6ff16cb.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 143KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1416a3a22e1462732162cc78414e2d558b73c222f668c7a47d8f56156a665c7d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        8330ca71-81f6-4a02-b454-a1b9e8ce58b1.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\8330ca71-81f6-4a02-b454-a1b9e8ce58b1.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 144KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e3a59eb5d36b220dc08f70861bdd34d73198f3170b6e8de0698698fb3e53d05f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        86f62aa9-e56d-444d-9f04-3916381b3d24.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\86f62aa9-e56d-444d-9f04-3916381b3d24.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 143KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b77de6c2f71ffb3094743b7a3a4c6af508567c4bcc4997492703cc1e01c52007
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        904329c7-3bd1-4c76-9473-cea370bc7067.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\904329c7-3bd1-4c76-9473-cea370bc7067.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 144KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ae3055ef6391fe5704281c3298a453f463c016f55b10a0981b5178cd04203e14
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 40B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d8b9f6b3b9a215f0ce7a911dc243e42c4a408cef8396b955f5429a76fbc6a1ab
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                        068b1e6f-9c97-43fd-b18e-6b97a121afba.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\068b1e6f-9c97-43fd-b18e-6b97a121afba.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 19a32c07ffdd4bd88c9cda23335d447802dc4132f70042d1df317450027fd45e
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        5081d22f-64f6-4eec-907a-fb43fea167ff.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\5081d22f-64f6-4eec-907a-fb43fea167ff.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 474af81790f1ba24b5afce0f971f1c8a6c58e029e3bf1f1664143a8657f97e30
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000025

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 063db433e1a9b5f2cb2349ad748778e1c9e8cb4958413b805963127fd7ddb071
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00002d

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 23KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b73f6e1f9c2b97abb6100e7b09619c209fba23c547b77b80292af072f5092c98
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000032

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000032
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000034

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000034
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 97KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6e9619cbffb6bed8cd7172c3bfb896f170dd8aac932a3f1ff11bc035b9d53e6e
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        temp-index

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 678a77ac0c7e0704a2002679af38d45da1e8b03ab2d408b6ffd2caa1162794f9
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 995ee6eec5e894c41152b6ad62db287fd3639effca0b1b56139d26c2d886f6b8
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 593B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        craw_background.js

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 531KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        360895ea-0f58-40d3-abb9-2cf93a670ff8.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\360895ea-0f58-40d3-abb9-2cf93a670ff8.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 41KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2effdfabedfd70c3e8a8136598f2ae0084fe49495423e2cd2a8f2c51bf1a26db
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        55efc097-e39c-48a3-9a3a-91232bee173f.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\55efc097-e39c-48a3-9a3a-91232bee173f.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9381770a221e864a67fa9e8f45ff78cf772b71838ffab26f153b52e4c360efd7
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        temp-index

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 120B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 502c0f996e52c762d89ea988ce760740748b9b3aad631c7f2c212a5898632c9d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        temp-index

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b1cd1af460333b4c0fbf9425454d399300aa7fdc680163549c18eddbcea17281
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3ba08f16025a80b2369d6271e0e5ca36febd3f3b066c17f665397dbc5c34a5db
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                        d7b174c0-7fd3-489d-b272-75b7b0374ede.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\d7b174c0-7fd3-489d-b272-75b7b0374ede.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 111B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        c738b575-36cb-4776-a569-0fa88e7d51e5.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c738b575-36cb-4776-a569-0fa88e7d51e5.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 615d6d935883ef3c6cb5c0009034c85a3dfb18a51abd022c289b96ece6b0cf0f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        c7d2a501-9912-4ab0-9aa0-5272d08b1519.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c7d2a501-9912-4ab0-9aa0-5272d08b1519.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 6B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                        cb39143f-49a9-4b64-93a1-faa8aa223523.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\cb39143f-49a9-4b64-93a1-faa8aa223523.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ec4c79d2edd02872235889c59156ff5bf60a61b30d880252522221d8b4af1d48
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        f127dce2-6127-46da-a7c4-0f2d56656827.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f127dce2-6127-46da-a7c4-0f2d56656827.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c5bb53289a819f95372194e65d5713d2615c304a4bfc2d0ab035c3185250a565
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        fec25f3f-b0d7-4a27-8d08-079f8746de8f.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\fec25f3f-b0d7-4a27-8d08-079f8746de8f.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 243d1aa1cb71fc9b840f159650444db08f84e06452b8958c5fac7597785eeb9f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        thumbcache_idx.db

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3c06362149392a5e75f343af74842523bffbd89014764d27852152f9731e7920
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        thumbcache_idx.db

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 783a565ec41bd3345cac8498a214eb307a52ced12ed0a7c8177025fe97261d23
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        thumbcache_idx.db

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b62775e119a3cbb550ba6309adb830698bb124847c6bc8c7a823138651a3a24e
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        thumbcache_idx.db

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 28KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 93e628e85823334b39bb65da60af0a4d6a4ba89b2198cb66852218613551bf39
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        settings.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\TaskManager\settings.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 51de0bd7f8c1719857ad070c0438ee996fd45965445da556bbb17d69f381b179
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        653e1cae842f77e41a.cache

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia Studio\License\653e1cae842f77e41a.cache
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 5B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4df23ffdf2069ef14d0f024da02048dd223c3170ea54c4e2924b3cca4e4b759b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                        653e1cae842f77e41a.lic

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia Studio\License\653e1cae842f77e41a.lic
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e47c7d70b30f4c622db012e4069f54766f47020950ad2bd056b73c8d237567c7
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        653e1cae842f77e41a.lic

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia Studio\License\653e1cae842f77e41a.lic
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d18f0fd3d1da11ed3ee9673fef73cf0e5300ea667adcfa85c236bb59350aaae3
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        653e1cae842f77e41a.lic

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia Studio\License\653e1cae842f77e41a.lic
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 32c7d5c685a4b604eccf58feb35202fdc959b9ebef2a7b905b55a742f050116d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        653e1cae842f77e41a.lic

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia Studio\License\653e1cae842f77e41a.lic
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 51ada74a98387ca6c623f8d71a0793acf46c97d17160f703784764db9651b1e0
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        653e1cae842f77e41a.lic

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia Studio\License\653e1cae842f77e41a.lic
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 847b02d7f883c15cc2e076186cf8ffc9d44d429b727065909f4fd02556954fb0
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        653e1cae842f77e41a.lic

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia Studio\License\653e1cae842f77e41a.lic
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0540ec769a15a45aa9233106985153cda77ee3f8c46dab0533708eec50341c49
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        653e1cae842f77e41a.lic

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia Studio\License\653e1cae842f77e41a.lic
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 cc66871fdf4b434d5da7205d7896ba05d26ece7a4402ac4a3ab875ac4b68d4f2
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        653e1cae842f77e41a.log

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia Studio\License\653e1cae842f77e41a.log
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 54KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1723673e4e7dbd2db1e77e1cba29ebd962864cca41fc02baf1d1cd36cf783006
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        TSCLicensing-Error.log

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia Studio\License\TSCLicensing-Error.log
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 17f8038f6b5aa099004738e4926a3a836ad80401fc99dc8b7eeb029d6308fae9
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        TSCLicensing-Info.log

