lumma | hxxps://www[.]mediafire[.]com/file/an26dt6kc4ta6v7/Setup_Pswrd_123[.]rar/file

Resubmissions

19/12/2023, 12:00

231219-n6sndsghc6 10

19/12/2023, 11:57

231219-n4kvrsefel 1

Analysis

max time kernel
741s
max time network
735s
platform
windows11-21h2_x64
resource
win11-20231215-en
resource tags

arch:x64arch:x86image:win11-20231215-enlocale:en-usos:windows11-21h2-x64system
submitted
19/12/2023, 12:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.mediafire.com/file/an26dt6kc4ta6v7/Setup_Pswrd_123.rar/file

Score

10^/10

lumma stealer

Malware Config

Signatures

Detect Lumma Stealer payload V4 10 IoCs

resource	yara_rule
behavioral1/memory/6824-1198-0x0000000002620000-0x000000000269E000-memory.dmp	family_lumma_v4
behavioral1/memory/6824-1200-0x0000000002620000-0x000000000269E000-memory.dmp	family_lumma_v4
behavioral1/memory/6824-1201-0x0000000002620000-0x000000000269E000-memory.dmp	family_lumma_v4
behavioral1/memory/6824-1203-0x0000000074900000-0x0000000074BC7000-memory.dmp	family_lumma_v4
behavioral1/memory/6824-1204-0x0000000002620000-0x000000000269E000-memory.dmp	family_lumma_v4
behavioral1/memory/7384-1206-0x00000000017E0000-0x000000000185E000-memory.dmp	family_lumma_v4
behavioral1/memory/7384-1207-0x00000000017E0000-0x000000000185E000-memory.dmp	family_lumma_v4
behavioral1/memory/7384-1208-0x00000000017E0000-0x000000000185E000-memory.dmp	family_lumma_v4
behavioral1/memory/7384-1210-0x0000000074C00000-0x0000000074EC7000-memory.dmp	family_lumma_v4
behavioral1/memory/7384-1211-0x00000000017E0000-0x000000000185E000-memory.dmp	family_lumma_v4

Lumma Stealer
An infostealer written in C++ first seen in August 2022.
stealer lumma

Executes dropped EXE 4 IoCs

pid	Process
5628	Setup.exe
1804	Setup.exe
6824	Setup.exe
7384	Setup.exe

Loads dropped DLL 2 IoCs

pid	Process
6824	Setup.exe
7384	Setup.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133474608890919611"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-771046930-2949676035-3337286276-1000_Classes\Local Settings	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4348	chrome.exe
4348	chrome.exe
8324	chrome.exe
8324	chrome.exe
8108	7zFM.exe
8108	7zFM.exe
8108	7zFM.exe
8108	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
8108	7zFM.exe
6700	7zFM.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe
Token: SeShutdownPrivilege	4348	chrome.exe
Token: SeCreatePagefilePrivilege	4348	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
8108	7zFM.exe
8108	7zFM.exe
8108	7zFM.exe
8108	7zFM.exe
8108	7zFM.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe
4348	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4348 wrote to memory of 780	4348	chrome.exe	77
PID 4348 wrote to memory of 780	4348	chrome.exe	77
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 4464	4348	chrome.exe	80
PID 4348 wrote to memory of 3752	4348	chrome.exe	79
PID 4348 wrote to memory of 3752	4348	chrome.exe	79
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81
PID 4348 wrote to memory of 3928	4348	chrome.exe	81

