njrat | c84613e448763706501695c1a2c3736045af7d002f9bde59f9eb5a400d46e129

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
26-11-2024 03:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Server.exe
Size

23KB
MD5

4206d7b8ea17ff84d4d17be8af877a6f
SHA1

5a5e85b13fc90453a036a141fb84b59da7fc9840
SHA256

c84613e448763706501695c1a2c3736045af7d002f9bde59f9eb5a400d46e129
SHA512

9b31b7ac1a6fca36166c9c99c356ce3e11c96fffa3845d0c606d656df4c5b7c753c75c98a1fdaafaf44c490be1468df1cf3d6433bc4667b7d163cfbc60629d65
SSDEEP

384:bqMKyOkBkRbohza8yuTUt7u06lgV4a5pzomRvR6JZlbw8hqIusZzZ3ch:J/YI1TaRpcnuT

Score

10^/10

njrat discovery evasion persistence phishing privilege_escalation trojan

Malware Config

Signatures

Njrat family
njrat
njRAT/Bladabindi
Widely used RAT written in .NET.
trojan njrat

Modifies Windows Firewall 2 TTPs 1 IoCs

evasion

Windows Service

T1543.003

Disable or Modify System Firewall

T1562.004

Processes:

netsh.exe

pid	Process
2816	netsh.exe

A potential corporate email address has been identified in the URL: PNR#bFjQRa#pw@qWSyvf
phishing
A potential corporate email address has been identified in the URL: Ti_bij!UcDeeP@gOsU$c
phishing
A potential corporate email address has been identified in the URL: VzRWI@!uMtboeFmly_YE
phishing

Looks up external IP address via web service 7 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

Processes:

flow	ioc
88	whatismyipaddress.com
89	whatismyipaddress.com
91	whatismyipaddress.com
80	whatismyipaddress.com
85	whatismyipaddress.com
86	whatismyipaddress.com
87	whatismyipaddress.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Event Triggered Execution: Netsh Helper DLL 1 TTPs 3 IoCs

Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

persistence privilege_escalation

Netsh Helper DLL

T1546.007

Processes:

netsh.exe

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	netsh.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	netsh.exe
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	netsh.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

Processes:

Server.exenetsh.exe

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Server.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	netsh.exe

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

Processes:

taskmgr.exe

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

taskmgr.exe

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	taskmgr.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

chrome.exe

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

Processes:

chrome.exe

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133770655935407571"	chrome.exe

Modifies registry class 1 IoCs

Processes:

taskmgr.exe

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings	taskmgr.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

vlc.exe

pid	Process
2964	vlc.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

chrome.exeServer.exetaskmgr.exe

pid	Process
4224	chrome.exe
4224	chrome.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
1248	Server.exe
8168	taskmgr.exe

Suspicious behavior: GetForegroundWindowSpam 3 IoCs

Processes:

vlc.exetaskmgr.exeServer.exe

pid	Process
2964	vlc.exe
8168	taskmgr.exe
1248	Server.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

Processes:

chrome.exe

pid	Process
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

Server.exechrome.exe

description	pid	Process
Token: SeDebugPrivilege	1248	Server.exe
Token: 33	1248	Server.exe
Token: SeIncBasePriorityPrivilege	1248	Server.exe
Token: 33	1248	Server.exe
Token: SeIncBasePriorityPrivilege	1248	Server.exe
Token: 33	1248	Server.exe
Token: SeIncBasePriorityPrivilege	1248	Server.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: 33	1248	Server.exe
Token: SeIncBasePriorityPrivilege	1248	Server.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: 33	1248	Server.exe
Token: SeIncBasePriorityPrivilege	1248	Server.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: SeShutdownPrivilege	4224	chrome.exe
Token: SeCreatePagefilePrivilege	4224	chrome.exe
Token: 33	1248	Server.exe

Suspicious use of FindShellTrayWindow 64 IoCs

Processes:

vlc.exechrome.exetaskmgr.exe

pid	Process
2964	vlc.exe
2964	vlc.exe
2964	vlc.exe
2964	vlc.exe
2964	vlc.exe
2964	vlc.exe
2964	vlc.exe
2964	vlc.exe
2964	vlc.exe
2964	vlc.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe

Suspicious use of SendNotifyMessage 64 IoCs

Processes:

vlc.exechrome.exetaskmgr.exe

pid	Process
2964	vlc.exe
2964	vlc.exe
2964	vlc.exe
2964	vlc.exe
2964	vlc.exe
2964	vlc.exe
2964	vlc.exe
2964	vlc.exe
2964	vlc.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
4224	chrome.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe
8168	taskmgr.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

vlc.exe

pid	Process
2964	vlc.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

Server.exechrome.exe

description	pid	Process	procid_target
PID 1248 wrote to memory of 2816	1248	Server.exe	87
PID 1248 wrote to memory of 2816	1248	Server.exe	87
PID 1248 wrote to memory of 2816	1248	Server.exe	87
PID 4224 wrote to memory of 2608	4224	chrome.exe	95
PID 4224 wrote to memory of 2608	4224	chrome.exe	95
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 3864	4224	chrome.exe	96
PID 4224 wrote to memory of 1288	4224	chrome.exe	97
PID 4224 wrote to memory of 1288	4224	chrome.exe	97
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98
PID 4224 wrote to memory of 2828	4224	chrome.exe	98

C:\Users\Admin\AppData\Local\Temp\Server.exe
"C:\Users\Admin\AppData\Local\Temp\Server.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1248
- C:\Windows\SysWOW64\netsh.exe
  netsh firewall add allowedprogram "C:\Users\Admin\AppData\Local\Temp\Server.exe" "Server.exe" ENABLE
  2⤵
  - Modifies Windows Firewall
  - Event Triggered Execution: Netsh Helper DLL
  - System Location Discovery: System Language Discovery
  PID:2816