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia Studio\License\TSCLicensing-Info.log
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 20KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 15ef474884ab21b6b9c609f9f473f3888a5f93adaf20260c19f0498647c7efd4
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\CrashReportingNative\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 40B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b5b99114ee4e29b8d5f5353ecf56bdb308e74b6cce29019a95f9cbc129002c3b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\Features\Templates\05e47892-deab-431b-be15-a7ca8e748e67\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 158B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5f0c13ebe83b9e8b6a03f73b1df845c63dfab21f17b1a483861fe646fe68a791
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\Features\Templates\156c688d-9628-4b13-b789-96863ca63003\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 152B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 52dd7525e925741cd376cfb573defb25d3fc6acd40d396b9a30798bd14cb5877
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\Features\Templates\2cc71da2-a166-4d80-8d0f-116072d2e902\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 158B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e32c18d06cea025968415f18f0b32398c324e89a0375dc10cfc4f030d5885f68
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\Features\Templates\3972687b-7599-4189-a6cd-5660b3a08029\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 157B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0db19fe04566e3f3b7db29149d0d1431444e1c8f276db693710b08a37c9acb65
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\Features\Templates\43164729-fee7-4ac3-ab6a-a9a65524b630\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 153B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a0e1a4ba0db85892dd13d0f130403998ad3945ab11ceddf4db067828b57d4eea
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\Features\Templates\5c26c478-db94-484c-b501-5cff82462e22\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 157B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b0cf9ba2577a500385355d1244d437ff946f27a3879aec628fa29e2622d6fef9
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\Features\Templates\7a3c275d-d6a3-4362-82bf-6050b6fe53ab\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 159B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 cbd71fd9f30e275728d2ff9ecbd90102c3ba64aefb3826b267226be35292491b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\Features\Templates\7d23c4fd-2923-47b2-889b-cee2ff951780\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 159B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e8a017ec8f05e039899381420e9cf8f0cb114414672731b739cc70e5760c2ce2
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\Features\Templates\cd2c9f07-a917-48ee-b7ed-f2ecd49cb622\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 158B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f996c0e7c8791e35bc3febe3e4ef33c303ddf3149db6a3ec4dc54c88aed3325c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\Features\Templates\d0ebdebb-6cdd-451e-b916-f126f97b4d0f\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 168B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9ee16db503ee568bfcee60735d1ac365703c49261d0d0aa1ae7a2cb2598c22bd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\Features\Templates\ec1c625b-6326-446a-8217-34f7f5b9d871\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 157B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b6b067636ad2448e9da5d730eb4a2887fac6e887ca6a7702f4d1f7024d271525
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\Features\Templates\f466a932-af45-4a61-9f8f-f703590002bd\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 164B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 67d9dfdb2c0749ba50ddc40343d90c5d4ac34a2e58e3f5ff4c3c4878758872c2
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        ruiconfigV5_amyrttbmei_Camtasia_001IUGIDGQ54V.cfgtmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\RevulyticsFiles\ruiconfigV5_amyrttbmei_Camtasia_001IUGIDGQ54V.cfgtmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 36KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 98ff949298d3d2cbbc2d9762ca3359318155d7e0e75001180f129d73d647152e
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        ruilogV5_E111B0F52F1749D6_amyrttbmei_Camtasia_001IUGI1TRO6V.logtmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\RevulyticsFiles\ruilogV5_E111B0F52F1749D6_amyrttbmei_Camtasia_001IUGI1TRO6V.logtmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 806B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 27e9b92e6784a8a664d198da8c3666501bcb797ba92283afba3c4dbacb848b84
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        ruilogV5_E111B0F52F1749D6_amyrttbmei_Camtasia_001IUGID86AIL.log

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\RevulyticsFiles\ruilogV5_E111B0F52F1749D6_amyrttbmei_Camtasia_001IUGID86AIL.log
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 252B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f8b59ad21c6cd31779f4a980e3c638fb77a6167f19deff98cc19e03d76f494e4
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        ruilogV5_E111B0F52F1749D6_amyrttbmei_Camtasia_001IUGIDGQH0A.log

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\RevulyticsFiles\ruilogV5_E111B0F52F1749D6_amyrttbmei_Camtasia_001IUGIDGQH0A.log
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 908B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 eb87b1056fad0253623be1ba5560aa9e0fc2447bc4cd58329adddc6c9ba7c86e
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        ruilogV5_E111B0F52F1749D6_amyrttbmei_Camtasia_001IUGIDGQH0A.logtmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\RevulyticsFiles\ruilogV5_E111B0F52F1749D6_amyrttbmei_Camtasia_001IUGIDGQH0A.logtmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 790B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8678e65af51ef80517485786c5e82077f46af6232a22510ec08c43843425135c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        ruilogV5_E111B0F52F1749D6_amyrttbmei_Camtasia_001IUGIO7IFV3.log

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\RevulyticsFiles\ruilogV5_E111B0F52F1749D6_amyrttbmei_Camtasia_001IUGIO7IFV3.log
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 649B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8e81b33a532235e42bba3c00385cd3908ddfee461e7ceecae92ae83661c33e1e
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        ruilogV5_E111B0F52F1749D6_amyrttbmei_Camtasia_001IUGIQK4JJ7.log

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\RevulyticsFiles\ruilogV5_E111B0F52F1749D6_amyrttbmei_Camtasia_001IUGIQK4JJ7.log
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 252B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ab2275eae35f7e61bc7cc42df748246edac0d6dd9026200e6a77a2b4ea777602
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2ea9e3700ff6a1721ccd7b521c405ebf3baf2c767063ee6b86317e3ccc505fbd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                        settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8b9519a178014795eb1eba489922c743594f9c06ba94de7c4ee7ff28cb6e30da
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c3152644c5a52fa06fbd94c57a44f54700d0f5a274bf5a3adde3e310a9fc36f7
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 110c8c47e6d708f8f6a46656889f25f925f827ea2733813719461453ad014a8a
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 62a26daa635e5e17c6d6156661219c4bae5d41c99638baa24df4176056ca7dab
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 915a4811f86aea257a2a7d715709e60a791806209f887a90fcab72a5114d68c7
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8a3f9fb37474ff155d20249231aad6b8d1582aeafc772cfa6cfe4738ca918615
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0958c32bcb03bd2455c768be72e4e2f3d785732dd43a80836725fee9ac52a2ad
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                        settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e236228cb14e0cb513d946562fa28555a9d503d5009b2a71ad89dda187547544
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        07580043-9417-4693-ae7f-cc22361db3c9.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\07580043-9417-4693-ae7f-cc22361db3c9.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c086c69515dbfe25e51b44dffbf8842bf6bbdae7293f40243038be930e6ecf3a
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        089c878d-a582-440b-ac10-e4d63815d994.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\089c878d-a582-440b-ac10-e4d63815d994.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fe76f442747373c20e18dd04fbd7d44901c84a934a3f8f99f78a2f6dd1a1546b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        1544980b-f972-4d92-8e98-9bac72cf9564.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\1544980b-f972-4d92-8e98-9bac72cf9564.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 72d9c2bbe89341c0586f2af1ada01cd169b08f00281e80bf93813a9d69c176ca
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        6700b07a-b057-4752-8798-8a8f55dc7f6a.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\6700b07a-b057-4752-8798-8a8f55dc7f6a.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bf6917d5e07cab7ec2124e5f4f291c33e929c0046ca41f7af886160df91a9a8b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        793fcd1e-f063-4c01-b6db-44572d78a35e.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\793fcd1e-f063-4c01-b6db-44572d78a35e.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 60cc92547057129a1e2b3acd65d7ee051b83cfe2f92ce60062ec00b3f4bf9c11
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000024

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Cache\Cache_Data\f_000024
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 105KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1a9bbfb448923e8e3afb42018f246480212cd0e3af131398a6091f3b0614019d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000029

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Cache\Cache_Data\f_000029
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 49KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ae1f58bf2c19439a1298d9ca9ed72dec9906f93aea70dc5d7054c5724adfc6c4
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00002b

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Cache\Cache_Data\f_00002b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 80KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7912fe8dc67d3c99d3be2a98ce076a2795159541fd3b478786722d807fa4c22c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00002c

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Cache\Cache_Data\f_00002c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 25KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3f7586ef46e5bc3b86bcf921744c8cffc5967167d497fcfc3aad6a43350a6081
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        temp-index

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 744B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6225e9d3edf0f32df15b3fa3eb2df594803ad82a804aac62748b390d5be36e70
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        temp-index

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 907d4322a99872abc893b1d28d82123046636867fee395404c73e2389a97c9f4
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        temp-index

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 39699b7ccc21b0d25c4770da5c46957ed45bad0165f159eba7875dd580b11067
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        temp-index

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b306ef0e9dc1d2bc5984a9e8ab2828c7b8b31b10b7bc0bec064d9aef792b83b4
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5f984211254e9df5072b8b292ab3f8d6f980e0a76b3b63e6afec7821808e794c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                        ExtensionActivityComp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\ExtensionActivityComp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9827429749037198cb3d19a851ccff2adafad344fbade7220aa022d3c9e2fa85
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        2f4bbc37-4d91-4afb-9b14-b8f2ec8e284c.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Network\2f4bbc37-4d91-4afb-9b14-b8f2ec8e284c.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 82da0fe59efd3d9601500f1a80b89655f3533d670923ec97a4cfcc25ae647853
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        34070537-d474-4e5f-a752-fe0bff247ead.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Network\34070537-d474-4e5f-a752-fe0bff247ead.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d917775a12d1454f9d57a1d7e903e0e25c1e59f4353fca25f7ad664c65afda63
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        3b3229c9-47a6-42be-ad30-6ef74b02310e.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Network\3b3229c9-47a6-42be-ad30-6ef74b02310e.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 26998afe68bf4c55604ac83551cd8ef96c5b9bdbe0f80556a62873247ac6470d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        5d4a30fe-69f4-4e0c-a7e4-0569593b4036.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Network\5d4a30fe-69f4-4e0c-a7e4-0569593b4036.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 08ed46fa10ad2e05c5e23e8a12fb5b53692b6aa6fa60a505fabd1b17e06592a1
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        61d91d55-103c-420c-a7d3-0bbff173f517.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Network\61d91d55-103c-420c-a7d3-0bbff173f517.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 80944a31e76b6058bc17799eab26863c82b31bdde53dec62c223e4e037dc6812
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        78b5d66f-839a-41da-8a58-93a74d37057d.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Network\78b5d66f-839a-41da-8a58-93a74d37057d.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 40B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                        79a764c7-25e2-4835-9580-9f508b46c9f2.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Network\79a764c7-25e2-4835-9580-9f508b46c9f2.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f424d1284c84dda2a75a75a7d88da08f6b9324a6676479808b119e38c5573382
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        7a0f822f-b60f-42e0-8967-3c5561451bdf.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Network\7a0f822f-b60f-42e0-8967-3c5561451bdf.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 26d097c832b78c66173402b7ceb678a5102e6ac8da1ecf7790aa4432ced8f31b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        9dc23954-95bf-42e6-8a23-0386572b606f.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Network\9dc23954-95bf-42e6-8a23-0386572b606f.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0eba0a95593fe4204b288ea46376a9dff5372a8ceba59850dbe33d3bf35b7750
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 59B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        SCT Auditing Pending Reports