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.mediafire.com/file/an26dt6kc4ta6v7/Setup_Pswrd_123.rar/file
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffabcbe9758,0x7ffabcbe9768,0x7ffabcbe9778
  2⤵
  PID:780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:8
  2⤵
  PID:3752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1680 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:2
  2⤵
  PID:4464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2160 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3172 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3136 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4608 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5192 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:8
  2⤵
  PID:4752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5460 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:8
  2⤵
  PID:2764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5208 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=5204 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:1612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5640 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5788 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:3140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=6692 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:1940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=6840 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:2968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=7564 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=7268 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:3224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=7128 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:3016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=6704 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=6844 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=6548 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:2096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=6272 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=6260 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=6104 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:3032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5220 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:3712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=8032 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=7872 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=7828 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:3476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=8564 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=8684 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=8624 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=9760 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=9740 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:1060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=9724 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=9708 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=9692 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=9676 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=9660 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=9644 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=9628 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=9612 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=9468 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=9452 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=9320 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=9304 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=9172 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=9060 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=9036 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=9004 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=12464 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=11604 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=11708 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=12368 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=12436 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=13036 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=12068 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=12076 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=12776 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=12632 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=10696 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=11624 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --mojo-platform-channel-handle=12044 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:8204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --mojo-platform-channel-handle=13400 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:8288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --mojo-platform-channel-handle=9588 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --mojo-platform-channel-handle=6824 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --mojo-platform-channel-handle=6912 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --mojo-platform-channel-handle=6928 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --mojo-platform-channel-handle=8980 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:8768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --mojo-platform-channel-handle=9104 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --mojo-platform-channel-handle=10984 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --mojo-platform-channel-handle=11600 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --mojo-platform-channel-handle=7544 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --mojo-platform-channel-handle=8668 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --mojo-platform-channel-handle=8940 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --mojo-platform-channel-handle=2124 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --mojo-platform-channel-handle=11828 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:8812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --mojo-platform-channel-handle=7096 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --mojo-platform-channel-handle=7820 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:8904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --mojo-platform-channel-handle=6392 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --mojo-platform-channel-handle=10144 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:4016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --mojo-platform-channel-handle=6000 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --mojo-platform-channel-handle=12536 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:8592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --mojo-platform-channel-handle=12308 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --mojo-platform-channel-handle=5588 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --mojo-platform-channel-handle=8116 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --mojo-platform-channel-handle=10064 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --mojo-platform-channel-handle=4932 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:3584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --mojo-platform-channel-handle=10904 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --mojo-platform-channel-handle=7604 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --mojo-platform-channel-handle=7632 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:1372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --mojo-platform-channel-handle=7116 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --mojo-platform-channel-handle=12272 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --mojo-platform-channel-handle=4608 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --mojo-platform-channel-handle=2204 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:8604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --mojo-platform-channel-handle=7004 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --mojo-platform-channel-handle=10996 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:9184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --mojo-platform-channel-handle=10816 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:4848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --mojo-platform-channel-handle=7948 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:1580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --mojo-platform-channel-handle=5692 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --mojo-platform-channel-handle=11524 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --mojo-platform-channel-handle=11896 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --mojo-platform-channel-handle=6336 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:8016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --mojo-platform-channel-handle=6368 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:8040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --mojo-platform-channel-handle=9084 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --mojo-platform-channel-handle=9184 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --mojo-platform-channel-handle=6476 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --mojo-platform-channel-handle=7276 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --mojo-platform-channel-handle=4872 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:8708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --mojo-platform-channel-handle=11772 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7404 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:8
  2⤵
  PID:912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --mojo-platform-channel-handle=10852 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --mojo-platform-channel-handle=12484 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --mojo-platform-channel-handle=12724 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --mojo-platform-channel-handle=6020 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --mojo-platform-channel-handle=10904 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --mojo-platform-channel-handle=11248 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --mojo-platform-channel-handle=11292 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --mojo-platform-channel-handle=7604 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:1064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --mojo-platform-channel-handle=12444 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --mojo-platform-channel-handle=6380 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:1500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --mojo-platform-channel-handle=6816 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:1368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --mojo-platform-channel-handle=9236 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --mojo-platform-channel-handle=9924 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --mojo-platform-channel-handle=8256 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:6172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --mojo-platform-channel-handle=5564 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:8696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5884 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:8
  2⤵
  PID:7772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --mojo-platform-channel-handle=7952 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:7084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --mojo-platform-channel-handle=7668 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9332 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:8
  2⤵
  PID:8808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4708 --field-trial-handle=1828,i,18389828395774696225,5907628622737058564,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:8324

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:4924

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:8272

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Desktop\Setup_Pswrd_123.rar"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
PID:8108
- C:\Users\Admin\AppData\Local\Temp\7zOCAF9C3B9\Setup.exe
  "C:\Users\Admin\AppData\Local\Temp\7zOCAF9C3B9\Setup.exe"
  2⤵
  - Executes dropped EXE
  PID:5628
- C:\Users\Admin\AppData\Local\Temp\7zOCAF4812A\Setup.exe
  "C:\Users\Admin\AppData\Local\Temp\7zOCAF4812A\Setup.exe"
  2⤵
  - Executes dropped EXE
  PID:1804

