hxxp://google[.]com

Analysis

max time kernel
241s
max time network
242s
platform
windows10-2004_x64
resource
win10v2004-20250314-en
resource tags

arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
submitted
28/03/2025, 03:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://google.com

Score

8^/10

discovery motw phishing

Malware Config

Signatures

Downloads MZ/PE file 2 IoCs

flow	pid	Process
1167	3508	chrome.exe
1167	3508	chrome.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3218366390-1258052702-4267193707-1000\Control Panel\International\Geo\Nation	MinecraftInstaller.exe

Executes dropped EXE 2 IoCs

pid	Process
4328	MinecraftInstaller.exe
8892	GamingRepair.exe

Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs

phishing motw

flow	ioc	pid	Process
780	https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html	3508	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MinecraftInstaller.exe

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	GamingRepair.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	GamingRepair.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133876057209896879"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3218366390-1258052702-4267193707-1000\{30E4BB45-3778-4022-9636-F814606141BE}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3218366390-1258052702-4267193707-1000\{C4570196-84D9-44E0-87CD-E2C3B1148D55}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3218366390-1258052702-4267193707-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3218366390-1258052702-4267193707-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3218366390-1258052702-4267193707-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3218366390-1258052702-4267193707-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5700	chrome.exe
5700	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
1784	chrome.exe
1784	chrome.exe
4444	sdiagnhost.exe
4444	sdiagnhost.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5700	chrome.exe
Token: SeCreatePagefilePrivilege	5700	chrome.exe
Token: SeShutdownPrivilege	5668	chrome.exe
Token: SeCreatePagefilePrivilege	5668	chrome.exe
Token: SeShutdownPrivilege	5668	chrome.exe
Token: SeCreatePagefilePrivilege	5668	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5700	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe
5668	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4836 wrote to memory of 5044	4836	msedge.exe	86
PID 4836 wrote to memory of 5044	4836	msedge.exe	86
PID 4836 wrote to memory of 2144	4836	msedge.exe	87
PID 4836 wrote to memory of 2144	4836	msedge.exe	87
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 4976	4836	msedge.exe	88
PID 4836 wrote to memory of 2064	4836	msedge.exe	89
PID 4836 wrote to memory of 2064	4836	msedge.exe	89
PID 4836 wrote to memory of 2064	4836	msedge.exe	89
PID 4836 wrote to memory of 2064	4836	msedge.exe	89
PID 4836 wrote to memory of 2064	4836	msedge.exe	89
PID 4836 wrote to memory of 2064	4836	msedge.exe	89
PID 4836 wrote to memory of 2064	4836	msedge.exe	89
PID 4836 wrote to memory of 2064	4836	msedge.exe	89
PID 4836 wrote to memory of 2064	4836	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument http://google.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x23c,0x240,0x244,0x238,0x258,0x7ffe5d1bf208,0x7ffe5d1bf214,0x7ffe5d1bf220
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1820,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:3
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2472,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=2464,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:8
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --field-trial-handle=3464,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --field-trial-handle=3440,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --field-trial-handle=4160,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --extension-process --renderer-sub-type=extension --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --field-trial-handle=4240,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:2
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4344,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:8
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4244,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --field-trial-handle=5536,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5068,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5724,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5276,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5276,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6188,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:8
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6240,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:8
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6280,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6388,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:8
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6508,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:8
  2⤵
  PID:612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6512,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:8
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6820,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:8
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6812,i,11097624508344899829,9520236989785970023,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:8
  2⤵
  PID:2788

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:1000

C:\Windows\System32\RuntimeBroker.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
1⤵
PID:612

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=133.0.6943.60 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffe5ca7dcf8,0x7ffe5ca7dd04,0x7ffe5ca7dd10
  2⤵
  PID:5772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2060,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  PID:5972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --field-trial-handle=2184,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  PID:5984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --field-trial-handle=2424,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=2436 /prefetch:8
  2⤵
  PID:6016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3116,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=3128 /prefetch:1
  2⤵
  PID:6100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3204,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4268,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:5148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4656,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:5364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5364,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  PID:3948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5468,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5484 /prefetch:8
  2⤵
  PID:5528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5488,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  PID:2088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5716,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5412 /prefetch:8
  2⤵
  PID:1752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5536,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5592 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5496,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  PID:3016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5736,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:2376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=3212,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=3292 /prefetch:8
  2⤵
  PID:3260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=3520,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=3508 /prefetch:8
  2⤵
  PID:1468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5860,i,2513489572654908775,7976102640927904820,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:1832