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                        d85c6447-23f2-4e83-8807-f9daebd73a94.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Network\d85c6447-23f2-4e83-8807-f9daebd73a94.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 947e24dac2a094b6e6a71174e13d6f638b27d980d8aaabab6c6bf04b2443f63b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        ed9f8a41-55c3-4f45-a2dd-12f21d8fee45.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Network\ed9f8a41-55c3-4f45-a2dd-12f21d8fee45.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fc15a0f77a14d907a551abcac4d2f96e43ecb5c8b7df60d28b0eddf7c72525ad
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        fa5a7447-4e6e-4585-a265-37b49dcae3ef.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Network\fa5a7447-4e6e-4585-a265-37b49dcae3ef.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3c2dd03855cde56131d35f417a5b6f3c8aff239c4fc6ef0460c485ded04f4b6b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        index

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Service Worker\ScriptCache\index
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 24B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                        temp-index

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b66ad2d285d90ca0a3354a0d90dc55b70980d242d85ca95e2054d8043a602a3b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7e900da62ee3778ea05d414535c5d711e1e6861565294bad533917f780ca267f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                        CURRENT

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Site Characteristics Database\CURRENT
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 16B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                        MANIFEST-000001

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 41B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                        d62e7b31-48cd-481c-9f89-b04c6eaf4c54.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Default\d62e7b31-48cd-481c-9f89-b04c6eaf4c54.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 cfb95018a00a171c567998373138bd7e2d3089a0b134ea08f56fefc287bc640f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        data_0

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\GrShaderCache\data_0
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                                                                                                                                                                                                                        data_2

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\GrShaderCache\data_2
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                                                                                                                                                                                                                        data_3

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\GrShaderCache\data_3
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                                                                                                                                                                                                                        data_1

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\GraphiteDawnCache\data_1
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 264KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                                                                                                                                                                                                                        Last Version

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Last Version
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d75607a88bb0f572f8863a3ea4737b635664178e97e0b7cb057887f2736fe3fe
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8ea043455cfcdd10f90d410d989781adfeeb5c44588ab1a637697c723aa318ab
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 17f0e11a9081ec50223dfdc15d026c99fb12f508abb430fff0306e57e80eb7c2
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Variations

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Variations
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 86B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Variations

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\Variations
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 85B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        bb30aa77-20f9-4427-b6b2-5d3ba9f12b48.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\bb30aa77-20f9-4427-b6b2-5d3ba9f12b48.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 68e1d306c79d1a1cb5b380c7b2bfa3f3d2870040e329d2f749463a98864778e7
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        c6edebd7-33b9-4022-afd7-7468e22df0eb.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\c6edebd7-33b9-4022-afd7-7468e22df0eb.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ba3418eeabef911d3f455f155e5196c526c193c725b7b515e6e617aa326059e9
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        cdbc2e90-2c38-44c8-8fbd-a2337e8f7809.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\cdbc2e90-2c38-44c8-8fbd-a2337e8f7809.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 14671a679a23f82e845cbcf7738ea9ca7ff2e5b7372efcaf3fa75de393c7fb5f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        e3df965b-c82a-48cf-8096-2f43258b5080.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\e3df965b-c82a-48cf-8096-2f43258b5080.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 88fe3e19dca47bc18f013f02fd8bdc51586fc0f242b73fce1a9948f44449a0e3
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        ec2ddbc4-ffe8-4ec5-b290-2ef9d3cae6c6.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\TechSmith\Camtasia\WebView2Cache\EBWebView\ec2ddbc4-ffe8-4ec5-b290-2ef9d3cae6c6.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 15KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7ebdc3e23900d68381728059b193b40eebe57469d08c40e135a92d25b0be9893
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        176620e4-1b38-4ac6-936f-34e779d061f9.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\176620e4-1b38-4ac6-936f-34e779d061f9.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 242KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        f466a932-af45-4a61-9f8f-f703590002bd.tsctemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\220066df-b5ff-485a-88b3-5de338399072\f466a932-af45-4a61-9f8f-f703590002bd.tsctemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1.4MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 96fe540b699415fff0bbd302e828015c41bcb9b614c129b077a81f166d76cc96
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        f466a932-af45-4a61-9f8f-f703590002bd_Template_Preview.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\220066df-b5ff-485a-88b3-5de338399072\f466a932-af45-4a61-9f8f-f703590002bd_Template_Preview.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1.9MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c4f3cac2d3b2f2c4771ba4d7ac984e5ba94098473033f66aa0a518870978df83
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        laptop-stroke-16x9.pdf

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\220066df-b5ff-485a-88b3-5de338399072\laptop-stroke-16x9.pdf
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 eba6f2597d2471364eeefdbbdf3ac97021e283f4e69af26778eeafc7e05c2d1b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        replace_this_clip_wide.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\220066df-b5ff-485a-88b3-5de338399072\replace_this_clip_wide.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 794KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8f76ff6176e7838c53a317e9f8b1121eadebf13af4fac760d7710bd5f7871316
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        replace_this_clip_wide1.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\220066df-b5ff-485a-88b3-5de338399072\replace_this_clip_wide1.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 817KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 364355667ae832dbddc89dbb3eef2b9d4c89363923815dff01e6e841c166ce8a
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        replace_this_clip_wide2.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\220066df-b5ff-485a-88b3-5de338399072\replace_this_clip_wide2.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 770KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 46f7967da2b02057eea0b337bf3de0bbee0cf9252b8c1a205b15aa756ecb4967
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\220066df-b5ff-485a-88b3-5de338399072\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 164B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2a4905ec5f14892a0c2f5f6297a49409faaf38b4410a03977f588c87d5412358
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Placeholder-888x1920.pdf

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\23534fba-c208-4865-b45c-4b453470642d\Placeholder-888x1920.pdf
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 54KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 065717de4875bc24bbf766925eb025fd95a1a1eabe227d364cf268103d6e9a7f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        ec1c625b-6326-446a-8217-34f7f5b9d871.tsctemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\23534fba-c208-4865-b45c-4b453470642d\ec1c625b-6326-446a-8217-34f7f5b9d871.tsctemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 181KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 79d61848fdd10919d04b6b8c98fa71c95b44a091d0cd8db76aa77754477f7127
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        ec1c625b-6326-446a-8217-34f7f5b9d871_Template_Preview.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\23534fba-c208-4865-b45c-4b453470642d\ec1c625b-6326-446a-8217-34f7f5b9d871_Template_Preview.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 337KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f1b4670f5bf052e03c0c4f9a41140714117a3a5e39db13a91dfe7d30f977c70d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\23534fba-c208-4865-b45c-4b453470642d\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 157B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9f58ad90d1caf98bfcdd2231206be778c3294d79b8a93501a3c26eba8c950928
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        cd2c9f07-a917-48ee-b7ed-f2ecd49cb622.tsctemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\70c55acf-713b-41be-930a-6cd70f116001\cd2c9f07-a917-48ee-b7ed-f2ecd49cb622.tsctemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 976KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 05306ff5b6493f1067593be271ba79a754e758a3a70bd8a690d09198279e5f0c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        cd2c9f07-a917-48ee-b7ed-f2ecd49cb622_Template_Preview.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\70c55acf-713b-41be-930a-6cd70f116001\cd2c9f07-a917-48ee-b7ed-f2ecd49cb622_Template_Preview.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 698KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 32069b1e5626a42851c02144642692517fde2240550155d33490f41a16b0bd24
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        stars.tscshadervid

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\70c55acf-713b-41be-930a-6cd70f116001\stars.tscshadervid
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fdd58951e704ea47fd717ebb2772b7d3cf452befb407d9d36fd95b935deb4f01
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\70c55acf-713b-41be-930a-6cd70f116001\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 158B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c338abdf60c701d2323bf20467059167db0c0e4cc50799f7560a74e58862363b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        05e47892-deab-431b-be15-a7ca8e748e67.tsctemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7130e848-a3be-44ca-81f6-1acec637fa29\05e47892-deab-431b-be15-a7ca8e748e67.tsctemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 321KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 38f25f06cbc3469d34a25e252d7a4c16250a08d2232c9ec1d816bdffcf40afed
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        05e47892-deab-431b-be15-a7ca8e748e67_Template_Preview.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7130e848-a3be-44ca-81f6-1acec637fa29\05e47892-deab-431b-be15-a7ca8e748e67_Template_Preview.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 493KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0dfbe0b7b2fbd5607a9d6a9d0e8816a02ac5044fad3fad2bb890f9cb3fbfddef
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        IMG_05121FC74754-1.jpeg