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Desktop\Setup_Pswrd_123.rar"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:6700

C:\Users\Admin\Desktop\setup\Setup.exe
"C:\Users\Admin\Desktop\setup\Setup.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6824

C:\Users\Admin\Desktop\setup\Setup.exe
"C:\Users\Admin\Desktop\setup\Setup.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:7384

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
2a6abd1bcd8e28ffb795d63a9b0410f3

SHA1
d448fd96d9a3fa34482bfaff7fdc6fee2ede6c56

SHA256
0c1e03e512a1ceac87c7df93cf4a97a3605f9a17a56f72f042bca944a20b3eb5

SHA512
a61b8c634913961eb1dbbe174caa08a7a34d665de6b26726d3c94da72c035848c88ae020007b1d11097b845dd7930802a78dc74c5687bbbcfad3650761d56db5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

Filesize
63KB

MD5
693ff266468b070d184d533a67b72721

SHA1
c7042c04d76ce8105407174e9c00cf30b3910f1b

SHA256
e203a51927efd9580a875e39cf1d8aa720de518c703a867250713fb988cc2fb4

SHA512
ad39f38868c1ef54a5d0b233a8cf02df4bd9790658142c33535aeb2f9f8e29eab8644c0cee94a88b860712c2f8cb8ae662388886c7333e690cb36be4c42d1144

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

Filesize
17KB

MD5
4038529ad0a6a0e3bb4cce2e81a7faad

SHA1
5d39e018ef88a628a8a14d08b96ab60598d2f324

SHA256
4d7433c7688494e09811e5939f58f5af911bf8bfa3885756ee298672079476cb

SHA512
7f4522009a1721da527236a9bc15d3dedc6647bedfde45ac0e3ebddba2171ce86c9c5f5b5bbaf1e6d5a7f1facb372c66ae31dd6058d778a7cef8a8fec40ed5d0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

Filesize
81KB

MD5
df4896633a4a45887e3ca785706c902a

SHA1
0cec3ed521082232ddfb3535d3b43e6beeae15ea

SHA256
0ee70e5b6fbd54c434d6d371e8902f935cfd42bd72485d2f96f9c1befd220562

SHA512
d25b8080295519d4dce1175fad10faabbe56c62013102d0c5a6566754d032cb8e91dd72dfa1e9ce0f65256153b55bc05daa79f502b7fa274f14ef803487a1764

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009

Filesize
41KB

MD5
d4f952cf9f5210f536b7f8cbec89e62f

SHA1
c5ba251d56179b94f0e9aa1a88321c698e5ae175

SHA256
801148eb4711a03f41d46ebd543f08f1b5bf572ac28445373abd59da48d97ec1

SHA512
2c529029680e6930714c143f1224743609930fdf4835cede3de8024a15485eef8b3d086096d802f2afbc21dd91963e96c5b4651eb88041fa3861e108a634d8eb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b

Filesize
21KB

MD5
660c3b546f2a131de50b69b91f26c636

SHA1
70f80e7f10e1dd9180efe191ce92d28296ec9035

SHA256
fd91362b7111a0dcc85ef6bd9bc776881c7428f8631d5a32725711dce678bff9

SHA512
6be1e881fbb4a112440883aecb232c1afc28d0f247276ef3285b17b925ea0a5d3bac8eac6db906fc6ac64a4192dd740f5743ba62ba36d8204ff3e8669b123db2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c

Filesize
42KB

MD5
fe6015601a585aecec01e83c4f2696a8

SHA1
bf3ed4743280fd1e35686e1a05a39fa9193336ca

SHA256
898ea43724c2481f8b7cc65d97c46198d9c52fc4e5782298233f2203c52abb62

SHA512
d87441f98497a59f37d8fd4049e6b54559135917988d4c4ac70bdd88ea15e811bfda1412f397cbc80ce529f6a88a994d06a0fb0a72b50a3d5571bf6f45c8f308

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e

Filesize
81KB

MD5
e3a3ffa5e364543925f7c05fc277ee08

SHA1
c538eb173a108cc459779cfd8f055b158b706a32

SHA256
695d55d799464e3ba554bc7966bc85ff2bb838fd853f235c21d71ac1ef35ca28

SHA512
3f2a5e1dd01e098572ade9136c96ea59dceea6b133005c4b067b210837debe9c785e3fbb033612d1149a226b2f9063e909fd41256bdc22e2bfe868cc1b8e00e9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f