C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe"
1⤵
PID:5992

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3436

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=133.0.6943.60 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffe5ca7dcf8,0x7ffe5ca7dd04,0x7ffe5ca7dd10
  2⤵
  PID:5716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --field-trial-handle=1928,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=2100 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - Mark of the Web detected: This indicates that the page was originally saved or cloned.
  PID:3508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2072,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=2068 /prefetch:2
  2⤵
  PID:1316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --field-trial-handle=2300,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=2492 /prefetch:8
  2⤵
  PID:5388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3184,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3192,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:5152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4360,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=4376 /prefetch:2
  2⤵
  PID:6120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4848,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:6140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5304,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5400,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=5412 /prefetch:8
  2⤵
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=5440,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:6032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=3276,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:3368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5932,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=4716 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=4316,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=3344 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=3308,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:1416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=208,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  PID:3196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=3284,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  PID:3692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=6236,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=6200 /prefetch:1
  2⤵
  PID:3844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=5824,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=5436,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=840 /prefetch:1
  2⤵
  PID:880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=4388,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=4532 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6584,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=5452,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:2028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6744,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=6856 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=6896,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=4564 /prefetch:1
  2⤵
  PID:3704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=5532,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=5488 /prefetch:1
  2⤵
  PID:5324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=7040,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:5644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=6600,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=7056 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=7212,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=7196 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=7320,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=7296 /prefetch:1
  2⤵
  PID:5568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=7380,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=7408 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=7532,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=7556 /prefetch:1
  2⤵
  PID:5236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=7700,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=7540 /prefetch:1
  2⤵
  PID:1328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=7752,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=7928 /prefetch:1
  2⤵
  PID:2096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=7772,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=7956 /prefetch:1
  2⤵
  PID:356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=7808,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=8004 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=7820,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=8024 /prefetch:1
  2⤵
  PID:1136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=8460,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=8452 /prefetch:1
  2⤵
  PID:2412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=8704,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=8728 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=7980,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=8868 /prefetch:1
  2⤵
  PID:1292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=8676,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=8972 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=7384,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=9104 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=9168,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=9132 /prefetch:1
  2⤵
  PID:5724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=9304,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=9400 /prefetch:1
  2⤵
  PID:4736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=9564,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=9592 /prefetch:1
  2⤵
  PID:416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=9720,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=9744 /prefetch:1
  2⤵
  PID:3196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=9872,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=9896 /prefetch:1
  2⤵
  PID:6036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=10044,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=10032 /prefetch:1
  2⤵
  PID:2636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=9548,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=10212 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=10328,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=10340 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=10556,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=10380 /prefetch:1
  2⤵
  PID:6280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=10656,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=10632 /prefetch:1
  2⤵
  PID:6332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=10772,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=10788 /prefetch:1
  2⤵
  PID:6340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=10796,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=10960 /prefetch:1
  2⤵
  PID:6448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --field-trial-handle=11112,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=11124 /prefetch:1
  2⤵
  PID:6456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --field-trial-handle=11280,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=11100 /prefetch:1
  2⤵
  PID:6560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --field-trial-handle=11424,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=11432 /prefetch:1
  2⤵
  PID:6568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --field-trial-handle=11656,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=11284 /prefetch:1
  2⤵
  PID:6684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=11604,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=11728 /prefetch:1
  2⤵
  PID:6852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --field-trial-handle=11864,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=11328 /prefetch:1
  2⤵
  PID:6924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --field-trial-handle=11984,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=12008 /prefetch:1
  2⤵
  PID:6932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=12176,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=12192 /prefetch:1
  2⤵
  PID:7036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=12304,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=12316 /prefetch:1
  2⤵
  PID:7044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --field-trial-handle=12452,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=12456 /prefetch:1
  2⤵
  PID:7052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --field-trial-handle=12592,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=12464 /prefetch:1
  2⤵
  PID:7060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=12836,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=12308 /prefetch:1
  2⤵
  PID:6584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --field-trial-handle=12128,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=11972 /prefetch:1
  2⤵
  PID:6816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --field-trial-handle=12180,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=13060 /prefetch:1
  2⤵
  PID:6916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --field-trial-handle=12748,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=13216 /prefetch:1
  2⤵
  PID:7180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --field-trial-handle=13356,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=13372 /prefetch:1
  2⤵
  PID:7188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --field-trial-handle=13508,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=13524 /prefetch:1
  2⤵
  PID:7196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=13668,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=13684 /prefetch:1
  2⤵
  PID:7204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --field-trial-handle=13820,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=13532 /prefetch:1
  2⤵
  PID:7212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --field-trial-handle=13828,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=13980 /prefetch:1
  2⤵
  PID:7220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --field-trial-handle=14112,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=14132 /prefetch:1
  2⤵
  PID:7228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --field-trial-handle=14256,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=14276 /prefetch:1
  2⤵
  PID:7236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --field-trial-handle=14416,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=14440 /prefetch:1
  2⤵
  PID:7244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --field-trial-handle=14568,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=14592 /prefetch:1
  2⤵
  PID:7252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --field-trial-handle=14720,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=14744 /prefetch:1
  2⤵
  PID:7260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --field-trial-handle=14872,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=14896 /prefetch:1
  2⤵
  PID:7268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --field-trial-handle=13340,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=13716 /prefetch:1
  2⤵
  PID:7428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --field-trial-handle=14864,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=13652 /prefetch:1
  2⤵
  PID:7568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --field-trial-handle=11460,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=11576 /prefetch:1
  2⤵
  PID:8056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --field-trial-handle=12736,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=11856 /prefetch:1
  2⤵
  PID:8096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --field-trial-handle=8996,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=8708 /prefetch:1
  2⤵
  PID:8168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --field-trial-handle=9576,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=12620 /prefetch:1
  2⤵
  PID:8176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --field-trial-handle=15304,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=15296 /prefetch:1
  2⤵
  PID:7396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --field-trial-handle=15340,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=15448 /prefetch:1
  2⤵
  PID:7388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --field-trial-handle=8824,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=15100 /prefetch:1
  2⤵
  PID:7448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --field-trial-handle=15684,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=15708 /prefetch:1
  2⤵
  PID:7444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --field-trial-handle=15864,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=15888 /prefetch:1
  2⤵
  PID:7720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --field-trial-handle=12716,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=15688 /prefetch:1
  2⤵
  PID:7768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --field-trial-handle=16040,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=16056 /prefetch:1
  2⤵
  PID:7760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --field-trial-handle=16084,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=16132 /prefetch:1
  2⤵
  PID:7752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=16104,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=16152 /prefetch:1
  2⤵
  PID:7744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --field-trial-handle=16180,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=16232 /prefetch:1
  2⤵
  PID:7736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=16860,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=16044 /prefetch:1
  2⤵
  PID:8252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --field-trial-handle=16944,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=16932 /prefetch:1
  2⤵
  PID:8260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --field-trial-handle=16980,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=17020 /prefetch:1
  2⤵
  PID:8268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --field-trial-handle=17048,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=17140 /prefetch:1
  2⤵
  PID:8276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=17172,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=17260 /prefetch:1
  2⤵
  PID:8284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --field-trial-handle=17032,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=17028 /prefetch:1
  2⤵
  PID:9132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --field-trial-handle=15828,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=17012 /prefetch:1
  2⤵
  PID:7832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=16236,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=16520 /prefetch:1
  2⤵
  PID:7844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --field-trial-handle=16460,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=16908 /prefetch:1
  2⤵
  PID:7688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --field-trial-handle=15944,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=16044 /prefetch:1
  2⤵
  PID:8540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --field-trial-handle=13076,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=15988 /prefetch:1
  2⤵
  PID:8548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --field-trial-handle=15148,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=9716 /prefetch:1
  2⤵
  PID:3196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=16432,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=14972 /prefetch:8
  2⤵
  PID:5144
- C:\Users\Admin\Downloads\MinecraftInstaller.exe
  "C:\Users\Admin\Downloads\MinecraftInstaller.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:4328
- - C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe
    "C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe" scenarioMinecraft
    3⤵
    - Executes dropped EXE
    - Checks processor information in registry
    PID:8892
  - - C:\Windows\system32\msdt.exe
      "C:\Windows\system32\msdt.exe" /id WindowsUpdateDiagnostic /skip TRUE
      4⤵
      PID:5400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --field-trial-handle=8556,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=8572 /prefetch:1
  2⤵
  PID:8868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --field-trial-handle=5556,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=15280 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --field-trial-handle=16900,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=16696 /prefetch:1
  2⤵
  PID:8152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --field-trial-handle=7240,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=7244 /prefetch:1
  2⤵
  PID:8996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --field-trial-handle=7252,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=7328 /prefetch:1
  2⤵
  PID:8392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --field-trial-handle=16832,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=7264 /prefetch:1
  2⤵
  PID:8264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --field-trial-handle=7340,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=7300 /prefetch:1
  2⤵
  PID:9068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --field-trial-handle=7308,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=13988 /prefetch:1
  2⤵
  PID:8484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --field-trial-handle=14096,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=17092 /prefetch:1
  2⤵
  PID:8292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --field-trial-handle=3216,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=16248 /prefetch:1
  2⤵
  PID:8300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --field-trial-handle=12348,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=11988 /prefetch:1
  2⤵
  PID:8340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --field-trial-handle=10336,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=11772 /prefetch:1
  2⤵
  PID:9080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --field-trial-handle=17116,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=7316 /prefetch:1
  2⤵
  PID:9092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --field-trial-handle=15592,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=17208 /prefetch:1
  2⤵
  PID:936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5568,i,16929075167786371070,5490254508735744758,262144 --variations-seed-version=20250327-050106.744000 --mojo-platform-channel-handle=4860 /prefetch:8
  2⤵
  PID:9176