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\ReadSubmit.DVR-MS"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2964

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffff865cc40,0x7ffff865cc4c,0x7ffff865cc58
  2⤵
  PID:2608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1912,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1908 /prefetch:2
  2⤵
  PID:3864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2052,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  PID:1288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=1780,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2468 /prefetch:8
  2⤵
  PID:2828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3156,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3176 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3224,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3728,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4568 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4832,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4848 /prefetch:8
  2⤵
  PID:4408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5048,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5056 /prefetch:8
  2⤵
  PID:2168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=5348,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5232 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=5332,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=3420,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3416 /prefetch:1
  2⤵
  PID:4776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5656,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:1664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=3404,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5636,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5128,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5848 /prefetch:1
  2⤵
  PID:1512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=5104,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4844 /prefetch:1
  2⤵
  PID:528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=4504,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6080 /prefetch:1
  2⤵
  PID:3484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5136,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6292 /prefetch:1
  2⤵
  PID:5208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=5412,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:5216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=6424,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6536 /prefetch:1
  2⤵
  PID:5224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=6664,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6688 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6716,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6832 /prefetch:1
  2⤵
  PID:5240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6860,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6976 /prefetch:1
  2⤵
  PID:5248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6960,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7120 /prefetch:1
  2⤵
  PID:5256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=7148,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7268 /prefetch:1
  2⤵
  PID:5264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=7292,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7412 /prefetch:1
  2⤵
  PID:5272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=7440,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7548 /prefetch:1
  2⤵
  PID:5280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=7572,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7684 /prefetch:1
  2⤵
  PID:5288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=7680,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7804 /prefetch:1
  2⤵
  PID:5296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=8020,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6556 /prefetch:1
  2⤵
  PID:5952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=8212,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4412 /prefetch:1
  2⤵
  PID:6028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=8248,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8232 /prefetch:1
  2⤵
  PID:6036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=8360,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8496 /prefetch:1
  2⤵
  PID:6044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=8636,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8640 /prefetch:1
  2⤵
  PID:6052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=8776,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8648 /prefetch:1
  2⤵
  PID:6060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=8908,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8920 /prefetch:1
  2⤵
  PID:6068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=9044,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9072 /prefetch:1
  2⤵
  PID:6076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=9208,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9204 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=8532,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9384 /prefetch:1
  2⤵
  PID:6516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=7128,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7000 /prefetch:1
  2⤵
  PID:6524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=9504,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9616 /prefetch:1
  2⤵
  PID:6532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=9464,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9752 /prefetch:1
  2⤵
  PID:6540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=9888,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9896 /prefetch:1
  2⤵
  PID:6548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=10028,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10040 /prefetch:1
  2⤵
  PID:6556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=10064,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10184 /prefetch:1
  2⤵
  PID:6564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=10316,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10332 /prefetch:1
  2⤵
  PID:6580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=10324,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10340 /prefetch:1
  2⤵
  PID:6588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=10472,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10592 /prefetch:1
  2⤵
  PID:6596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=10624,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10724 /prefetch:1
  2⤵
  PID:6604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=10848,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10856 /prefetch:1
  2⤵
  PID:6612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=10976,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10988 /prefetch:1
  2⤵
  PID:6620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=11108,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11120 /prefetch:1
  2⤵
  PID:6628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=11128,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11252 /prefetch:1
  2⤵
  PID:6636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=11416,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11436 /prefetch:1
  2⤵
  PID:6644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --field-trial-handle=11628,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11640 /prefetch:1
  2⤵
  PID:6652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --field-trial-handle=11648,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11760 /prefetch:1
  2⤵
  PID:6660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --field-trial-handle=11884,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11892 /prefetch:1
  2⤵
  PID:6668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --field-trial-handle=12020,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11900 /prefetch:1
  2⤵
  PID:6676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=12164,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12208 /prefetch:1
  2⤵
  PID:6720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --field-trial-handle=12232,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12264 /prefetch:1
  2⤵
  PID:6756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --field-trial-handle=12256,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12404 /prefetch:1
  2⤵
  PID:6764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=12640,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12648 /prefetch:1
  2⤵
  PID:6836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=12888,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6188 /prefetch:1
  2⤵
  PID:8156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --field-trial-handle=11592,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8336 /prefetch:1
  2⤵
  PID:7968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --field-trial-handle=7568,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4868 /prefetch:1
  2⤵
  PID:7976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=6224,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6432 /prefetch:1
  2⤵
  PID:7980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --field-trial-handle=5380,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13092 /prefetch:1
  2⤵
  PID:8024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --field-trial-handle=8892,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6696 /prefetch:1
  2⤵
  PID:8040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --field-trial-handle=11468,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13252 /prefetch:1
  2⤵
  PID:8052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --field-trial-handle=13260,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8384 /prefetch:1
  2⤵
  PID:8056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --field-trial-handle=13376,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12172 /prefetch:1
  2⤵
  PID:8076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=13520,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13396 /prefetch:1
  2⤵
  PID:8048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --field-trial-handle=13548,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13676 /prefetch:1
  2⤵
  PID:8060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --field-trial-handle=13796,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13812 /prefetch:1
  2⤵
  PID:8096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --field-trial-handle=13944,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13960 /prefetch:1
  2⤵
  PID:8104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --field-trial-handle=14092,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=14104 /prefetch:1
  2⤵
  PID:8116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --field-trial-handle=6184,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12972 /prefetch:1
  2⤵
  PID:8436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --field-trial-handle=13536,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13844 /prefetch:1
  2⤵
  PID:9108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --field-trial-handle=6164,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13368 /prefetch:1
  2⤵
  PID:9116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --field-trial-handle=14344,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=14460 /prefetch:1
  2⤵
  PID:9124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --field-trial-handle=14488,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=14604 /prefetch:1
  2⤵
  PID:9132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --field-trial-handle=14632,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=14748 /prefetch:1
  2⤵
  PID:9140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --field-trial-handle=14884,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=14896 /prefetch:1
  2⤵
  PID:9148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --field-trial-handle=15020,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=15036 /prefetch:1
  2⤵
  PID:9168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --field-trial-handle=15064,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=15180 /prefetch:1
  2⤵
  PID:9176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --field-trial-handle=15164,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=15324 /prefetch:1
  2⤵
  PID:9184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --field-trial-handle=15456,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=15472 /prefetch:1
  2⤵
  PID:9192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --field-trial-handle=15500,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=15616 /prefetch:1
  2⤵
  PID:9200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --field-trial-handle=15600,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=15760 /prefetch:1
  2⤵
  PID:9208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --field-trial-handle=15744,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=15904 /prefetch:1
  2⤵
  PID:5224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --field-trial-handle=15052,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=16156 /prefetch:1
  2⤵
  PID:9052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --field-trial-handle=16120,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=16280 /prefetch:1
  2⤵
  PID:9080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --field-trial-handle=16128,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6552 /prefetch:1
  2⤵
  PID:8368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --field-trial-handle=16512,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=16396 /prefetch:1
  2⤵
  PID:9040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=16548,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=16660 /prefetch:1
  2⤵
  PID:9224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --field-trial-handle=16680,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=16804 /prefetch:1
  2⤵
  PID:9232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=16836,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=16948 /prefetch:1
  2⤵
  PID:9240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --field-trial-handle=17188,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=17212 /prefetch:1
  2⤵
  PID:9256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --field-trial-handle=17456,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=17480 /prefetch:1
  2⤵
  PID:9264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --field-trial-handle=17500,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=17624 /prefetch:1
  2⤵
  PID:9272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=17648,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=17768 /prefetch:1
  2⤵
  PID:9280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --field-trial-handle=17788,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=17912 /prefetch:1
  2⤵
  PID:9288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --field-trial-handle=13544,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13632 /prefetch:1
  2⤵
  PID:6904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=5572,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:6844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --field-trial-handle=4544,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4576 /prefetch:1
  2⤵
  PID:9072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --field-trial-handle=4672,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4616 /prefetch:1
  2⤵
  PID:6644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --field-trial-handle=16900,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5848 /prefetch:1
  2⤵
  PID:6380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --field-trial-handle=14372,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=16924 /prefetch:1
  2⤵
  PID:7076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --field-trial-handle=16572,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5100 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --field-trial-handle=16604,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=17064 /prefetch:1
  2⤵
  PID:2532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --field-trial-handle=16592,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=16828 /prefetch:1
  2⤵
  PID:3172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --field-trial-handle=15464,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=15884 /prefetch:1
  2⤵
  PID:5156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --field-trial-handle=15280,i,2603693856080823649,1812470617134675728,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=15268 /prefetch:1
  2⤵
  PID:5968