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7130e848-a3be-44ca-81f6-1acec637fa29\IMG_05121FC74754-1.jpeg
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 967KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8960ed7026c077ace6564d19c3de1f5393a6082f6e45a8f92b5d5da55820da14
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        radialgradient.tscshadervid

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7130e848-a3be-44ca-81f6-1acec637fa29\radialgradient.tscshadervid
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7f6b2bada54425b1cc008f2949664616c24a97da3a127e1e13533c2d1900fb31
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7130e848-a3be-44ca-81f6-1acec637fa29\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 158B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a5eeecf0a7ec919c7160989af40dd18aa282a9613e3269b68e15bfaa3fb36ed6
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        43164729-fee7-4ac3-ab6a-a9a65524b630.tsctemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\73c63c27-04cb-45a3-a59d-bfe8b8c09615\43164729-fee7-4ac3-ab6a-a9a65524b630.tsctemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 558KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3db7639471333ff208a73f955513883e6ee8e3540beda8935b98ea58563d591a
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        43164729-fee7-4ac3-ab6a-a9a65524b630_Template_Preview.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\73c63c27-04cb-45a3-a59d-bfe8b8c09615\43164729-fee7-4ac3-ab6a-a9a65524b630_Template_Preview.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 388KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bfdbb0923eaeb69b5a105738b6ed3ea3be6016334bb3b6fb8f957a3be2b246ba
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        radiallights.tscshadervid

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\73c63c27-04cb-45a3-a59d-bfe8b8c09615\radiallights.tscshadervid
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 226f8e50de310d745cbb6308a756acb4ccd8ee03e10a66d3de89d5e45c42b5a1
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\73c63c27-04cb-45a3-a59d-bfe8b8c09615\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 152B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a514f60d0f0625a6af50bed6b9b9683b56373541c5625117b0a050d050106df6
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Elevated App Demo Vertical.camtemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\78d74522-9d71-4c55-be6b-c612c81e8537\Templates\Elevated App Demo Vertical.camtemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 15.1MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9a1c62cabeb14a82bd0acc0edd0be1977a792025db365753d6d01d443bd6710a
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Elevated App Demo Wide.camtemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\78d74522-9d71-4c55-be6b-c612c81e8537\Templates\Elevated App Demo Wide.camtemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14.2MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ede027524972f34cba2c9186a6675b592b0305c4bb9a80cd47aa379d38f00411
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        EmphasisFX.camtemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\78d74522-9d71-4c55-be6b-c612c81e8537\Templates\EmphasisFX.camtemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 9.5MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e20259670bbfc9c3dcbe1363c70084bcc83987fba87a64784603fb00bc6a4c2e
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Floating Screen.camtemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\78d74522-9d71-4c55-be6b-c612c81e8537\Templates\Floating Screen.camtemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 500KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0ebe3758c7c1f3c4e145b38e8cdbc70f4511613d8f531618d9feed9d14e2db29
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Mobile App Promo.camtemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\78d74522-9d71-4c55-be6b-c612c81e8537\Templates\Mobile App Promo.camtemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1.7MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b72e91d1f187be6db58bd7e255c2a4a04d766bcc0c20da142de04c404cf73bd0
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Mobile Background.camtemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\78d74522-9d71-4c55-be6b-c612c81e8537\Templates\Mobile Background.camtemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 234KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2287700123d9a9f4b3f4734dfb3d4421cce03c916a59149a2191d11b05ac796d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Mobile Showcase.camtemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\78d74522-9d71-4c55-be6b-c612c81e8537\Templates\Mobile Showcase.camtemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 577KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 dc86dd462c5649178062c6a2d97ec95e2111eda1dc9d700ab380593cf2fd63a4
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Tablet App Promo.camtemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\78d74522-9d71-4c55-be6b-c612c81e8537\Templates\Tablet App Promo.camtemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 988KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e892c35fc5cded2bb8ab748f2ff0ddac10a67fccffdfd6a7c21b6387864da527
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Tablet Background.camtemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\78d74522-9d71-4c55-be6b-c612c81e8537\Templates\Tablet Background.camtemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 729KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bbbf6256b9a517cc2ed7d825ce5005da65585988fdab9f7ec60dfd248843fbe5
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Vibrant Mac.camtemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\78d74522-9d71-4c55-be6b-c612c81e8537\Templates\Vibrant Mac.camtemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 956KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d39d5f29d2990b8ab262066f7a4fa15558043b40a28f73842fa903545d8d1384
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Vibrant Notebook.camtemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\78d74522-9d71-4c55-be6b-c612c81e8537\Templates\Vibrant Notebook.camtemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1.7MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7f3d71d08e7ddf32ff1eb5d8280e0c59b67e76d7dae4802dca56206464305a1f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Vibrant Windows.camtemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\78d74522-9d71-4c55-be6b-c612c81e8537\Templates\Vibrant Windows.camtemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1.2MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b9309a24db4755a3c1e1f80b0476a6debe71a1d9bb54745560475e3853de2090
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        7d23c4fd-2923-47b2-889b-cee2ff951780.tsctemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\80ce3217-e9fe-414d-a5ac-8f5018530f80\7d23c4fd-2923-47b2-889b-cee2ff951780.tsctemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 322KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 18e1bf9513d4c5e32be469cd864e4ba5483d85b6eebc9fb4a9865d093e070d0c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        7d23c4fd-2923-47b2-889b-cee2ff951780_Template_Preview.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\80ce3217-e9fe-414d-a5ac-8f5018530f80\7d23c4fd-2923-47b2-889b-cee2ff951780_Template_Preview.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 320KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e28b41fec9609668dbec6e0a4022d9c1b3236e2a8d060f121785a9e6c4b80306
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\80ce3217-e9fe-414d-a5ac-8f5018530f80\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 159B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b0f94c654ab974db11d009b489df5e95855c2f7e5ee2810bb152cc4bb1c470da
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Burst 5.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\93be51d1-ba26-4a07-af66-ae983eb20e7e\Burst 5.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 361d556cc2c41ad91407bc0efade049b8b284151690648c2b48dd44eee16bb1d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Burst 6.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\93be51d1-ba26-4a07-af66-ae983eb20e7e\Burst 6.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0a21442c4bf008612f1c8266e23774b42fc664cd66e8da37e052c126ab90d953
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        d0ebdebb-6cdd-451e-b916-f126f97b4d0f.tsctemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\93be51d1-ba26-4a07-af66-ae983eb20e7e\d0ebdebb-6cdd-451e-b916-f126f97b4d0f.tsctemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1.3MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ad572f0cf635a5c14b5ccc351e06b65af43a277d5f64edb94e2d40214a91abd6
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        d0ebdebb-6cdd-451e-b916-f126f97b4d0f_Template_Preview.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\93be51d1-ba26-4a07-af66-ae983eb20e7e\d0ebdebb-6cdd-451e-b916-f126f97b4d0f_Template_Preview.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2.1MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 aff8fea0360047ad5cd5af0610cfed6a23c8f338cd59cb3912e884b886596c44
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        electric-throne.mp3

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\93be51d1-ba26-4a07-af66-ae983eb20e7e\electric-throne.mp3
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 5.8MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a60bafbb3941ce1e9004270e427cdd8f880bb426b2c1d288063733dfe6fd8c22
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        fourcornergradient.tscshadervid

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\93be51d1-ba26-4a07-af66-ae983eb20e7e\fourcornergradient.tscshadervid
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d3679f66b4c941e674aa732d0cb9b89aecdb8de14a3f2400b0c949b755705f51
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        jd_clouds.mp4

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\93be51d1-ba26-4a07-af66-ae983eb20e7e\jd_clouds.mp4
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2.2MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 91b49ba64d94ee0ddd7cca6bc58ef1f7cb360c93a6847a28efab4b5e058c89fa
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        mac_pointinghand.pdf