C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe"
1⤵
PID:6076

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x498 0x3f8
1⤵
PID:5596

C:\Windows\System32\sdiagnhost.exe
C:\Windows\System32\sdiagnhost.exe -Embedding
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4444

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\ElevatedDiagnostics\2560293460\2025032803.000\BITSDiagnostic.debugreport.xml

Filesize
1KB

MD5
ca19e6e989fdf6438204e629d2be7ac5

SHA1
46a31c5957563c894ead4da8ca6af163144f844f

SHA256
47319061e27e71758c50650b0233fb6f9161ea252a323b3c555c3c7b7d7a2095

SHA512
0539d8a4caa0a007bee729f4b3811375ff44a2254b278e685f8f83ca674f1519aa8d49d5be3d08777f0594c7848ad763d392b02256ec4a50f8110b628b067324

Download Submit
C:\Users\Admin\AppData\Local\ElevatedDiagnostics\2560293460\2025032803.000\NetworkDiagnostics.debugreport.xml

Filesize
1KB

MD5
fb47c0718950ae933d1c790ed4c35430

SHA1
0fd783b65c2bc15d2dbebfbd2c51b96638ab0ea0

SHA256
c3c31aace2fbc1155b4f08eebd8f78287a7b5d62a607b1588579180687a3422d

SHA512
e5a378c6a738c80f9c3e1904f0f7c483668e2cb6dfb8d92a01b146377e10d417ec9fdf894c976be39d9dd11812f9672e56d1f6738b401e8374e76bfbe8374642

Download Submit
C:\Users\Admin\AppData\Local\ElevatedDiagnostics\2560293460\2025032803.000\ResultReport.xml

Filesize
2KB

MD5
09d83113c16147098c8a90952aad7394

SHA1
6cb166b5b0e32433eda7ad42a7ee57dcf73d4372

SHA256
3d2a87422d48b29f7e05ee6a14d00d2cf9a6e2192087e8ef36079f0b9915eb85

SHA512
f4af4693d2c8b8cfaaa5c5cc22092ef850fcbd7d7d84ecaf29cdfb2e6c13476ef4c5823e7c10cf63822a35a834c219741f88422643241b17e4b0e6b378c23f3e

Download Submit
C:\Users\Admin\AppData\Local\ElevatedDiagnostics\2560293460\2025032803.000\WindowsUpdateDiagnostic.debugreport.xml

Filesize
1KB

MD5
b6d2882cbcf62f3b3afc516ac7012451

SHA1
3da36b7c9c15edf86dc7d8e9194a77b35498da43

SHA256
11baa09e68d4550d640e64c4e2f945bd68333d70457804e2067d39dccdad11ad

SHA512
2bebf788eb7cf4cf5e5d1cca171f0835fbd8720998255db9a197014e876343fced2a11cd3b7a7ac503f177802fe6677243b1f44965b7b11eb0d092fff0a111b2

Download Submit
C:\Users\Admin\AppData\Local\ElevatedDiagnostics\2560293460\2025032803.000\results.xsl

Filesize
47KB

MD5
310e1da2344ba6ca96666fb639840ea9

SHA1
e8694edf9ee68782aa1de05470b884cc1a0e1ded

SHA256
67401342192babc27e62d4c1e0940409cc3f2bd28f77399e71d245eae8d3f63c

SHA512
62ab361ffea1f0b6ff1cc76c74b8e20c2499d72f3eb0c010d47dba7e6d723f9948dba3397ea26241a1a995cffce2a68cd0aaa1bb8d917dd8f4c8f3729fa6d244