Filesize
87KB

MD5
2bcaab93dd773aeeecc668c22a64ac84

SHA1
334febe4f366da279a3c5712bde5790c2ecdd38a

SHA256
d9434e3e291aa9527bcf0cdd3b4fab7af59280236b00333d798ba8771777ec36

SHA512
09d7ab3810597ae77ff3ff60fdfac8bffaa08cc8b6f4a3db2f18c6e874c1f46dc9fc8fe0aefd5a43c38c2c2f76f0004764c20322f1b5dc0700695d7093ab5ec5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012

Filesize
69KB

MD5
2059ac7549a1d56321da5ba501a17110

SHA1
4524686274c55ff4b747b9ee061f83b7972af8f2

SHA256
0072eddf72004747fb11f86f8cf552610ea49f654751f5d813bfbd589b58198d

SHA512
6cdc038e96c5e212b13874f0a66d89fa298f620808a03ac02e73b40b6e7a4d4f430eb5fe6704fc2ae4e8c161e268a9291867c66f3ff9ee6f9f1ca2138bead181

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017

Filesize
22KB

MD5
bf9ea305f7eb2afeb20f661b8030709e

SHA1
990554cab7861dd54487f1be12013bb71f5964e7

SHA256
d4032e31739e4f212671b27c9aa14df233080c4fb7396bc851b045a714881abb

SHA512
6adbf45a4418707ef60e2c3c85cba196645e90b6c94f103903a2398a274281e4b11428290df3718bc4fcaa6da2c179e03e775689af02e072a7f4356129cc74f9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018

Filesize
31KB

MD5
0425d8d8a07e518fec8bea611ec97492

SHA1
6310ef30ad3e313cdfdd60509c2cd6eca4dad8b9

SHA256
59bd720340504923111a519702d66c9f4b870e2c730edb3837bc2010aab98ac0

SHA512
1c3fbf2e19785a2bfb05430c4e2e65fce3422b0615fd35e2aab094d212690a793f86925d73d181314a76dbbee212e66e45f541dbe91ae83cbe0d691f439b508d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a

Filesize
54KB

MD5
64e5ee1705981d9d2cdfce155d0df441

SHA1
bba3e34cc3c0c4b3bad93ec660a6d86fd6f3fc7e

SHA256
4099dcb0b712bbdff3331b87129b657450b8a74a9c5e14295919489441130e58

SHA512
133650b7c3ee068184f48cdc9a8c3da0e3a70aaaac3cfae7e4ca11d214ec2a672d1f70a65be8730a7509807c3cd302dfa7605bb04dab3581196f48de355c96ed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b

Filesize
28KB

MD5
8e587f837c16041efc4dc733be2ecaa4

SHA1
d0da1748240851041830a7a023df8d92856f6933

SHA256
136d4c612c6676ab4e100d29b14d4a85ced9b6052d3839a8c71256eba1d8dd77

SHA512
1636a5625bf7e3cdb6d8f488c2c466ff46baf22b6711f51fb42cabef3a029d5521fa3f55a1b9a9e64d27e7509337b0ab2b05f212927faeef1820d7b72002b94e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\135a9e73b7a29232_0

Filesize
252B

MD5
4553ad53e8a6043f02976b6746db0b0d

SHA1
e4bfa17db83db4257db060894481b9c2d01ff544

SHA256
a5fccffcbc45d86065998f4c73a19e6211776c595166d28d62ce9a0fc05036c6

SHA512
25f74cbea08febf320b965c65154508911c1e2aa9fa7fa7fc07893eea9408e39f7536267ae078e56cdf05f95351844ec5b814d08e3289134bd19b7fb24dc244c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8995791d6c80e844_0

Filesize
49KB

MD5
c9160a3d92ca686f70c2e1ec3d6d8dcc

SHA1
fab73e43cb66be1de6dce76e4b6c9fdf22c1df83

SHA256
aaefd3183f726331464c5aed248801d3d4d7d3ae9a5d134ec4adc1ceeafce50a

SHA512
d072ef7a6e6ddb4b9075163a7139d01ba4897929bb35181f951e1f63466c2b23cf893e0d129b9376d5ab6b903b865b3f4471eadd5072a6c9e42ef8dbd69e6cda