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\93be51d1-ba26-4a07-af66-ae983eb20e7e\mac_pointinghand.pdf
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 81d81cddc7b9a4091390d7f512137219565371bd4c9938d2706f8af74d2dcb32
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        replace-this-logo.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\93be51d1-ba26-4a07-af66-ae983eb20e7e\replace-this-logo.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 562KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a7b9382d59d8714c64fbb82a27c64651e7f9003767e90b3adf503680f8c540ae
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        replace_this_clip_vertical 2.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\93be51d1-ba26-4a07-af66-ae983eb20e7e\replace_this_clip_vertical 2.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 832KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 129f7dd4ec193110ffe2b3f3a51f1528655bd5472c358857c0e97eecf45060aa
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        replace_this_clip_vertical.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\93be51d1-ba26-4a07-af66-ae983eb20e7e\replace_this_clip_vertical.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 818KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2b0a69227ce1ff21f3af7956ca9360b22ca1071da0c9958a8990828086ddb2c1
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        replace_this_clip_vertical1.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\93be51d1-ba26-4a07-af66-ae983eb20e7e\replace_this_clip_vertical1.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 791KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f1617e538c25a4ef19b19bd3f9a147265d6a71215bee23d323ccd12286a31f8b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        replace_this_clip_vertical2.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\93be51d1-ba26-4a07-af66-ae983eb20e7e\replace_this_clip_vertical2.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 757KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b0c856bd6f224e617babb1893e3aec689e9da663eb34bc4a8e99f0cebd04ce1e
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\93be51d1-ba26-4a07-af66-ae983eb20e7e\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 168B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c46cfc884ddf5e4e2ecddce60213f4c661de5dcff4acfe3ca9baf25f32dcca1f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        156c688d-9628-4b13-b789-96863ca63003.tsctemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\156c688d-9628-4b13-b789-96863ca63003.tsctemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 7.7MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3a9cbd50f170e61f8243d5556597ebd7b22ab7a6ecc670ccc48d297feabc0abe
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        156c688d-9628-4b13-b789-96863ca63003_Template_Preview.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\156c688d-9628-4b13-b789-96863ca63003_Template_Preview.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 452KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fb5d59f2a509af2dc43745d5f83ea7e930bbd7df38f302d3487b885e3335d1ca
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        A-Rotation-Into-Place-Up-Mac.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\A-Rotation-Into-Place-Up-Mac.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e35fd50a1dc3c812a3ac459b54a09c041c3988c5eae0e5eb6cf3670079960246
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        A-Sticky-Exit-Mac.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\A-Sticky-Exit-Mac.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 85436da40a67b05d0c472e5eb3623c1a7c8e3e86ad3db833919985c87e8371e1
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        An-EmphaticSlide-Left-Mac.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\An-EmphaticSlide-Left-Mac.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2d498c4572338973e3ffbae5e1f4ba4376fd6bc969ea190b470d53c9d93d4c1e
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Arrow-Envelopment-Mac.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\Arrow-Envelopment-Mac.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 babce9e04768beb2da9e5657a66e81cd50262b37be0226f8d391a63c1cc1f330
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        BFX-001-Yellow.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\BFX-001-Yellow.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f60fbfc796001fbe70025da82d377afd5c900b32589ee08cfa83bf39b2e1afad
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        BFX-002-Yellow.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\BFX-002-Yellow.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ea9d12eba374aedbcc2cfc6beeef49c33bfe8bd0e2e3fd1c4587beca6ceb8af6
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        BFX-003-Yellow.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\BFX-003-Yellow.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7795d7202ad6a2bb4bc73a2a433180ca72f389c6d196ab72b88df8b8e5a4c7f3
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        BFX-004-Yellow.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\BFX-004-Yellow.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0d3b337683d87d29f38e85194c0bb9ea005a9f09d511fda3a2c388dd6017de75
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        BFX-005-Yellow.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\BFX-005-Yellow.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 64db4a9e8a7e21cbd5b3bb68a9f1f5b4c1e0824b0a787f412f37a5bb0e43b2ca
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        BFX-007-Yellow.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\BFX-007-Yellow.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 778bf3eba1350df87c4d4358d672bb5d7f6f39a36cc60e0f91a5b4eb3231b406
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        BFX-008-Yellow.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\BFX-008-Yellow.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b39f05e3f73698dd83f0d6015ebc0b5feb9e9c81a0b11265d759a7882ed6a9bd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        BFX-009-Yellow.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\BFX-009-Yellow.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4f5340e4569255b9e89d7ff1d22a6aac8e53cc7175a79420bee62dc751056bb1
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        BFX-011-Yellow.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\BFX-011-Yellow.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b07a89140b2b02035bf0e6f51918e288d6ca1f8babf5c883b41ee644b3447523
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        BFX-012-Yellow.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\BFX-012-Yellow.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b6d55c98078e920cdb3e24da438c0c6171cdd0524b489685a5050c4c013285a9
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        BFX-013-Yellow.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\BFX-013-Yellow.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 64ac8ee0101af0e8a907b4c70416492039531568785ed335f1a91b4ce33bfd1c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        BFX-014-Yellow.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\BFX-014-Yellow.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 98c9b53ed2a8832c597cf30c1e102964ead15658b88fc5c4264e64d3b3fd3a7e
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        CG-003-Yellow.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\CG-003-Yellow.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 aba40f9ed0ea516ed25b4fda155fa5f4507238cec3f1e9c380b3555ebb81d61f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Camtasia-mac.pdf

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\Camtasia-mac.pdf
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1.2MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 88253ffc3f605d485a81847d940a07651c650515df1389cecbc63cdfdf538b12
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Click 1.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\Click 1.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f6c1752933abd8be10b667909668c12e74cffff4eb179a765c522a7765a81a5e
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Click 2.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\Click 2.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a160b9220612470593fdd5c3214bcc0a12725f3cc841a5658766a3dea53af066
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Click 4.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\Click 4.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a1a023479693fcfa12f4e87375923b9454ad2a1a07a0a42501088cab8692edb2
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Collapse 4.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\Collapse 4.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 cb35cfb35890ef495d118c8584fa431f01556a4fb589dc7ee06f9e3eb11c1946
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Flappy-Pointer-001.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\Flappy-Pointer-001.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6f332f85efe798c510ef7f07f139b0fd0bf626360712c3864bae3ec09576cb7b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Hand-Open-Wave-Close-Win-B.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\Hand-Open-Wave-Close-Win-B.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3135f2454d098ba1139e612d782d9a055269fc11b26f33c141251e43700f717f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Hand-Wave-Mac.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\Hand-Wave-Mac.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3a6fdee462ab83e80461424da32b8cc03570e97f528b639ef5a75f3d95af1a6e
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Hand-Wave-Win-B.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\Hand-Wave-Win-B.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 59695f5d820acce373607a0c35223192ca4efe3bd6b26a1590e9ab2d097d77b5
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Pointing-Hand-Tap-Win-B-009.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\Pointing-Hand-Tap-Win-B-009.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 593de0891a7608ab31f89a875b106b7627f2b2b764bbe1ca93a04aea17cb8c93
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        camtasia-loading-glyph.pdf

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\camtasia-loading-glyph.pdf
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f90f8704c525557bd378c9f28d82793018761267fab3578de40a417242c16e99
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        techsmith-logo-large.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\techsmith-logo-large.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 42KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1003fdd3c34b794daaeeff5f03283a605bff7b863e2d55e842e1cca92c1843da
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9472e3b0-b562-4c87-ae2c-6f0e04df4cac\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 152B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ccd8d42044204b4c27c227881347db162789239906a6851256dc77ffe4071ef6
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        3972687b-7599-4189-a6cd-5660b3a08029.tsctemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\988e8ad6-d669-42ab-9537-225b387cfbec\3972687b-7599-4189-a6cd-5660b3a08029.tsctemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 860KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 94c68ad0e7a7ed72f058a6c6f8a68102d90acb3a4fa7f30f9dc494cf8cfb60f9
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\988e8ad6-d669-42ab-9537-225b387cfbec\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 157B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2d05cc91e07e40ca55b1d470173738ba8ec7120f98d17909953faf36403240d3
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Camtasia_20261023172836_001_CamtasiaStudioInstallerx64.log

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Camtasia_20261023172836_001_CamtasiaStudioInstallerx64.log
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 18bfa1be3319fff75c4dd29018f101c3eadc3db96d64bf8d24dd959d9f4559f1
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        MSIb41b9.LOG

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\MSIb41b9.LOG
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 60894b18873573e47a6a63de556605f138ba38d5fe97884e6be457fe120e50a4
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        MSIb41ba.LOG

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\MSIb41ba.LOG
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f01bbfb60f917da5a4907d1b231a8899658a4cb883d6e971eb05330612d1f57d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        7a3c275d-d6a3-4362-82bf-6050b6fe53ab.tsctemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\ab0247ad-6c09-4af1-bccd-5a06699626fe\7a3c275d-d6a3-4362-82bf-6050b6fe53ab.tsctemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 94KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 70fbe4b4fc882cf243976f77badf8a6fd8416bf015af8cd83a6f37bbc498bb9d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        7a3c275d-d6a3-4362-82bf-6050b6fe53ab_Template_Preview.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\ab0247ad-6c09-4af1-bccd-5a06699626fe\7a3c275d-d6a3-4362-82bf-6050b6fe53ab_Template_Preview.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 102KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 de0cedd0d9a047275fb56c1a9925bd731b920c2e7bde2871600d4c30421fb82c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Mountain-Background-1920x1440-01.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\ab0247ad-6c09-4af1-bccd-5a06699626fe\Mountain-Background-1920x1440-01.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 25KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 eef32e227afa74778c1442b0c16611e505423051b941caf2aefc9772d3abf9d2
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Phone-App-Bar-Tiles.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\ab0247ad-6c09-4af1-bccd-5a06699626fe\Phone-App-Bar-Tiles.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 cdda7dd65060195310c8e2006a61cfbbab5bf8f14d3c4e099d5d07f5855fa7b6
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\ab0247ad-6c09-4af1-bccd-5a06699626fe\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 159B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 660cf51dcc4765dcd172e2946cdb4fc7a819480da4d60a05e2b58d0e8b2dd1ee
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        5c26c478-db94-484c-b501-5cff82462e22.tsctemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\b2823f40-39c2-437f-8188-035f2d5f2613\5c26c478-db94-484c-b501-5cff82462e22.tsctemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 149KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e3a6cc174bc97cf9e17d2acd50fe1b58b5773c33197a1829c2829114c1ca0b06
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        5c26c478-db94-484c-b501-5cff82462e22_Template_Preview.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\b2823f40-39c2-437f-8188-035f2d5f2613\5c26c478-db94-484c-b501-5cff82462e22_Template_Preview.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 343KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 819a6cee000903e209c1c1e6481328f0e5044bc5c9e2923fdeab921899a8c719
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        sunburst.tscshadervid