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma

Filesize
1024KB

MD5
b0366599d64b0fc1adb2a712dcd02ee1

SHA1
b7a1c09ccd2846664cab5f76bd80b8e9f107acb0

SHA256
ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189

SHA512
d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
86eccb4f05e29013d46fff96b84e5e45

SHA1
3f17af7b5b8f101ae6f17612f110d06b6b9b5603

SHA256
d1d885a18d732a8194b977e6122929e1cd08b0cfba7b9fd45bf3f0cea1c9ee7f

SHA512
71b3dc8e93b0689cc4acb97fb1981859b1ae4b7aa121703cf5f2f1e7bf2045b6380313a77ca8ac17015938f0aa2f50e8bae873a3789292ba37a67e0339c66af3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
05da8d2cbb93a20e296ba18dcf738f3c

SHA1
855938cefed08fa03eefda99b8b06d77226da352

SHA256
133ea67c407916f1b558de5f3455d5e3845c2c74827432117dbfdcc5d8628ba8

SHA512
f5c6b73e92344f37f95fd91e60f5051f3332f77f1641132fcf8c9ca51e9113afd1aa755a038aaecaaec34371a0345db27b29ba81c3efa7e6fa1d832a5ea0e8a5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0

Filesize
44KB

MD5
e66afa378609981be9f243dcdc154573

SHA1
f858b409dc47d5045e3b36ed89c525b682251d92

SHA256
574f7b2db746fc44dbd536f6b2e3e5ca70714816876ad509316b621485ffd85f

SHA512
62991d5cceaa58d6d837500bc1b9799ce6341b690865f43ebd170eba0ab05e0bed04c58049ed862d09e37c474eb0c3891cf1514dc1e69bf73f03281866d3f9c8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1

Filesize
264KB

MD5
068b1c190f61f318813b48f77bd64841

SHA1
d2594e9a309d62a76828ac40280f812475b23294

SHA256
c58cedfcf8df94467c9ef52671f686328c60ebd0c6d02478b6c9909bc8bfee4d

SHA512
9df37e319a59af40a0d164bbf5aff7318da6249177537922c99d4e299bc8ca78697a606733d7cb643685ba7651baaa43663b44a8e459f1f6748a87137ba3d5e0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_2

Filesize
1.0MB

MD5
3568b3a86ef253c2309af6fd8c4bac1b

SHA1
4ab27d9fe5ccc2f62d39814cf1a5dd836ec59039

SHA256
409fec59b36ab08a0ff2a841822b95572167c2d16b65b4fa83caddb61db62530

SHA512
e9aa8d4bb7dad924dc8508370ed880b3f08c569535496090a761e8447a9d9888a8085675c4138a8adae5ed6907b626d6c34dc3c67d974d0d1e63430f976e203f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3

Filesize
4.0MB

MD5
1a6b101d78aacf21110d488c264aa040

SHA1
9457ec01f88bacfe3c052e0771e87f85baa2444c

SHA256
f43c4b5ebfbbfb4db231f0474cfc693fc553ec80b39e1c9b32a8dc19d5e1837b

SHA512
3588e51d5548f582867020a8c11db3f1b6d3a5909c19ce5f4491473f6ce82a6442d5651cc96c3a7c1ebb2caa423840e7be9319e0326a6087905472c918b56a5b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005

Filesize
35KB

MD5
8c7e2948cd4fb56eef276a23d92a6661

SHA1
6ee898a5d87dcb712ec53299c0922ce44332f852

SHA256
68239073d28e0aa63b443f2308d53b7430f270c85767d24507ea2ce042f71e8d

SHA512
9d13a6bea62e34510d8b87885aecefb50a56409979ecda99c0daa87741daab3391de0b23a20054e55c6a4b629dc74b8db54fcbfc19cccffa0b15720be43b70ab

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

Filesize
63KB

MD5
1901d2bcbbabee4bbb9804c30642ae2b

SHA1
f31774bc12614be681c0b0c7de3ac128f0e932db

SHA256
15eba349e5829f11363614b8f3dd9c3d04994586601d3c4c4d8069e0f5655310

SHA512
bdb94d7d8cf47b239c61559545b1dd26e05da909fec05d215471388545879cd8ec9e1fea51c04ed43927e2b07b5b80a74f09eb9038c8d9045e4161ea69df215f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

Filesize
38KB

MD5
f53236bc138719b68ccd1c7efb02a276

SHA1
26b7d3eea5d3b12d0b0e173ebf2af50a7d7e56d6

SHA256
787c14f8cc865430c03c96a345044b7c5b8dc8a032511a500d4a42228533acd8

SHA512
5485bc7ccce8ec75f60bca3be846086a4bd4466009c8e22da9cdd16bb1154529af2fb2667cd3a97485cc4f6635fb79ac0fdda4f3e1f39f25f6196f708a92d740

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

Filesize
40KB

MD5
5051427e0f2f75e169c2d42aca2c8b29

SHA1
43c41de611bf05ac4a2433ca585ce4f2c347ee48

SHA256
b7d2b194c119ee40ffcad530fc26767664a0f1c6c45aedc0516bda5fd3946261

SHA512
54d5aeb9573bf1d506bbd18451ba3e613907bc9c6a6d080eaa1970a776c4cc3609e550dffb2ca4c2c3c47f7b3f5833cf96c44f7385ad03b217dde329374a5ee3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009

Filesize
89KB

MD5
93b793c83af1e697ea56e074c1d6ba45

SHA1
2854c3e5aa3836e87217047532a39c5997c2e418

SHA256
9390edf12ee65d4defbaffa55a91cb732402f9f4d27d5a2b9d40d4bdbaf93901

SHA512
7a99158afed99fdf32504e3d9f006439266e47429bd9d70a7a7b23a28addaf03951e0bd02eef088e7cdc85503d1fc595888883f9f78323d85771f1f46cc3e565