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:2244

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3960

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:8168

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:7772

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

T1543

Windows Service

T1543.003

Event Triggered Execution

T1546

Netsh Helper DLL

T1546.007

Privilege Escalation

Create or Modify System Process

T1543

Windows Service

T1543.003

Event Triggered Execution

T1546

Netsh Helper DLL

T1546.007

Defense Evasion

Impair Defenses

T1562

Disable or Modify System Firewall

T1562.004

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
87a3ba29085e7aa012815926ac2984c9

SHA1
a1b8b68ea9f6bc7daa2ca940bf817cde73585882

SHA256
616ab0154505ca2cb933d9f4b47852a9619e58b5acf9d6fc1ebf0721aac4cf9b

SHA512
4e46f5a39de1d6e4598d57883508e0c5ad45782dff0c0ff01a3b2229dc9c37d4c72e6499237e1ca4caca5fe5150d5c83ac485c7c519202865b0d70b0da26f5d0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a

Filesize
74KB

MD5
2056c9a20c2d5e0638fc0edc54fc92dd

SHA1
42c121e770cb50928a8fd2ad2c245444b97fc526

SHA256
f23c523c350ad5a0dbb1af25cee8ae2e282144bfb2dfdf831e8ee135e2c470e5

SHA512
3bb6bb9467965fb6283725bd44b3fc4455fd9433f3f9348c306409a19e2c8fccdbd095b8161f0a0b97717f88748e22eca6a517d0e754072f623ecce672b35ff8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d

Filesize
43KB

MD5
ef8950d0ec760440ada544800f48e8fa

SHA1
93952f1bd0659c74e3f3c7bb5c17559c45c82883

SHA256
b920dfb2f3097e29422c4d6b9466f487c7fcd72a451796398360ea1d4d48faf5

SHA512
6ff0370cd8ccc2ae29bd2f9cf34d7cad2c4615ed9d3bdd65ece73cfb627f0051f62a3f97d1a7dbdabc8d3a384bab0850f19992c8278b7f896149e3006f4fa708

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e

Filesize
67KB

MD5
22c04a443316a8f19693fe1cf72a57c7

SHA1
79ebd5427d791f4b85759c520dbb17eafaa089d8

SHA256
4bed01f2abeab6a751a08ee43d8499ffef3aa8a42c4c41b082fc4047968f10f9

SHA512
1acaa0bd5c5e56569f634fdbb39214b3217423f5935dea8d1abc408efa5cdd730d1ed4e02cddebb4590753cb852ff2be46793223429777960e83d378907efd1d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f