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\b2823f40-39c2-437f-8188-035f2d5f2613\sunburst.tscshadervid
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 35fc99f5f34d73258912500714456bfae55e212b905d84f8e7cafbdae626b589
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\b2823f40-39c2-437f-8188-035f2d5f2613\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 157B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a17a2ddb3b9dc201ef68914124c626b88f90e5f26125ff95e9eacd37b5cdbe5e
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        2cc71da2-a166-4d80-8d0f-116072d2e902.tsctemplate

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\bebb6646-8e27-4a45-b3e6-774797f5bed9\2cc71da2-a166-4d80-8d0f-116072d2e902.tsctemplate
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 407KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b14ded55a3e356673ca5933bcc75de13cd4270a3989e31669501fa6d4a7c8321
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        2cc71da2-a166-4d80-8d0f-116072d2e902_Template_Preview.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\bebb6646-8e27-4a45-b3e6-774797f5bed9\2cc71da2-a166-4d80-8d0f-116072d2e902_Template_Preview.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 482KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 435093fc1bb55d5bc57136b238fdd5447c2458f85dd13e80e93f3b91b9bf5545
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Tablet-App-Bar.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\bebb6646-8e27-4a45-b3e6-774797f5bed9\Tablet-App-Bar.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 56KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c8c99a9dcb883f62b7f945fd4bd01db9500d1411a395d96d1697871a5050c1f5
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        logo-placeholder.pdf

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\bebb6646-8e27-4a45-b3e6-774797f5bed9\logo-placeholder.pdf
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ad4291db9df3462f0325e0345ae84503b615d03822e517293cc73f56d051e86b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        templateInfo.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\bebb6646-8e27-4a45-b3e6-774797f5bed9\templateInfo.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 158B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f403c3b1560ac6d01bb6123695c5ada745e80394b5b6cebe5bd21b7a56a11aaf
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        dd_vcredist_amd64_20261023172926_000_vcRuntimeMinimum_x64.log

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261023172926_000_vcRuntimeMinimum_x64.log
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 56f774f8363eacb1007a2f4d125986654cc77fd753a9b06965a021ed4e0363d8
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        dd_vcredist_amd64_20261023172926_001_vcRuntimeAdditional_x64.log

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20261023172926_001_vcRuntimeAdditional_x64.log
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bd54f4d171a9d2b5948a8069c79a554247851ddd5b23a84e93386d770a8175c6
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5948_1848779502\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 450B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        MSVCRedist_x64Setup

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\{DE4C5D77-6A48-4B36-A5BE-DFEF1F615B8F}\MSVCRedist_x64Setup
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 17.9MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 843068991daaa1f73ad9f6239bce4d0f6a07a51f18c37ea2a867e9beca71295c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        WebView2Setup

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\{DE4C5D77-6A48-4B36-A5BE-DFEF1F615B8F}\WebView2Setup
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1.7MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0fb8d635f489d5c31f958508b4c6bb60f58eeeeedb3fd2b5e4e0eb6d45c1b57d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        features.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Techsmith\features.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 317B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a6fb4f9a76588ff2157a0708d2b04e00425bef936266f32ae11257d9c48af290
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Camtasia.lnk

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Public\Desktop\Camtasia.lnk
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f670efea4851c756db2e4ff95225809485f77feaee73d997c61d887221b1e9c2
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        ~amtasia.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Public\Desktop\~amtasia.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e33e3b77e7d921f411c0f26186bea435ffb4f9eeeaf4c2328c131f0ce07eb7e1
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        ~amtasia.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Public\Desktop\~amtasia.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2bbb363d1abb2e80421c60503d913e37a6652b3f4ef636555eb49d9b36407403
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        653e1cae842f77e41a.lic

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Public\TechSmith\Camtasia\License\653e1cae842f77e41a.lic
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 77fffc8fa39fb3d31d550eb08c67d5776e6652e6d73025bcf1107e02b678aa6b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        653e1cae842f77e41a.lic

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Public\TechSmith\Camtasia\License\653e1cae842f77e41a.lic
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 724ac3c808186c2c0a87477d164a96501dcdb36f0f68b8869fa87c4a7695e337
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        653e1cae842f77e41a.lic

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Public\TechSmith\Camtasia\License\653e1cae842f77e41a.lic
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a04bbb0f65fbafa8b1b91296ff3253847ab229e095573b044e7500f4acc9d3fe
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        653e1cae842f77e41a.lic

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Public\TechSmith\Camtasia\License\653e1cae842f77e41a.lic
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1002e009654a7b86035ccc417791c785b22a023304096838ce5a5ec701827b16
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        653e1cae842f77e41a.lic

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Public\TechSmith\Camtasia\License\653e1cae842f77e41a.lic
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 cec14a8e9924ee85ed54cae966e966b0b1253142df645373a5f871e6e25ba200
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        653e1cae842f77e41a.log

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Public\TechSmith\Camtasia\License\653e1cae842f77e41a.log
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 42KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 730f759868e4f504a537fa4442965d56cc474ee9fc4c8dfeef365d57fde42c5f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        MSI85DB.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Installer\MSI85DB.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 514KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f5578e4e55f9eedc9386382a48f1be913d617d58f695eb8a754c8f05788b1c0c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        MSI8D11.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Installer\MSI8D11.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 310KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 91f73c73a370fc16157270cb64502404681cd3adabc9afe7c11294e694f56715
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        MSIA62C.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Installer\MSIA62C.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 310KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 436577c46907e7541e4fc049135416b0a5a26617b5dcbfbbe97c2fac2b03000c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        MSIB9E5.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Installer\MSIB9E5.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 413KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 54febbd1f0a3875df16a4b88621cc0a10729b3c94b9a68639aab27d36fe39381
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        MSIBCF3.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Installer\MSIBCF3.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 445KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 304b33c231e51964a41a0a0119a0222250f3a9e4b0162ec8c169a7b02092f36c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        MSICD51.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Installer\MSICD51.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 196KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 548ae7115a58acca73d444311ebcf4fc5ec53ad881f6c9fffbb1261dfa7aca0a
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        MSICE1D.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Installer\MSICE1D.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 201KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f5066919f6e3aa39f98c88d187d9a8b43bf8dc6aa7f994b7fd85d018e24f8270
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        WebView2Loader.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Installer\SFXCA18F312A20446E7B8BFF5827C70E11845\WebView2Loader.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 113KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6f59ad578fde1f65c44b6935dab0901f014b5268e056b930fb34c0919f1bf4b9
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        FuseCA.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Installer\SFXCA8027257B0A4D9D4871EDC78D244CCD20\FuseCA.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 383408798aeccdbaec22d3273427dc47f9c5bd97d9ab4de3a9b484287e7e03d1
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        CustomAction.config

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Installer\SFXCA8415A5F79942242A8D21105C9D5734EC\CustomAction.config
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c3ec8ae85eb2ed845160f738bcab1e7309e15f75b6c934a0eaf41fb39d8b7351
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        WixToolset.Dtf.WindowsInstaller.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Installer\SFXCAA2271601CE40FDDAE376DCD85EEE66D5\WixToolset.Dtf.WindowsInstaller.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 193KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 dd4120702e4cc794705c0ad23ce1eaa265310ab96064fd23947f6dff38e8e680
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        CustomAction.config

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Installer\SFXCAFD18344BA44C29B835CDE5675532C415\CustomAction.config
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a1e6633b99398ec69cf5e525934c091873cbcb49efc49a91e94598e80402ba79
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        FileSystemCA.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Installer\SFXCAFD18344BA44C29B835CDE5675532C415\FileSystemCA.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 94469ed049506d2fd0e38e2915affadd4e6637acbf071aeb7a90e7aaee7bd958
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Tmp3C64.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\SystemTemp\Tmp3C64.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c3eaf0f34277fdeff101e64d2cacde2e997bff742f77b107cc893dff0aa3f975
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7080_1202598151\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 118B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 cc33e26f3b2efe862336389207db045cc7a916940213b9d33d845c82c12c8712
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        hyph-as.hyb

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7080_1387984880\hyph-as.hyb
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 703B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        hyph-hi.hyb

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7080_1387984880\hyph-hi.hyb
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 687B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        hyph-nb.hyb