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
56d867f7fc03c8dbdb3a8528b4169a5c

SHA1
2e4da79d83f1239f21713e8698ad9c1200128603

SHA256
720bf0f67dd091745932147df817aaa8362ee6326b4c3fbb7dcb9f0df8bf9de6

SHA512
1efb72a4671a18e203c10f81a3c14d3d12a5457159f2fed24823767aaa624174e3e85942176cbfb2402277702668d24bd13860dd4d8222ab0284cfd3b98d4139

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
0e0b5c894567e86e744d94ab78df1bbb

SHA1
b097ac3c4b1a7e235d49eef7531a452642381ace

SHA256
b937b88f60f9865da8f759d685f0b7e8f07fd4789061361229d964ee1bb12241

SHA512
267bc5b256bda2d25ae75669fe7f149aa27d06fbf8608e556bc878e39b8d89942745f954229d13b12683c0963cfb52da5094614f938c9627ef4963c105de6574

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
27KB

MD5
b0baccf91254768eee79d0e838b0aa33

SHA1
9ea0984f132e2896ab0b9e9749773a6ad26d2497

SHA256
6b2e07c85ec79b4d8a1899a0a9f65e78d3c28886105316bc13ead6fabd4e1d70

SHA512
91765ee62e4bfdf3d24d5c8424d29da55313675e1c1c7f9258125f8b2daf2fe7f2a2aaee28b76d63a6ff418efd0a84f4fe0125284b3f3a42670d40b4d8baf94c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
27KB

MD5
0844139eb35873faf1a430b7572f120f

SHA1
4cd166e9648ad846e9a2866722dfb1356b6e6dfd

SHA256
b7c3400f2a75e975ec36816f7e8895be75c0b6c0ff1b4f4918be5f183e337860

SHA512
989df0e45c9215c4784f81ee8bd0b8df84f0858961c3bd6c22b999f3bea165a5ddc0a619ca94fd4ae1d1fd7d75e97fd485cc4840efa32734d9c5fe5adb0c604c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
24KB

MD5
14843f551a053319e9e3fb843019bd7a

SHA1
9cb178100e87f078478cfdd37d16e281899ca981

SHA256
9455a3488496cf55ec29b31ec6a389366699f7bcab28b75f491ea56676003690

SHA512
8f645b9a6925f1802645a0db1eb9afeff5dab10f0f839c0867d1d8dd5ad77e62c1f0f7826c7520a7917644acb0bf84f1eb32aa0bce6ddfaad954142bfb9f5bfb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
cb5e7f14b0bd55c8214507ab7952db11

SHA1
e7b53cc9884c83799488941ae6953732636a447e

SHA256
0867b924cc0a6a4b57741310bcf29f1f3858d2f09035c4cb52a5ad6c5563c187

SHA512
38ddb193a12ebc88bf7227824a21dbf421b757f0105613cb585707b842efaa93db6583122e565a03eea88efb396cdaab534afa302f533fdb9ff318f70c6a2bf5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
8KB

MD5
56f2720ea0397485458f746afd9dd374

SHA1
9a8f4ba2a92f8d5295ed810cf48d6dd55521be22

SHA256
9684ea56224a37af8c40ae687d491c8b5152e80f9a32d79281c0ea20c8703520

SHA512
dc90bdfca50937071c6c12e94b97a60481879a259806b62d68c3cd1f03066ad95982244cce4afe580a69eda371848edf3eed371583d275a481969d482ba5c094

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
5KB

MD5
616222603ffeab338cdd94053ae94ee3

SHA1
e9f714e6ddca1026ae5839c02d40568361a589b7

SHA256
49a4c7efd6eb17c48cbcb60b9d22e3398cb341b43c5519834948828b011e3057

SHA512
deb633ca5700fc21c3bd490172b944a15a1ff7aab1b7ed9a8d1ef53ac648b9e907477aa31ad266f88b0e1be46c93f39883ef931c20729e6e067d2ebc2b5a9f6b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
6KB

MD5
a57cae2d3a7209a58de8418b7eef7b73

SHA1
0a84dcaafb1f4a18e716b257a2ea73fbb6884c02

SHA256
e1d7f8e722e326a7ff825d9e836fd824042bd7f54186ef99a19d9eab42febdb9

SHA512
f53308a829058463bf95f4e32af0af023b2d6b7f1baf1702d90c4cfb9a2fb17703dec06fe1773e65037c73e2a018839d674b7fe48700990efec13dd21c5cc813