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e

Filesize
78KB

MD5
4e180b9efa5503ffb8bf5c828869abe6

SHA1
83a52d046098cc4c978a85dd8fe492f9dfb1357b

SHA256
2400ffe0da30f3e847d26987b384d9e85ad58f8de8376373c179b5f35cccb40f

SHA512
814be8cfb35ae8240210423c7a5dfc28f69dfb91306597d1963a1dca26deae7307550c8d5954ab54ed59f253a50c3ae11d09e546f3fa26fb9ebaa292aed2ba8b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025

Filesize
413KB

MD5
17962461e7ea9b87ba9a9fedaaa59569

SHA1
d02430aa171d76bf16943424a12f90bad1a87581

SHA256
c08077d7c8ea2825ee3bfcbdab705cf3e1718f4e9400acccad9ae90cc9012467

SHA512
a530e1ce71413131d8e4aeff725010f6a045ed4d97dab3db0b127b5a38b55af6d180d9ac96e1ca7e1c3f67b26f8b80170b9b4fe961b7471a0cc50d02e1eff6d3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027

Filesize
69KB

MD5
e15c40d94dd42c318b67266c011c4295

SHA1
c231dfcae19b51a1ba10f8ada6177af6e3379caa

SHA256
65571610bc551cb8ed33527a8f6dd6dba1def1ee3439a4c2172bdbd7931b35af

SHA512
11c9680ccc24a0ea6981cfc852f3fd837435ba3fae1e070c41b5e5640b01809166f02777d45ec2e065cee5c654c8c29fbc994175908f561c07ee2cdba420cb94

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e

Filesize
247KB

MD5
029bc2bdac1b4da2ce6a680fc76e7db0

SHA1
2e6f6d0ee5a712ed5930dc1b135580eba1650f1b

SHA256
30bc226083b10b1ed40de5cf368bf1efeb879b0ed09e1676036e5c4813aad696

SHA512
3c2f854766be194c72c68fefea7fd217873f92a8b916c10224f3bbe7a3ee438c4cbb6be633b13eda2e2dc69334b93e9177417ee07ea0e4014b8114f4ae811ecd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003e

Filesize
51KB

MD5
5f83f12a5b3180468ce64458aa86c3e4

SHA1
20cfa48de17422a1a0c5c4c58aac9d1444a89b71

SHA256
51ef2a0485a70d0b38d725a58ba83b70ae36016e4370750589f209e66aa32423

SHA512
e0a47040494d81a594b2043e167e256c861f7ec5d701f29717fd3275326169a550ed08a70278e80d8daed9e7dc8756a3b7fd3bf57f5716d8e7d5ff9d396dfcd5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004a

Filesize
197KB

MD5
c8535e48efcced3cc1fe1ff78d28251a

SHA1
962e4d7ff0d8f68e5d8caced19eb636203567784

SHA256
e50247b6afbba4694d5f9e304595922ecff494b237b9a6eac37c2bede5efd964

SHA512
5e4b3ffa9058f3ce4dc4e8c10815f56c221cd8703905c641d6efaeb2a3341478e96bf99b6495759033ce0812d1bfe8cec5a306055fcb0b7b897bb2e1f2319372

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000af

Filesize
28KB

MD5
564a80f06c5058cd19537375a47d2da5

SHA1
db5220e6e520a2011362bfe82a1be6fdb413cb48

SHA256
230a4ea452bc7ba039775d964e2de8a643a9fce5d9f74c25649a55031151d8ca

SHA512
fd617efe1dd3b9425648ea8ca5c7769c8e81e3f78caee6805b0671ed7681824dd135e90191a1195d5ccb8610b9056a07018483098ba473a507ecd100739d1c32

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000b0

Filesize
20KB

MD5
f69cefb34e81abe998b7b4c0cc0cdbf0

SHA1
b4d4d39233a096793eddabac7b913373160ea7a1

SHA256
a8787de8a8d93bb7a6d9aa55572db8d806693978d0365240507ba62905657174

SHA512
6c8ceebb276bfe4ab080eb03bc8f497c72b7ce7fdd70d3d1689c60eb3dc091ff4af97fb21ae4dc9b6589c21638ef27c7194ee52780da6690c04baaa4c12fc4b6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000b1

Filesize
70KB

MD5
72555c2adfd253c473b83dd42144c98e

SHA1
a33a792b9b56a2bdafb333683d5ec2b8ee7a6b8b

SHA256
816531ff8bfbcb60e7547e84869db6a128948f7f072befde4b9a2c13b23324c9

SHA512
09ea73cfd0006e47de7e242ab3eb24d80d4a8c87c2c7f732ca8a846d38fe8610a9fa27f2c36b3419c8d4912a738eb03722fac457fb6f60decfb6eb3e113b2fb7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000b3

Filesize
158KB

MD5
83266658f29f5cb762001d5d9f6985a7

SHA1
9ff52157193e1e798944e6a3172d938183f5e550

SHA256
60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d

SHA512
60b2a8749bb597b71c6cb7113c4ea6c430ab90c6f6a5f78a36ab5fbd2676fbc173ade236be939e862569c786fbdc8e0aa984f1ae4263e91de2ba681cc8ce5d66

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ba

Filesize
35KB

MD5
7c702451150c376ff54a34249bceb819

SHA1
3ab4dc2f57c0fd141456c1cbe24f112adf3710e2

SHA256
77d21084014dcb10980c296e583371786b3886f5814d8357127f36f8c6045583

SHA512
9f1a79e93775dc5bd4aa9749387d5fa8ef55037ccda425039fe68a5634bb682656a9ed4b6940e15226f370e0111878ecd6ec357d55c4720f97a97e58ece78d59