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7080_1387984880\hyph-nb.hyb
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 141KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7080_1387984880\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 82B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7080_828059214\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 108B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8d58f4f4ef20dff6cd1c27243ddbe12d50713f2cf8bb22ba73696bbb04b36f4c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        BootstrapperApplicationData.xml

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\TEMP\{DE4C5D77-6A48-4B36-A5BE-DFEF1F615B8F}\.ba\BootstrapperApplicationData.xml
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 23KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4c3d6ab188eb09aaacd51b3ba2946519523ac06fd123c19ab6a9eec92fbc12e1
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        WPFCommonControls.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\TEMP\{DE4C5D77-6A48-4B36-A5BE-DFEF1F615B8F}\.ba\WPFCommonControls.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 704KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 54a6818d8b3103cd4044f207b655dcec954e086088fd0a495627efc5b40462bd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        WixToolset.BootstrapperApplicationApi.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\TEMP\{DE4C5D77-6A48-4B36-A5BE-DFEF1F615B8F}\.ba\WixToolset.BootstrapperApplicationApi.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 168KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e881e65f0e83f20587ced7028aab8e53eb2a090bc0d66d8bc525040ee7ba5136
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        mbanative.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\TEMP\{DE4C5D77-6A48-4B36-A5BE-DFEF1F615B8F}\.ba\mbanative.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 266KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f4af0d9add791e808f39cc95e5fdcd0d4ab83841a6426ad67741646c25f2d18f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        vc_redist.x64.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{3DEA67B1-C0B6-4309-8324-6C350BE8B069}\.cr\vc_redist.x64.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 615KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 dbcc159853d8b83c1df0a0a698127ab98e926af1b6dee86e96f541dc94b34948
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        BootstrapperApplicationData.xml

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{581EC6CA-388D-49DD-9C14-32DB7C0CB150}\.ba\BootstrapperApplicationData.xml
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0af0673e1f3ca87701e3c00d5ff004fccb00e2a983df1d72671c429cfef7f3c5
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        thm.wxl

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{581EC6CA-388D-49DD-9C14-32DB7C0CB150}\.ba\thm.wxl
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 21a76eb702fe727ca06de6632be2294ed1caa9e1d3798d01ed1428e0f40e19ea
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        thm.xml

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{581EC6CA-388D-49DD-9C14-32DB7C0CB150}\.ba\thm.xml
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8d67851408a62b0f04dbaaddc588cd98499cf3630ec5df9f7c0699f0d367f79c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        wixstdba.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{AFAFCF5A-7C57-4D5F-845D-4B53194D42FD}\.ba\wixstdba.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 191KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        logo.png

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{DB4EC45F-80BF-4EB6-B9AC-402BAAFAD25C}\.ba\logo.png
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        wixstdba.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{DB4EC45F-80BF-4EB6-B9AC-402BAAFAD25C}\.ba\wixstdba.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 215KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e921f69b9fb4b5ad4691809d06896c5f1d655ab75e0ce94a372319c243c56d4e
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        cab2C04DDC374BD96EB5C8EB8208F2C7C92

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{DB4EC45F-80BF-4EB6-B9AC-402BAAFAD25C}\cab2C04DDC374BD96EB5C8EB8208F2C7C92
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 5.4MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 19c0cdc59ae89d0491c025a966f6d40515adc2449af40f2c6c6f52e2f293ad1c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        cab5046A8AB272BF37297BB7928664C9503

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{DB4EC45F-80BF-4EB6-B9AC-402BAAFAD25C}\cab5046A8AB272BF37297BB7928664C9503
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1.0MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6e8ee73933678c55973e83366e48e948b394c7a36743a36b7224c95de979b13f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        vcRuntimeAdditional_x64

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{DB4EC45F-80BF-4EB6-B9AC-402BAAFAD25C}\vcRuntimeAdditional_x64
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 208KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 476427800c1c958dc4e71d9a0f2f3983b2608da70835db9ee5f3b8ac387e9617
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        CamtasiaInstallerUI.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{DE4C5D77-6A48-4B36-A5BE-DFEF1F615B8F}\.ba\CamtasiaInstallerUI.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 911KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a247c4900c738171d13a6365650f736fa4c9357cbafe47b6cab468679daca416
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        EditionConstants.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{DE4C5D77-6A48-4B36-A5BE-DFEF1F615B8F}\.ba\EditionConstants.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 08f3aae62a3980b0a42f933378fc060d4326faeab9edfb1de8c909bbee180675
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Microsoft.Xaml.Behaviors.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{DE4C5D77-6A48-4B36-A5BE-DFEF1F615B8F}\.ba\Microsoft.Xaml.Behaviors.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 141KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b864da9d88414877cea9b1a016146265a5fb9d0e12f4dbb1dccc0cc998119a54
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        WPFCommonViewModel.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{DE4C5D77-6A48-4B36-A5BE-DFEF1F615B8F}\.ba\WPFCommonViewModel.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 34KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3437cd2f904d8222f72c7e0d6aec450c1ca0cbbe95cfe214355e25db1b11d213
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        CamtasiaInstaller.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{DE4C5D77-6A48-4B36-A5BE-DFEF1F615B8F}\.be\CamtasiaInstaller.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1.8MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b200a99af8fca4891b5a29c73bb9dcb0223b70790003e5acdb153f1374089c33
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Bootstrapper.de-DE.wxl

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\Bootstrapper.de-DE.wxl
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 953B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6051e0b497531c84481f13326cb7780e46424a68a2fb5f37c6f52995b8131832
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Bootstrapper.en-US.wxl

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\Bootstrapper.en-US.wxl
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 852B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f925d2acf372e06fe0040fff71740fd6a2176b52fabd72f7804414e2a9b2680f
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Bootstrapper.es-ES.wxl

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\Bootstrapper.es-ES.wxl
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 896B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7a03ae9442369ce6d8455f809e6068e3e5f779cedc07d7f26bee0d204fa0ef59
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Bootstrapper.fr-FR.wxl

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\Bootstrapper.fr-FR.wxl
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 39eee678cd331945fa7b9be883a1fe9334bc137c757678de39fa9b22d60a62dc
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Bootstrapper.ja-JP.wxl

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\Bootstrapper.ja-JP.wxl
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 628784b5050834ffdd4f2ee93ea1c671cdb70caa40fb08d74b14b656f3027ebe
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Bootstrapper.pt-BR.wxl

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\Bootstrapper.pt-BR.wxl
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 914B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 29cc46c8d4f3110f1cf63a5f7e671354d6ded5fd25740f91a7c36e8dd61bab1b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        Bootstrapper.zh-CN.wxl

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\Bootstrapper.zh-CN.wxl
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 803B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 53d724cef4446d9a171e0c8076ca386fb268aa987a2c008db2abdb779af7a4ad
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        BootstrapperExtensionData.xml

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\BootstrapperExtensionData.xml
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 276B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 258fac237622533e7f9ec3f95bcec8abcc31ae87e2017e5717af0841c61e9df4
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        TechSmith.Win32.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\TechSmith.Win32.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 51KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 96345f7e67b38ff4f68647554b3ec9d0464e6f76776359411b1a7e7519a65cde
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        TechSmith.WinForms.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\TechSmith.WinForms.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 23KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8f67073c4e728349b1d062d4e99ca18a3cf41b37c028c4c621afc494ec6a1ba8
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        WixToolset.Mba.Host.config

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\WixToolset.Mba.Host.config
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 586B
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2a4e7466c1cce6a9aa972e1e56a6f9436c73f71b90f73607336a76640950384d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        CamtasiaInstallerUI.resources.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\de-DE\CamtasiaInstallerUI.resources.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 233KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 352a1cb646f9159a62b769efee7f09f07d5d0c7c8cceab9ac7f80bd85d79ba8d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        CamtasiaInstallerUI.resources.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\es-ES\CamtasiaInstallerUI.resources.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 99KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 23dd89cc930acc7d3c0bf6901f900ea96fb117f57d64b238b8df963c8847e1c9
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        CamtasiaInstallerUI.resources.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\fr-FR\CamtasiaInstallerUI.resources.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 274KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c148092346b3bafc827b6d82985db5ce05b03bec20f098916b8f72aa102c8525
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        CamtasiaInstallerUI.resources.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\ja-JP\CamtasiaInstallerUI.resources.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 205KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ddefe9c8b76615c611206ddb86c9753dd20678278b494cea9494e7c82aed5672
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        CamtasiaInstallerUI.resources.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\pt-BR\CamtasiaInstallerUI.resources.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 100KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 cc1143b1397edb195448e507a46fe7ec1d842a6241f19d06d42a034c1125acb3
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        CamtasiaInstallerUI.resources.dll