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
8KB

MD5
0545dc21a90c1a2dcd6df488de57c3af

SHA1
68df1d5e33d6c6378cabc8910aa02fcceb2d55b8

SHA256
699b36d65b9d4bc233cab590fa7cb8a6013ce56bbd557c3b522837665e774db7

SHA512
15e6f7e82bed3522ee6e857c433b93b31659dc9caf83b60bf950c4f9a873ff0fd818d1f3a57af23a10fa5f5b019bca3ec0becb215ae44cf9aac3582dcb5ab4a0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
8KB

MD5
8826e81ca2cd1c48f2dbda46a4a6b7f5

SHA1
8b8c9af04f2667090437b9d2dab1f8fd5e436ed5

SHA256
1722594f016c3cf5a58b6c585b6ce556935d5a7e5128e6608edc10389a77eb94

SHA512
b72a95ffa843e12adcca4a66cd26aa9cda861b7563a3eb4c316f6b67f26f58a4b40f6be70cd8ba150b83df0d8c879af1c8ec81df5434da5f6e58bd33c262beb1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
f6e45ebb4361855b939f2cbfa97a2672

SHA1
5df2a862eeb2e890c20b4a1a3d6b4ec27d0be57d

SHA256
5e5337c6e6f4e6da8a557dfba9b63247130be3c71ff312c8e377336b3c1b9ebc

SHA512
623cc63e30dc187b55c07e40c9b371ed9151e31aafdbba830f37caf0944e163811a34b4747969e7b23f8d8a94b96e1c180c222a06cab4a24c3d84835bf3466f4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
6d89602dd80652fe0561e5ff733ba9be

SHA1
03bf7048ef93a29943472b5b2c9f70d052db2e2c

SHA256
03e50a29f5a855bbcf68f73c12a03d559bef3cddc2f2a1a75aa4fda8b7648cfa

SHA512
143c955b313dfb16d9273f49e44facb9dc33daa4a55985df03a7d73afe0184359b695b8acff854ad9916142cf17aaf7de1ecd76be1c61556d66b875317a89856

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
278da686633ae49ccbb9bc26b3816430

SHA1
789cda3f7288fdc084b67940253eed8c6ce8628e

SHA256
a8a2cc195d6410a881d0c365a8c7344e763f634880b6b5bde8b03d989c24afe0

SHA512
22d5aba980ccfad1ee20db5e9f4aca35fca3737c2b755b1046875fd47a19843e9b0ec3ad481c07b6ffbae669561cdbc9d646a7b448c169092608a0ddeb611d33

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
e8487d92b8784febfc2c1fc5798ca9e5

SHA1
f6fe5611f2518d220afa3277a323b364bb083696

SHA256
bced8bc06531c2b13a6685884b67e02181506e141ecfbb6b24d991e00b6ac94f

SHA512
5449ec21916b1bc599c2ccbd990d2f6ac424cf2df5fb564ebcbd319e923f8d2a09b52cdd0130835e99e6df6e0fa9904a600a9ad44f6ce3abbf98fa98cf7f3263

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
0607c0555abb2494578318e319112484

SHA1
eac6052706f014a12983645ace7b218eeab83677

SHA256
db7218c13b38415a330bc98c835c2003ad8361514bde966cbc9bbb9a18e8e550

SHA512
0ecdc713f8f2e054146c2462121d4b92ed920a5b541053cf96d4a27dd44dd6d34f5f4adeca0a9f6746d580d4091aa66dd81c0daeca7682be5be77abda1e7d4cd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
114KB

MD5
9ee4c483d288f5a29ab42e7802fadb55

SHA1
fbaff1cbb3e0406c2134428768de59ca680c4051

SHA256
509e81f50e3a7b549db4f194074761f1a2057e53c435e28f7c6856c80896b06d

SHA512
8dbdcd588369ce0482e513264427b98b1632d33b78e6a2386edb5cfb29aa6cd4ae895d68a136d6763eaab081a07cfd40c4a80c5419d4da57ea116244f714a912