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000c3

Filesize
47KB

MD5
015c126a3520c9a8f6a27979d0266e96

SHA1
2acf956561d44434a6d84204670cf849d3215d5f

SHA256
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

SHA512
02a20f2788bb1c3b2c7d3142c664cdec306b6ba5366e57e33c008edb3eb78638b98dc03cdf932a9dc440ded7827956f99117e7a3a4d55acadd29b006032d9c5c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ca

Filesize
67KB

MD5
60a30ef624fad5be472ee5d1acd1b2ab

SHA1
5dbb87bbc2e8a6143308e7928536ae778610794a

SHA256
d0ec8a13c2eb6a38d628cd7adaed308116164ceee003f816889b4db1735bfccf

SHA512
315e3ea4d4c6ccf6c14fc509933b01cb77c964b608cb95ce2ee8c331011adaf618e41cf4b8c499c4f6c9e137b88a34caaa7aaa44a69fdabed84df550e178d60a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000de

Filesize
16KB

MD5
9c6b5ce6b3452e98573e6409c34dd73c

SHA1
de607fadef62e36945a409a838eb8fc36d819b42

SHA256
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc

SHA512
4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
7KB

MD5
00a48696c07a28cb232716ca416a372a

SHA1
a70391b3a1a3e094d59010bcda3f78c89babb4ec

SHA256
d385a3603da4d5eb4c31dd484cc885c673c95a413a7255bdb1dd4ae8454fbc04

SHA512
a21b8746438df458c531b7882ee3a2297faadca93108e5cb96716e934306303f897e0cbca209c6a6f30a50eaab252d75b5688c58b41696b2e5ae4bc8365d2e93

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
6KB

MD5
24db61a6299e0d22ed5aa9583462db93

SHA1
04976fd54e8689b51ecab70a65bcb3e7f1760dbf

SHA256
1d875a3ebe2b026975e42f1b7dca33853cb5e49f6d0b4dbdec258527ae626daf

SHA512
8244010805994be990cc310bb239e8f04360cfab0b3d1d6518346650fae3d7a3d35b662a5ef11336ccac5101574f6d025c532e557bc4a2e448ec7cd45ba94776

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
67f2621265391ce4d97369ecee56ccc6

SHA1
07e2feff569fec63108cbebc3d3c360ceb27b59f

SHA256
0c79ed97108286c067bb89666c4b42a868bb21f48ec0fdfe46ba4b83fdb803e2

SHA512
d71eee7c4d16d81e3f32d42dc6ff26a58bba3752103c25b03afe17662982908fc6442e4fda97233acb6ec2f18bc499cb280e83a46a289d1d036cf8b8a5415454

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons

Filesize
20KB

MD5
968db6eb50093a09cb48aad11f0f88a9

SHA1
280531f7386c26899ca210c2006800b00009ae4c

SHA256
e9ca6a6d502399c078cd636d5b3e15c9961653b563533fef3d979ad495f47609

SHA512
2ee664a55086b3f54e8ecc1271deb8107b912ad5e23036907c5381fda21f3931da177089c289208ac61f2a83a64bf8103aff69d61a9dc200b27b980c3709dbd8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History

Filesize
160KB

MD5
aacae23a6b29493ad67afdd3450944c1

SHA1
3d73477c685ad695b82f1d75256cd4bbb8401eda

SHA256
24e7c4e542dd8008c37410408bb571a36a4f9f776cdc8a33131f38b0d1b04fc4

SHA512
ec78e1ecfc45c66db02fc77fdc7e2c5336dcc1c103c117f86784222980bb654a361c972cdc04728dcb29279333892cb2d232c1dc0333b4ddb29577b07c818f82

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.techspot.com_0.indexeddb.leveldb\000003.log

Filesize
2.4MB

MD5
f501e47c57146289fb14d4f84997435e

SHA1
f775b66b79b6a52e68e1279fe668e4f856c6ed2c

SHA256
232261257c62504e277ce6ac84f40f319455f1103643c33ac731cd41a18e34db

SHA512
557637d453c3194947b84a9b37cc5406ebc06a6cf933dd16f6904ca25480b1ae6571b01291764e0921d9d08b77f176d7b0142301a452341092526af493c339dc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.techspot.com_0.indexeddb.leveldb\LOG

Filesize
353B

MD5
cb591db1c3800189744e10a19e4d22b1

SHA1
3c2e5cbca55108c95e0c0e065ae0c02c52286144

SHA256
f70172dc344196dfb19e92acfee400cce95f273004bf81cb558ccf5cf54ef887

SHA512
3590e42b08d703f78c3fb27d07b47d57d03a047f9cf2e7dd8ae049ff3ff948ddad38915edf4fc1e2c649f891b09e59548d54e2f2e1c397e3d71689cc759785f8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log

Filesize
245KB

MD5
a80843ba7abc1b48d2a6e48f6a07f720

SHA1
36e092b2c2178491c6c386bd6e78db4a5ae45e82

SHA256
427a581b2940e3900881944f8b2cd1b0f495190b735e223d1c14973acee3db5f

SHA512
c9e857b293e72d286f7dfdf8058ac30a26b62807d1647ef61e80860d28970b3b78531a41061c87638a22e9bd01e506d825a6c78280a6f67e31524c7bb4a5de4b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000011.ldb

Filesize
15KB

MD5
f929853e4f91fb63aa04eb819f74e19a

SHA1
a39b6cf3317bb34bad2896b73d4a9727633733d3

SHA256
edde3a9ba121d2dd7d40162eecc65b53c75259f78d19c02e54096534a25d1af1

SHA512
35de0d1f500443fc0102024d402875f95ca11c5f2229f2c5ca118908f0dfbd8398b31370130864cac7dc468dda04928b8c5233cf1395910169d1f8f625e941e5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000012.log