Filesize
131KB

MD5
71798f9122f51bc90725cebd15951a41

SHA1
cb832b8efc989520463fab1a4d3a213e8db626cb

SHA256
2c5065091cf9cc9ff9beb65443118818a1ae635ad6a4baf0fe8b7b0724b20cad

SHA512
472880169efab1a16c2cf15caf7978f02bae25be4e412a1be2d9e1f470e85395145a2e3f53c1908f9574c7f8550ae9de95aa6a81be937aad20266597173f2e4a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023

Filesize
205KB

MD5
c339ead2d273e82963726dcae21e4b6e

SHA1
ec4c542b1ed47b6375da4fed4f634189f1f7846d

SHA256
cc4ad0e16e8baac69dd06293430cd24fa15add61b1eac48cdd0bf6268d7de163

SHA512
6d32b1b2b0095df4c5cc6ec523107b33694348f98cef007860757d449a42a6e1c60a4581d870735729366c6c3f97cc5d009d3583d9d5f5b42968270094c137f3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000024

Filesize
116KB

MD5
9149a117317388e50aa6eb171af279f5

SHA1
4b9f90c3194999d15593a53199bcaf68a227214d

SHA256
6de1470247aa3ca2cd47cc5a4b458a06e464cf828dc5bc1ddfd44d2792bcea7c

SHA512
d659a5ab1bf76d9576fe5dc796fdc7130bc0f3e3d52d4f99519b732d10afafc4e6ce4114a2b255c11defdd5f23356f31878c0f1585eef98b6fa4a2b6dbe39bd7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028

Filesize
32KB

MD5
d3e1db79040fec3a4586d0348db5443d

SHA1
1f67f6e2b4425dc3ac09bc3dc9311ad0ed3d37f2

SHA256
b2c432ef33e366f934e9187d1dc1d15acd1ac69df4f58c7f5f3025018450eb26

SHA512
470e9c47630955828791ad79e0a1c8f9633d78f3ed5c291948503854eca4f30b8884dba5db2fe93a9966546f744ea4fadb43770bb7f185444df30b86278a21a0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a

Filesize
152KB

MD5
4521b6fb0d76ba6fbde6dacf5a6a2a51

SHA1
8ffdc57f21502f0164760f9e2bf4dc10bb3fb43b

SHA256
4f9e8f4c4e21819683335f73bd1e7d2b3afaa30d3449508472294885afe8f0d4

SHA512
13819a3a6357cd44717fe768154f8117115b22043e9ddf024b5b7ebc5ca427d733261e0a0aa0237be54dda49fd3010853b1692dfb74fe42695d201cfddeff552

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b

Filesize
25KB

MD5
311b3aba523db1d97c1666646adff876

SHA1
42c922a52fd318cece6333da81eb605d2f934ed8

SHA256
1145b78d25473c00b8ef49360682521adee5e0a444dbf5896882655388be9121

SHA512
d81ce87b6fcbf460affd90d876b9a527d5b97e4508d062404dda79880db71844b5b9cb5b9f3c8c1df9ace92ab7bfad9722f549f1a2df2a2bb6830d02f24f33a0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c

Filesize
107KB

MD5
d0b0bc4f725f8e2c71589dc3208c484d

SHA1
a78690e847121f7ddc62ca6582b3b9cfd1f03d3a

SHA256
7ea2891f6c8b1c4705277e24a457d0b3e0157b1e55e1193910acb946a40ef71f

SHA512
1a946d7fd4ac99213c7b6f8ab77940da982e1b51e318a42f87cc179298f32f3aac6081a13e3a0d59cd9d3a8d1e444069ee0cb62380464e188be7051010108f48

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d

Filesize
84KB

MD5
1d4041a2351c6ea1995daafccfb3e803

SHA1
e5d0e82e224eb59a89a300475414c19665fd7656

SHA256
6124276009a09fe721ff78095a731b4b734555366b4dd30562bf99252ad96b70

SHA512
27579cf04e65cbd2c6f232906d89d43de60598f3b076c07682a0e31ed37d08eae017e222da08f38129ed5681925a8e904f237b791249f37e3ad416589aeefa6c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e

Filesize
19KB

MD5
da2c61769e5fe7383b2ec544b856e174

SHA1
1d94647e5bc4092b8b4d37b0e927e699f860c9fe

SHA256
78067aa2fe738763ac9981c2c8a2678319a93d4c99462cd3867289a5671da557

SHA512
8abe838ca76ceb9b08a1675e6e415604e9c13695aa5aac0ada1803997719fb69fa8f171080a3d661b47d30cdf0b562fee8ef101283aa2d71172aa750390c7efb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000030

Filesize
20KB

MD5
16c1a056e54694977a480c0c3a3fdaab

SHA1
0c351c6e8adb693ddec9a97f1e06990caaa2b291

SHA256
22601f3041c194595633a633ea80562d9807b6ac64b8d923b5b95705e6bf9f5f

SHA512
39cfbc6fad75f6aa7500842052abbfaecea5cd98ab66b3cff65937a5cc72ff9bbb737bb3fba11ec624d0f2de23cbac1f9417f2a35055d2c5b7a2174bf04aa19c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000031

Filesize
22KB

MD5
394fb13cf13fa07c786c036b802b9476

SHA1
9532e1cacab739240dc21cf7b6c2416aad2d3efb

SHA256
fb3a6a1bb50b9b48d1d8e9ba2bbf3afb89ebf060ba9b052a9faca32ac88763f6

SHA512
074ae98c81886efdda2dabd828c672dd5b545806e7997194717afd822f7d421ce3e2e6923886793e828c5da40edffcd10920e1a5daae3912f2099304470b75d1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000032