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
97KB

MD5
dd4ae000205f22adaa33f4edb6cb87a5

SHA1
465fe5c5be4ba702c208572a86bd6c229445ac72

SHA256
24a4983c555d3003da39138f7663b15b01dcf93b90504c792a00b10a592fea38

SHA512
93afe2165a6bc0cb500526d727b9430ef7e228cbeffa9465eee43635a3852277ca1e32997a3695615d91124f2dc5d1be5c79350b0f2e60996a172cef3090a323

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
102KB

MD5
433381a81534c81a1f98c3299a40a073

SHA1
71b0f6d6daccfb359d0e7a8e863381dab59f29a5

SHA256
fa7194ce7bbabb291f2451ee497262c442d24c4aad59dfd93b8d402ea4af7858

SHA512
68a00f5c94a8d7d0b58a29e1ac387d4566acac5f844b66429ee75c6944077325c7198aef04b7b4d0b5bb0ffd66b98faf736c44da0efdf35d6053c91c4732def7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe583999.TMP

Filesize
92KB

MD5
8f4a52f6d7997fd6ee733e0aa3c6c356

SHA1
27236386408cdd0fc8270ebec54effcfcac89e5b

SHA256
9a5d26ed0a5b067bf0b46effd3f650929c205b5374d4f79ed2814396ba5b9383

SHA512
13398c190263a82cc076a6c78ea20b5511c8a3d29da16827c44c43b60cf8035cfad81b5f1f5a80a0d696487c2f505f9c1afbcc6c5361990d2f3259b4366f1419

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d7c87462-ca0e-421b-b038-d04bbe314a11.tmp

Filesize
114KB

MD5
263c1ceaebba9fab2df7c6d481da33b2

SHA1
c1ab73f2dbb5ff1116137ec2e295b90742c8ddca

SHA256
e7e7e01ebce50f50294a55d730c58a1e844c4d246e7a1737bc65f78d1abc0a28

SHA512
d8b4b413b1b1cbbd0850af9fb9829029fead258f60845875b6652ee69bb1675d3af3c18b33589922a9c1aae7a7c3c252ef72d247e8a520e90a9c54de6383509c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zOCAF9C3B9\Setup.exe

Filesize
5.9MB

MD5
c42322002e40ea81b7deac4a6612c96e

SHA1
8fb55c75533f6a3b09d570b7a21daaf91b6c5713

SHA256
8d73d215d1133a160865192814242704274621970c5ecb4df9cc30712fbbfd1f

SHA512
b6fcb65b3c55d9ea10c7278cb4071d2111157f36790f7d34f4b6703128732d31c9438d8f3021950f3b47d5a3a327ff54d8600a1944acf17f46d3e9c9986908bf

Download Submit
memory/6824-1202-0x0000000000320000-0x0000000000569000-memory.dmp

Filesize
2.3MB

Download
memory/6824-1204-0x0000000002620000-0x000000000269E000-memory.dmp

Filesize
504KB

Download
memory/6824-1199-0x0000000077C74000-0x0000000077C75000-memory.dmp

Filesize
4KB

Download
memory/6824-1200-0x0000000002620000-0x000000000269E000-memory.dmp

Filesize
504KB

Download
memory/6824-1201-0x0000000002620000-0x000000000269E000-memory.dmp

Filesize
504KB

Download
memory/6824-1197-0x0000000002620000-0x000000000269E000-memory.dmp

Filesize
504KB

Download
memory/6824-1203-0x0000000074900000-0x0000000074BC7000-memory.dmp

Filesize
2.8MB

Download
memory/6824-1198-0x0000000002620000-0x000000000269E000-memory.dmp

Filesize
504KB

Download
memory/7384-1206-0x00000000017E0000-0x000000000185E000-memory.dmp

Filesize
504KB

Download
memory/7384-1207-0x00000000017E0000-0x000000000185E000-memory.dmp

Filesize
504KB

Download
memory/7384-1208-0x00000000017E0000-0x000000000185E000-memory.dmp

Filesize
504KB

Download
memory/7384-1209-0x0000000000320000-0x0000000000569000-memory.dmp

Filesize
2.3MB

Download
memory/7384-1210-0x0000000074C00000-0x0000000074EC7000-memory.dmp

Filesize
2.8MB

Download
memory/7384-1211-0x00000000017E0000-0x000000000185E000-memory.dmp

Filesize
504KB

Download