                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Windows\Temp\{ECA52B21-337F-4760-A22E-045D32AB0614}\.ba\zh-CN\CamtasiaInstallerUI.resources.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 134KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 dbef278cbf7cf19a6e3479e3c2b9902a804890525933d5940d40e3e81703a879
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2761-0x000001E85C6A0000-0x000001E85C738000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3023-0x000001E860A30000-0x000001E860AA4000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3880-0x000001E86AB20000-0x000001E86AB2A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3879-0x000001E86AB10000-0x000001E86AB20000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2774-0x000001E85E8C0000-0x000001E85F67D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2775-0x00007FF800040000-0x00007FF80131E000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3734-0x000001E865C60000-0x000001E865C68000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3733-0x000001E865C40000-0x000001E865C4E000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3732-0x000001E865C70000-0x000001E865CAE000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3731-0x000001E865BD0000-0x000001E865BE8000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3730-0x000001E87FA30000-0x000001E87FA48000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3038-0x000001E862910000-0x000001E86291A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3037-0x000001E8628B0000-0x000001E8628B8000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3036-0x000001E862880000-0x000001E862888000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3035-0x000001E862940000-0x000001E862968000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3034-0x000001E862870000-0x000001E862878000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3033-0x000001E861810000-0x000001E86181A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2776-0x000001E85DFE0000-0x000001E85DFE8000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2777-0x000001E85DFD0000-0x000001E85DFE0000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3032-0x000001E861800000-0x000001E861808000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3031-0x000001E862980000-0x000001E8629EE000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2772-0x000001E85E5C0000-0x000001E85E712000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3986-0x000001E865D40000-0x000001E865D4C000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2771-0x000001E85C550000-0x000001E85C56C000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2770-0x000001E85DB80000-0x000001E85DC3A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2769-0x000001E843B30000-0x000001E843B3C000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2768-0x000001E85DAC0000-0x000001E85DB74000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2734-0x000001E841D50000-0x000001E841E58000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2736-0x000001E843B50000-0x000001E843BA2000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2737-0x000001E843A90000-0x000001E843ADE000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2738-0x000001E85C5D0000-0x000001E85C696000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3030-0x000001E8628C0000-0x000001E862908000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3029-0x000001E862850000-0x000001E862868000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3028-0x000001E8617E0000-0x000001E8617EA000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3027-0x000001E8617F0000-0x000001E8617FA000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3026-0x000001E862810000-0x000001E86284C000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3025-0x000001E861820000-0x000001E861832000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3022-0x000001E8609A0000-0x000001E8609AC000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2739-0x000001E842260000-0x000001E84226A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2773-0x000001E85E720000-0x000001E85E8B2000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2998-0x000001E860720000-0x000001E860721000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2999-0x000001E860720000-0x000001E860721000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3000-0x000001E860720000-0x000001E860721000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2740-0x000001E8422B0000-0x000001E8422CA000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2741-0x000001E85C9A0000-0x000001E85CBB2000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3021-0x000001E860970000-0x000001E86097C000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3001-0x000001E860720000-0x000001E860721000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3002-0x000001E860720000-0x000001E860721000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3019-0x000001E860980000-0x000001E86099D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3020-0x00007FF815260000-0x00007FF81527D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-3003-0x000001E860720000-0x000001E860721000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2992-0x000001E860720000-0x000001E860721000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2994-0x000001E860720000-0x000001E860721000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2806-0x000001E8602E0000-0x000001E86030E000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2805-0x000001E8602C0000-0x000001E8602D2000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2762-0x000001E85E040000-0x000001E85E5BE000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2804-0x000001E860220000-0x000001E86023E000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2803-0x000001E8601F0000-0x000001E860212000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2763-0x000001E843BB0000-0x000001E843BC4000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2802-0x000001E860240000-0x000001E8602B6000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2784-0x000001E8600E0000-0x000001E8600EE000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2764-0x000001E85C500000-0x000001E85C524000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2783-0x000001E8600D0000-0x000001E8600DA000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2779-0x000001E860100000-0x000001E8601B2000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2778-0x000001E85E010000-0x000001E85E02A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2765-0x000001E85DC80000-0x000001E85DE40000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2766-0x000001E843BD0000-0x000001E843BE2000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/200-2767-0x000001E843B20000-0x000001E843B28000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/816-470-0x0000000003520000-0x000000000352A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/1160-3794-0x00007FF831960000-0x00007FF831961000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2888-6973-0x00007FF801840000-0x00007FF802B1E000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2888-7158-0x0000024C67740000-0x0000024C67741000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2888-7164-0x0000024C67740000-0x0000024C67741000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2888-7163-0x0000024C67740000-0x0000024C67741000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2888-7162-0x0000024C67740000-0x0000024C67741000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2888-7161-0x0000024C67740000-0x0000024C67741000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2888-7160-0x0000024C67740000-0x0000024C67741000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2888-7156-0x0000024C67740000-0x0000024C67741000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2896-5356-0x000001582AD80000-0x000001582AD81000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2896-5378-0x00007FF828F60000-0x00007FF828F7D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2896-5359-0x000001582AD80000-0x000001582AD81000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2896-5360-0x000001582AD80000-0x000001582AD81000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2896-5361-0x000001582AD80000-0x000001582AD81000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2896-5354-0x000001582AD80000-0x000001582AD81000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2896-5358-0x000001582AD80000-0x000001582AD81000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2896-5362-0x000001582AD80000-0x000001582AD81000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2896-5207-0x00007FF802600000-0x00007FF8038DE000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2896-5377-0x000001582AFD0000-0x000001582AFED000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/3000-374-0x00000000005D0000-0x0000000000647000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/3736-373-0x00000000005D0000-0x0000000000647000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4340-410-0x00000000057B0000-0x00000000057E4000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4340-412-0x00000000057F0000-0x00000000057F8000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4340-414-0x00000000058A0000-0x0000000005938000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4464-482-0x0000000005CD0000-0x0000000005CF2000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4804-2725-0x00000000274F0000-0x0000000027500000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4804-77-0x000000001E500000-0x000000001E9E6000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4804-460-0x0000000003C60000-0x0000000003C82000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4804-2718-0x0000000027240000-0x0000000027250000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4848-430-0x0000000005D60000-0x0000000005D6A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4888-371-0x00000000005D0000-0x0000000000647000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-50-0x0000000005C30000-0x0000000005CEA000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-49-0x0000000005800000-0x000000000580C000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-29-0x0000000073312000-0x0000000073313000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-30-0x0000000000660000-0x0000000000746000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-2735-0x0000000073300000-0x0000000073ABC000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-34-0x0000000005080000-0x00000000050AE000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-37-0x0000000073300000-0x0000000073ABC000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-38-0x0000000073300000-0x0000000073ABC000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-42-0x00000000050E0000-0x00000000050EA000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-45-0x0000000005890000-0x0000000005922000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-44-0x0000000005D70000-0x000000000632A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-51-0x0000000005B70000-0x0000000005B8C000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-55-0x0000000005BC0000-0x0000000005BE8000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-59-0x0000000006DF0000-0x0000000006EA4000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-60-0x0000000005CF0000-0x0000000005D30000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-61-0x0000000073300000-0x0000000073ABC000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-62-0x00000000095F0000-0x00000000095F8000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-64-0x000000000B840000-0x000000000B84E000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-63-0x000000000B860000-0x000000000B89E000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-67-0x0000000073300000-0x0000000073ABC000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-66-0x0000000073300000-0x0000000073ABC000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4932-65-0x0000000073312000-0x0000000073313000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/5364-3755-0x00007FF831960000-0x00007FF831961000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6024-4373-0x0000028EF1F90000-0x0000028EF2D4D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6024-4545-0x00007FF8299B0000-0x00007FF8299CD000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6024-4521-0x0000028EF3FC0000-0x0000028EF3FC1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6024-4523-0x0000028EF3FC0000-0x0000028EF3FC1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6024-4525-0x0000028EF3FC0000-0x0000028EF3FC1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6024-4544-0x0000028EF41F0000-0x0000028EF420D000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6024-5195-0x0000028EF3680000-0x0000028EF368E000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6024-4529-0x0000028EF3FC0000-0x0000028EF3FC1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6024-5138-0x0000028EF4640000-0x0000028EF465A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6024-4526-0x0000028EF3FC0000-0x0000028EF3FC1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6024-4527-0x0000028EF3FC0000-0x0000028EF3FC1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6024-4574-0x0000028EF3680000-0x0000028EF368E000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6024-4374-0x00007FF802600000-0x00007FF8038DE000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6024-4771-0x0000028EFAE90000-0x0000028EFAEA6000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6024-4528-0x0000028EF3FC0000-0x0000028EF3FC1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6828-4820-0x00007FF832F90000-0x00007FF832F91000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6828-4819-0x00007FF831650000-0x00007FF831651000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6860-5718-0x00000231E68B0000-0x00000231E68B1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6860-5720-0x00000231E68B0000-0x00000231E68B1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6860-5719-0x00000231E68B0000-0x00000231E68B1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6860-5565-0x00007FF801BD0000-0x00007FF802EAE000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6860-5712-0x00000231E68B0000-0x00000231E68B1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6860-5714-0x00000231E68B0000-0x00000231E68B1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6860-5716-0x00000231E68B0000-0x00000231E68B1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6860-5717-0x00000231E68B0000-0x00000231E68B1000-memory.dmp