Filesize
88KB

MD5
f78c48abbf5f87386a6ea5ec6bb99fcc

SHA1
9f6ebd521edeb5ae85e86d9a3e31f97e48ea6a47

SHA256
ccacfb1fa3183975771603f91aefcfe03281a00cd4057f268bc42d759681ce91

SHA512
3a9a7ce25610bf7fdb6ed33c7c530fe1f5f13134f877621c92f3e8652190911e669d3b82d7bbce3049ef8ebadfa3f0bf40ca20e115781d1b8a3985a7317b3838

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000033

Filesize
275KB

MD5
5c1b6a953b4fe9dc66e184bd8b1f6406

SHA1
e0e076201aefed84f03c29cd48aff7bbd3554a28

SHA256
606f62ee4d91154c13a541c9196dbbddbf9e1e324006fce5e37aeb3d87369218

SHA512
2806c308018191e920a114b2c3900f337367aaab3453fd00af86138c936877d59f21a455bda131f8319e64589db54a47acc636e7eb8d25b56d6b33129d1dbbe0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000035

Filesize
28KB

MD5
f1d9d186e57910d58688dd0b009319fc

SHA1
f82484219c6e1bebe8ce0b5fdadff503248189c4

SHA256
d7afd3801127cf53117241b74b8f19d58f8a337d1f77cd06ce44a029deceb0f4

SHA512
73d8cdc2c3e6fc89d32e04b5db7c394ca2d1a8be3eed5f3634d63b8aaf9b990eac8be769f3eed37d7ce67b733f1298906998108963213ded9a6ddc52195a120a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036

Filesize
16KB

MD5
89a574ff00e6b0ec61d995d059ce6e65

SHA1
aea09e96808ab77165ffa712eaa58b8f056d0bb6

SHA256
e5c29c139842fd487473d0824f2c01b374680fb35d22fa929686d17896602a44

SHA512
30d0d40bd680e61968273155b740901cdfa66670fc2af6f23e44c6b998b67cc1fcd0b51bd5f9470f209f188e75d071355e592b2a7c97f4bfd15d07d455e0909d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003a

Filesize
16KB

MD5
9c6b5ce6b3452e98573e6409c34dd73c

SHA1
de607fadef62e36945a409a838eb8fc36d819b42

SHA256
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc

SHA512
4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000081

Filesize
30KB

MD5
6fb26b39d8dcf2f09ef8aebb8a5ffe23

SHA1
578cac24c947a6d24bc05a6aa305756dd70e9ac3

SHA256
774379647c0a6db04a0c2662be757a730c20f13b4c03fe0b12d43c0f09e7a059

SHA512
c40f4771c10add1b20efb81ee3b61fc5ede4701587f29a1c2cdde8b6faabd1c76d769bf8b99aa19082012f95d99ba448a472463fb9056acd2e43542e14e605cd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000085

Filesize
67KB

MD5
ce58019b091dbdb1895be63d765b1177

SHA1
37a38458a92835c43b270069c0629c6975b2ba69

SHA256
8defb86fd585d1e578370bac22698f0de49d509d7398a0e83fbae7a9d11e0fcf

SHA512
36be843dd5630cf0c76219459b2ff946fa91ab90be31e3ac62452642a79a062b9d7aaae14a0ad8fd92b1a6d468394f1aa8bfe45f262f33e34048b46e046a1b27

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00009a

Filesize
20KB

MD5
0fd3b46fd7e5dd422bde5768a83ffdef

SHA1
00bbe47c66179502aba235f9f5c01a0cf2e76051

SHA256
4027d8ff4ab76b54c34765b96344808d7ec72c0d8e1c26060a8a300f2933a72e

SHA512
d63690a50479d19b959ec1e7ec27214a4a53bb2205b9008982ccc68bab93f1cacc7bf788d20476dd9e0d9b12299f66803f5377136da28470dd460c875dbcea2d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\135a9e73b7a29232_0

Filesize
252B

MD5
f26c102c085a2077fd2e032ad7448afe

SHA1
a2330c0856fa3e55f6f4f54fb2e9808bfb3017f5

SHA256
c6ce1770077f29343fb9e8c30e50806d0d9a54f9dcab1651695185297ce99699

SHA512
ea228f8beda2061bb7c86bc292723fcdd078cbad6fb3547d4adf4dec2f36b83abdc1f0b10e26d5ef2ee47c17cf37be0467b9549c5f13bf6ab5948f351601cf59

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1a8ace52e496046f_0

Filesize
265B

MD5
1e0798b6f33cd6c342d14070a657b0f4

SHA1
60b5869619f0129881fe82ec2d09ad3de480c817

SHA256
b63a63972b176eb604a3b609be6d881883c5ca03f1eac9334f5f2a9528d83555

SHA512
9bdf4833b74fd58a3e6bc9660fd306b1cd199ea5adfd485ef3c17996f432069ae9e07156f64fb789314332c5a7449f1408c9183c851314ae995c8e43caa765e2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1ce91c7d3c2c2734_0

Filesize
285B

MD5
d3f1a6e2bd507cee11f12e8ed9a2e72e

SHA1
fc7201a00324022f370f580a4b39dea243e84586

SHA256
1685fa4f7097877adee084fae49bf933cce816d3e45ed15881b85e51589bacf9

SHA512
d68425f41f3d726deb398d36f430f3387945600bcc97d66969bb000f08efeaff1c1d47f463375195a809b17d20b85d4631b2b1495e0543e8cf83b0182c3ac0c0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\235157ea1a2a5892_0

Filesize
303B

MD5
a0db2b7c68cc80f7c2c85403452f7191

SHA1
9bc6960234cbb9b6038a68258617ee8f12a95409

SHA256
7d999cbf434d5fbfb5fbfcfed8046d17f48022472d8c70a11145a64d405c0f58

SHA512
21e2bc48e74fe15fc1b1940653c815433439bdfdaee02110d44699121613a79d0aa5f3a2243b90c6a590d7a901555162766bd1944b434a42e30b4f00b420474a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2610cf87a81bc549_0