Filesize
82KB

MD5
10b69d9f7fbf99eb91020d073e0544fa

SHA1
22c1750edbf41aae1f264fcdf03b1264153dcf89

SHA256
e87aa3210665f6c36b15fdcd427b40767a5dbf7a629d18511b85350455e9c6c3

SHA512
a6bf0bc21aa13f118e93c5d5a4b5e5903c16493eb3fa9836d62071a4224def53dbada629cc3322cfd598ef650cf0c46ec4698d930fc894829195123195ca8b4a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb

Filesize
11KB

MD5
f200ab0bc55105ef7b77172d0a0737aa

SHA1
ebfe667174895f7a78f7f66f807f080979eaa52a

SHA256
ba95aa49d4424c6d9df596f2859ed3963b65685b231663a4649d2d10b7c0a06d

SHA512
ba95324455594ec34f4c79cdd37949fbe0407d1b63040a2ee9fca3ff1df1b18a373caf9ad98e33e5e770b63a116160c382a9b50732ca06d8e343ecd523649c5d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG

Filesize
351B

MD5
2ad273e29ad3524c8abb0cb5cab7ea2b

SHA1
a05e817d2e6f937c7928a92d367d0d7b06559c6c

SHA256
f18c46381f715b254fcee3c12a3cd26275c3f75974715754619f3d431aca7e49

SHA512
ceac19926012fd9770bf25a903f724fd19fa3198e2519ed4599000a57e4a80533aff8b67470ababa6d7c701acdd4ed8f8d1a26763f8ccf5cd840310674e5441d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG

Filesize
4KB

MD5
73cd43314d2bbdf548a23e248d4979ad

SHA1
b0a1b3bafd94905205599573f26ef6838d54693b

SHA256
55367b29b8957ced8aa803345d35a82fecba3c9d6a85149b51abf95112292f06

SHA512
1cb9689e1b350ad4d091d17e37a68f762c77584de269bb81db623c4bab7c74f8581904c8fd30c2acc6bf3717cdd464e557176eee80840d73f34a79b8eb6b9c2e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
754B

MD5
e285752f6e94f7d52f947ab507585b36

SHA1
9dbe95d78edd7fad6bb250fdfeabd5745fa5eb64

SHA256
ffc4da12f884bf3eac5479038694863713196fd3cfcb7a6b0a296fb77a92f3ba

SHA512
45dab52ad2e3a4c202b87c3d0f7a36dc2e85f8c367b78dd5d345668a0cb6f0943b892305b591e612a9b7dbb701eb11c850097bbf9101079780802ba382d02d8d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
4KB

MD5
ed41b2ff48c5e4ae0867c4d16064889d

SHA1
8a0159eafea9de0ba91c96374e19c5fe946ef7a3

SHA256
dbcfa5bb3ff2b0968a09f1085ff3b1a9808b3360dbe8c050e9fd417c6b084438

SHA512
b2a97dcf0457746e90f2ad1e83eb1aba88e755f901711ad160c0061c89b5c4202b0d74a49bffcac42fda54be3ce6455db681aeb4119982d8c7b9f9114f52f737

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
12KB

MD5
380082bd2d75d11de248c161944d4e1c

SHA1
cdceced82c94c15cf2c25914bc897fc5c9e6a60a

SHA256
8a0ef1ec52737a3b72b6f2e1a1c941cd49762c02f6d3491f6c109cd217f1999e

SHA512
2bd5cce63f15025c1c3a5e927b7b2a444ccd43b57872320eb00378493e3dbcbcd24b64e1d25fd0ee430c52eb05a5bdaefd8b6381b20a064825a91e04f9959fed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
32KB

MD5
051426f48bfe58aa0b44d158dd99706b

SHA1
aa88410a8f88a1c4ecd076297af1ea67e58b9d57

SHA256
c9928cecfdfb5f795b0f27da00ff7f810ec79a6274d3b5eed72ab3bc0089ead8

SHA512
e6b129e2712a3851d965d14fe088e9775c797bfbb346c04277a77e8dad167b539701af37436d1bafbb5c453e7a01e2d0cc1ae3b0fe3412dee9427f929ab5d69f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
523B

MD5
83e0a6523820d821e385bbb8e53d4b8a

SHA1
8ca8bac1cc0bc1f2f632a99ab1bd179e35ac7774

SHA256
b79e24e079fd0154773dc0707dae828df2c55b22b795a011f63c1fe389a5ae77

SHA512
3fb75fffe131d8faffb846491ffe112bbea5951620fd69e980ccc63eb7dade7a3a5713d854d2032e48e6dc0c43176372da280a04cda9e8aa3be8d688926a78fb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
1f6bf35cb1cc9ac9cbab469d782a3217

SHA1
6d29b026c44eda14efcaaf4939796bfe952cf76c

SHA256
cb67513de4400224875ddee8eb412d8c460bd39bd7c5380af4c6983da661c176

SHA512
6e8c01821cafe78eeda34f0c80dde42cb70b0fdf120ecb287db9a23578a2e2728ea65c73aad23473589cd4a72dcc4d364b1ee076bcfab3766a53dc25e0b95d19

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
605b249d1d72228eaa2cf0767c7f7334

SHA1
4c86b2a62abaf73fb3119f402bacd1d6e25a0d65

SHA256
136b71e540b9bc55482227c728f619f80fdd28284ad7c9da6e8878921e874b5b

SHA512
8254f3ddb7c167d5075e044596787190b8982b591a6dc17da82ed05c9b46afb6ee04c25f70116e74cd9196a3da731aff4e6dbe8a5c7970b7591eecb50b2ff229

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
414aa5b8e0a777279567dc99ecd3eb94

SHA1
3972973716e315518fc062c5d788ffc4bef25603

SHA256
573c20b04f19fd56a9691fe95f280c291890edf9d9d4632a85b6e38d1cac8487

SHA512
10115d12f418e99e1a9c72bc846c5b53a9a7cbd7947bee7c9ac17e05fe643e37a519735fc9f1459c74f31dfc409f82e9baf3bff8208347a44e65b948542a3c02