Filesize
230B

MD5
43133ea1546573fc7b75b59c8c8bccc6

SHA1
648140338191d236f464a9f65b587d6c4bae4b2c

SHA256
940bf77b0df8049ff9b7354d47f4b73bdc140121f539f33bf5746a24b5f3c1f5

SHA512
4409228ba6514c442509c2e1608c1e0a823862258ec197620321293ca3d062b1c0b9be2b387fcbd5b919fc06233f6913fd3c019a1da3b4844753dee3da939c36

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2bfde39962961371_0

Filesize
227B

MD5
a88f32d8d8a59a389a3a1b46182af6ba

SHA1
46f5503f4ea8de8a346830253f9452c919a560c0

SHA256
9abc16d86e2bfe5c57b5198b65f861403689a65e4eb2972bcbcf99a73d7e1318

SHA512
f2ea552967348d09c882fde8ed7b24e0197868fbd8d1b5b690e5c5569345f7c8c83cbf7759d4370537551bb2b63776f84f9b6bf7128404c5faba95c42f776a9b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\336a68eaaf209f48_0

Filesize
269B

MD5
cec6905a7b1290a93d763ea217a4bf0a

SHA1
00739febf6787bc3fc99b74873b0641d35f767c3

SHA256
655e8be540e6ff891a4cf311f6a539ed1f9952f492e12f4f62a48f20392dca3d

SHA512
fcc69a4f5d184d515d297ea55bfd315de53abcd97ad76fca951a755811247e8eca8fa75e0eae7142ffe77867dce3f77d650af1cf9b1bfe89d53e0c5c1c539ac7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4c307b02b4dcc58c_0

Filesize
236B

MD5
21bb8560f31b04c370b19b529dbb2430

SHA1
0720bb421580d188a79fe5cc51efa1df960834ec

SHA256
961ecb9ec45e8b17418e30ef42a3f2d56578e5901a7b000ce18031c03d219010

SHA512
0222890433f77ee11a97411411d6896f16ce255380041c803213e6580b757fd4434bb103b77d8db85d064054750dd601ee0dd0b2b0458c7f6333dab5187b79de

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\617e81d8d7cd9c92_0

Filesize
276B

MD5
2bf731c07cbb0153c3af7a84c28494ed

SHA1
0eba0d675116810eea062077323fb83a41348287

SHA256
f41bd5fde691f38238de757009418b1f240c0f1bac48fdb0dde4943e2837caec

SHA512
f2297fc7270c66a74871f377ccc9265a54c913f4c6f68d76e19e2d01c9675a969a87f32162d5d3bf345f77c6cf089074e0bba789e514fa26e5b849c3906b7a74

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\666664b0905487c6_0

Filesize
259B

MD5
721e4c17d6ea2f2a166a663a55bd44a6

SHA1
a1d41711ad9099c8135e34aab2432bb2a1b07068

SHA256
f2d888d144c61e03560ae7f07e0e32a23c2ad5af401d7c2102854ddb72bfa420

SHA512
b2427d1b741cbb1dcd52e27549433258309c324ed05707784f2f7ae22a812cf377cb21eaef3e08c262354bc73a526cf924f2bd7c55d3be742ab35f876c60e641

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\691e7b222ac37b51_0

Filesize
55KB

MD5
ec48f474a648db579fb5e20c82bd560d

SHA1
f5d904c29919bc494716a68ad05a013b95f8c443

SHA256
30f378def0d12a9e13aef4489c4d809c491b594778d04f0edc31949bb9e0735f

SHA512
d144b782ebb2294ef62b54d53b9adf2047b6f29e8cfa9e13fc4f294e4930a37362a1fd1fb0e671a05c1c112c9c910e51dc72671fb367d468d8ccfa765ca0f4f8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b92425fab9028d55_0

Filesize
269B

MD5
61c726769a5ca8466b3e6a7c30eef7f0

SHA1
fbdab59dadbebb905011d15abc74605f2c683be7

SHA256
1c16e0d5aa4b33e10535ef71442350507821004f8c74f66b4f42212780cbe57c

SHA512
5452a78020ffb78d5ce531dd16f7db0fcb61a41c5c01cf10b2a0f5d1d6911c1780bd0ba69c62db17f4a542215d297bc463e441cf7089e4ebb516e725f044decf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c169d6bb565a6ca8_0

Filesize
279B

MD5
5be7cabca001d403ae2aacf238675598

SHA1
043e597b3f5e005dc6718da41e4dc3001b1e6cc7

SHA256
5022b3d1374ad84fd0bbadcc1ae378e74628c2cc86c325ca465d0453e6b32008

SHA512
270aed6a90fa9aa7e07e7174663c1027b7612653af90906b7d5f44b5483f1b209b3e7916d885534cb844332404bf8b765f785e413dffb05d98aad66dca7f3ae7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c342dd839b97d0f8_0

Filesize
49KB

MD5
38236617e1c0a19b0e7cd9c127da4c72

SHA1
d69c3a04bdcfc9eed34caa2a62bc7fd96e204066

SHA256
daf2d62e0c2fe7b5b81e6433cd24751fce83c495aa9d777e0a944216d0a67f96

SHA512
9dcf4f04521222ee486aa0b2be01e0e774df146b07df37568b980c5dee01a3fc2405b59692e991c64d74821705448a37b889ce0bb1d8af71a1de960d5a04cbb2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ed34469adbed456d_0

Filesize
266B

MD5
2ea863779e1228f15f59ef993e32aa19

SHA1
57f89d5212be62a88f5573027e77b3528c52f6d7

SHA256
73a3ed0dd81668d6bd4dbd98d555496db198c11dd2c3cf0310f929efb4c345a1

SHA512
c341969e12fa22af659c06e9d4c5f626a68cffe4ffac95f3a9a2a2abfe48b3b4d2bb327d5feafdf92cb0bd9cd0790e4c42fbea1285594740d5f0dc8733fdb366

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
59a298542f5b742540c418d7288167b7

SHA1
243d92aae6cbd7329a2b8db1a989f75b5f7e0e15

SHA256
8b97774aa9753201c562c8706b6443430a694b56cc269d8ee333c966f43a7817

SHA512
dfd5f88185be6a72b935d0d4c31d169a26a860855ad2a1fde72585f4a7b7b56e00f6498a2796918f025ff07e2213be8b170cd53f54b5bc8427f918f6ddc4ff20

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1

Filesize
264KB

MD5
7f83b53819b9d9ba0c0d1496bd1c6324

SHA1
abcbb06ca552e034628b2217fca59c6ffb72571f

SHA256
fd77e2b6312ebcc5b148643e5d092304fd232a0986814b0ae9f842f2bc5d8552

SHA512
998e6a3a6c9758adc4846cce731ea0a9a8c806a5c559b6c306f64c801e4e803a2ba0a60b5e52830c0d47a03f8a4a2a8bb6b828d380d8cc6ba916b816b6819a68

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
66KB

MD5
3e5a8b0cf938f27e88dc07453a149edd

SHA1
a576e2198dab82ab78294c1e3835a62ae67e0fb2

SHA256
857b960a97e2c5fc5cf6ab0ab9096709cea299059485f407dd15868e4db7f65c

SHA512
1093e2458e3f26bc508e765577fd1283fe80367dfd49a5e339982c1dd1cf7b88e47c16ce23deb15de75ea3c27a24a2f0bad9b3f799cb617046d460539440dcea

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
b1f77989590497ec8a5d904cedf68c40

SHA1
6efa8922ccee0918812e9df16c97cfe74539e4d8

SHA256
1398b86a4f3489f1f6aacf7eb545bc78e832e154ba4bad975b9c00e318f65157

SHA512
9990c1b22d28d7f80319351904d2b509d2d0d4cf0bdec35dc6eabd28ef0d2117b651d20d475860bf5663c5cd1b778849f2d84d76e3d89a243f5a0e1af3ee7b5e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
9KB

MD5
24910587624b56be0a1674d8b9614077

SHA1
7cb96fae1995621ba4610eb835c30d0cebe0cf9a

SHA256
5bb851d647c30b5c3669f2aa1d8a8eba17069789e4c4774d18227837d87d0521

SHA512
da571befaadc6ab9e8827fb07f482dcf6447e8162ec5a10d0ca6540b7c8150ae035465fbfaf337c4c1e5546d8aa33be25cf9bc6a36bcfe2c3a24a9daad68a2a2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
356B

MD5
36be841816efe9aca255d0880610a5aa

SHA1
63281a58f70ea1c5470bdac0d787732389b6c9a8

SHA256
12830ca4b3325b70fa28b1fb7089b7e2fd5448b58174699dd539f6f9b8eb4c32

SHA512
33ced42962f3729001b507de783bb7374c1b43a9967557683004c338c12b953856a4fc51474fd140ad5cbf6c37b77d5a490806d88ec18f4bf602c7362a64f336

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
6KB

MD5
4afcb533bbb7bf2904de0b0c4935f7a6

SHA1
abcae0fda49bb40423ba515cbdbfb881c41b2860

SHA256
a5e7b49a98aecd7234f0a064058a9eb3b426b9c4c15de8303e6defa20dcc0673

SHA512
5b7603263d47ca4d8131c8ad8da47cbe04ea03ac64bda280eeee2d2f72003e3030c7433af93045677cef76cf84ccc8184cc58ffbacfe1c4163ef2f5dfb9ebc78

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
8KB

MD5
c78fa2605740d4e1640561bbaa596171

SHA1
6dce4a97e4647a52cd0a09f4a27641440e86f004

SHA256
7dba72916a34a397efabe69d36ae76a7fb544671021de67bf66ad65ed5170191

SHA512
454b7071277fd240432945272a25f3bd5ba6ba184c75b6089a528b815a347fe7fa33bd0dd791be4cdcaa67d61166d8ce3dec8b4d51f6a871a8a17d5a93baf8b8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
9KB

MD5
4465e826f62e19519b071a8fb8997ae6

SHA1
ba03e83050c9f10d0986c2cdce88313fb9cc4400

SHA256
331d6baee7a9dcb64d5b259829b2bdcb3b8003dee9e761350c11a793b2c3f089

SHA512
fd73bc494b3caa72202f8d976309fd8a3b18f011e59900632408322e172b2712ad6560da39c15aaf8d927db3ce8acf1004ecdd62ec2d563cb284cf208febdf5e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
cda25686bed3c980707eca5100ead87d

SHA1
8dbf5bb882fb4df62d1f993d92a5f4a0d734504d

SHA256
92049e5079983e8b0d4cf149bdc3c2788a82ef941f8d5ed40fd2881c6eefebc7

SHA512
0057a0451c8d85f7544e5751c5a73b3302c074fb27d29fbd5d9072f203f5fb45dd00b2f85c9eeb7b0cefe405165b9dc74d966c8a39f671fbd8c9b36d97d31f49

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
72d5f32138ec33b073f172e0a1ea2fae

SHA1
16a715afdb93a7fd467598005564d7817992a25b

SHA256
c8d6bfc3bf87e83b46356cc8ff1311d01dbda3e1e1f629ed5825fe6b875062d6

SHA512
728c2b18bf8ea8f16985e0d7eaf65642e3ba99c9804b454a28512130751e256139001fe5c2f646b54259b3027d1cb14f2d0c692c571f8aa9a14c79e9f5815123

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
ce6b2bbd646a10a933e016f306ce32eb

SHA1
80d760e32977c930ccf6ea911adc89884ce2ddf6

SHA256
4d3061545d96f6b7f3eb1c7376e05f94092e7c917b732af089385692b84a6de6

SHA512
339d9160da7d876c0355a1b000fbbbab6b0502b6962e18e548174e9d27af89f1badb580a3c22463347d266f83054415f9f5c4894a3e9d7e396aa8be6a62cab80

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a667d86bd2106d0262b9506dec443baa

SHA1
4917210eb9f0269ce5ca4821b578319e4e377494

SHA256
697a00e286d578af492d9f90860088317cfb4ff6f3c732bbc17c0c7cd696c3da

SHA512
d56ce59afdd43a1f02c2e20148b53acd2076ae1e8f51b21095b26f008746aac35d2b9bb56d585d2c7e83605a7126328f0ecfaf8cef832d7037c1608857f169e6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
95afffc7eae9e30dcc8971630e5d4425

SHA1
c6cbe5e0a633cd72bb67a95f001f23143ce7fa5a

SHA256
55f6f9cb4fa9ac452b1693739dd5d75cdcc09b6ba7a8a2f456182ec230246061

SHA512
bd06f4fd9968d92b8f8ea8fd602b041847931bbaeae8f1eef74e59b27f0fbdce90661bdec291b02998eaa6352a427e993e9f5cddcef5aec3feade0e43166ef4a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
234KB

MD5
74805c9e9caf6e27d0eeb0ed7a7ca3cf

SHA1
b6256f4ef1b6ddeac4b5af789411127abb304a29

SHA256
2029bdf87d4343b3602bbd713309306092b79e7cf8339d47a60a0c2e7c948bec

SHA512
cd2beea3c0f53005bcc4e2575a1969a80b783a29cc78eb5127c82d58c77fa0c0d0e5bf1f3fc92ed45b6c6bda80ca24a91ae70583eb68a54e21bcf9c650d6058d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
234KB

MD5
8168eace8a52fc9cb3af238b7e8a7409

SHA1
d2a84ba68329eeff9496ccf1fb1ad687381c3bc7

SHA256
2267a53b97d0441a435cf0ba0469774db1d7a70aa2ff47cf90b8b95dd10fcef5

SHA512
73804115cd2696c8c0d090eb36347dea90f54267eeaf95f05a60e93cb842f27d3a3100088cbefcd83f72a544a2b70bfefd57ff789a29e5270169c8eeddde57da

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
234KB

MD5
9e13d1c5b527976deffb832db9f7dae8

SHA1
b69d1f21c1222b9eac87488a609944cf86377328

SHA256
db8523dd9779084860f31458a1b49bb95128094b4b829e3797d79a4c5fa05d8b

SHA512
2bc65fcd86a67d530f7c808c7eacaebfdb1799f70f770447996f3daec76aba99a30e31ca5d22ccc24fdf8200fab6ae8f6f3eb2279e4a4cabc99e3f3e086a8d2b

Download Submit
\??\pipe\crashpad_4224_HWULGUHGJFFJUSOO

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/1248-3-0x0000000075392000-0x0000000075393000-memory.dmp

Filesize
4KB

Download
memory/1248-5-0x0000000075390000-0x0000000075941000-memory.dmp

Filesize
5.7MB

Download
memory/1248-4-0x0000000075390000-0x0000000075941000-memory.dmp

Filesize
5.7MB

Download
memory/1248-1-0x0000000075390000-0x0000000075941000-memory.dmp

Filesize
5.7MB

Download
memory/1248-0-0x0000000075392000-0x0000000075393000-memory.dmp

Filesize
4KB

Download
memory/1248-2-0x0000000075390000-0x0000000075941000-memory.dmp

Filesize
5.7MB

Download
memory/2964-19-0x00007FF807030000-0x00007FF807064000-memory.dmp

Filesize
208KB

Download
memory/2964-21-0x00007FFFF69A0000-0x00007FFFF7A50000-memory.dmp

Filesize
16.7MB

Download
memory/2964-20-0x00007FFFF83C0000-0x00007FFFF8676000-memory.dmp

Filesize
2.7MB

Download
memory/2964-18-0x00007FF6D2ED0000-0x00007FF6D2FC8000-memory.dmp

Filesize
992KB

Download
memory/8168-1463-0x000001BA10630000-0x000001BA10631000-memory.dmp

Filesize
4KB

Download
memory/8168-1462-0x000001BA10630000-0x000001BA10631000-memory.dmp

Filesize
4KB

Download
memory/8168-1461-0x000001BA10630000-0x000001BA10631000-memory.dmp

Filesize
4KB

Download
memory/8168-1467-0x000001BA10630000-0x000001BA10631000-memory.dmp

Filesize
4KB

Download
memory/8168-1473-0x000001BA10630000-0x000001BA10631000-memory.dmp

Filesize
4KB

Download
memory/8168-1472-0x000001BA10630000-0x000001BA10631000-memory.dmp

Filesize
4KB

Download
memory/8168-1471-0x000001BA10630000-0x000001BA10631000-memory.dmp

Filesize
4KB

Download
memory/8168-1470-0x000001BA10630000-0x000001BA10631000-memory.dmp

Filesize
4KB

Download
memory/8168-1469-0x000001BA10630000-0x000001BA10631000-memory.dmp

Filesize
4KB

Download
memory/8168-1468-0x000001BA10630000-0x000001BA10631000-memory.dmp

Filesize
4KB

Download