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
730f45ab5e2c88f0c04a78906653644a

SHA1
409ce192ec6a2ad6e31a0e5a6c2e532c5c88becf

SHA256
bb7fb2945879ab29a85cbdd7a59b80ef9f5d4e22036647cf3d4c96917e92703b

SHA512
c7829001d2e909cf76bf35cef074cb54cb2afe0291a85cd187dc8c71d1ce4d9e302cfd360ce76e34fd0e9ac05e63261438fb29ccf82296227ce546269b6f437d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
0b53e5c937e3cc3d44ca8a0032ec2cbe

SHA1
87911d335226766ede1e24bfe5fc82b73a85ec54

SHA256
935c765c9d74a0b97b3e65069306b23c6be58206c6115b4cda3f35fb27fc4510

SHA512
259b339d3c6b03ec572ef85cf5790b865d201dc474b639f579d571bc9c85658d2923c2d3ae7e9630178753ceb69c4f15d0d7009267436d0cd8818837b5059c87

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
1c2eb1c33f65e27caa5437bf4b7c3188

SHA1
7c6cc78c830f1117dab72213cfc5952377768d86

SHA256
bb08d0cc0157d96120aa02ddd4b597d76c52153be26bb386df990fa4d563bf76

SHA512
82057f01dac01246007ee205cd03e9530bc77d58ef77c33d5443d96c1e85864d9c21e71574ab335f734b84b611badfda8fee31c9003182cf758fd350605a32ad

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
d08965182201fcdb2c305f57be884cd8

SHA1
c834c91fc842696b5785fc0533ed1e21bb9c221b

SHA256
ff29f804565ad16cdd8469693fe55d84b11decf5427dc9839d5542477c2d5985

SHA512
8fe7b4bdf0d1de78d2c80ee2f4073697c0c75a6bfdf69951e25d59c98b9d0e4ed01a3bc0de1346e4dbfa2f8938cabe759e7b07ff316d85a2ca32e99682a86be5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
0a1ae07489f457a6e15508a652b0414c

SHA1
6ef5b522bd135b7d0031beeea69560427bb9da5a

SHA256
dbd8f270bdf941a2fae630500e61d6088edcdef2e7bdcdee727ab05a3052440f

SHA512
a19b37e351056d1a0e3c359d5b3c211cb4c713e2f0efbc0e07c7870184ff18acd85db670067aaba30c1872d02c88778a3c529cf0abce65efc83a9507ba22b9e7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
d54c6272648c1b2da5525242d5135f60

SHA1
e7c032186a233dc2535d315a817c32d69ba52338

SHA256
8fc0a6c1c653fb8e9a6034d5756bce7c7412de6851bb19c50a54e148318fde4d

SHA512
e87a913659e4565dba7671e09c050487ed3ea6ecf3aa67edbcf713a7dee7bbc12b5adf1a9e71b973605734362c924c82a9ce23f5657766d7b566b281b3b41fdb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
13KB

MD5
cc20c27a49dac8520b2895373f9cbb0b

SHA1
bcadc6610a453b1cc347170789e9f185ad98d1e7

SHA256
34575c05cca2b47ce730adad8cb4c9561398bc6c0769e4ff980b42c3d518dde1

SHA512
055be502eff8b6fd54fc91408185bb5f1fca766d4b878fe0a39a7bf27e76170205b59a8d638fd23fa1fef4fd185bae9d044865d31164ca87141cbc713bb73c47

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
22d98185ccbadc87c87ea508f84e05a4

SHA1
a35a909b50b0b1b1389e8861dd75c549804eb7b5

SHA256
da4775764e791714459912b1bf6671981331bda367a5582182b727f9259e4066

SHA512
8d2188076505cda4d1ddb4b834705ae07e189d5e24d07d396a65e4651c774ffb7364811784319706a61e0605063c07c6ed23d0756950cc2f9c39e826854b890a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
9c0591303490c09b9253b3a66039995e

SHA1
22ab54714580475d9a15fa4e242ff21ff604aeef

SHA256
13701fb24d9721a7295176227fd4931a5bc9fd2e534d1cc275aed72a9cd00c39

SHA512
c0e1da3c3c072a48297837f19ee6be254c270246f9b05b555f4cf704227caac3a3969a6f587b1a29f0bb7647a09933a080a4fe8f45a8484e50569f725dfd6ab7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
18KB

MD5
83d8e00231375fadc54cf5b27f827184

SHA1
f0db9127f3339bd7be6a6b02ac34b0adc0f82c8b

SHA256
2b3f2cdaed36268decdaad03b2520efdbe9ede90ee644958f61e29144bd79ceb

SHA512
f8f765e2947ea3929cbc3e9899ecd5b315ac43ad0ad454e627d890d9a238d3b2d00f6cc43d7c3d160a3a7100f009460998182728c5afedf350103e790b74d47f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
9795929c9590a0338df1649454ef0ada

SHA1
6f76cf54d7f07f9a4da5ab2049e364aa90cd3cea

SHA256
ea618f4d9e7d18677deeb086889748eb33ed972c160dbac5acc8ff8b0bd970ef

SHA512
07c9efdd0556a4c20dbf414a5500155e5cef270ff765a5299c9b28f88f849da1f455bc2da2965a3cec7e6ffa0cbac605dcc41e296861a792e8bfea86cb326337

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\d7c7e9ee-5cb7-49e0-bcf3-4744b38e9f47\index-dir\the-real-index

Filesize
2KB

MD5
208f1949776d330651d76b82b02ed4fa

SHA1
0c278f61dd07b97d308eca5a3ea04a242169dbf9

SHA256
1dbcd9d38f0142f26b1592fae314d54538b857c0a5e48f3eafa815dfe456ebda

SHA512
6ae22461c12db4f5f597deea692cdab113374d08c86d8be874c0fb7d345b8b9d1478f1b5af345fad7960f2744c3135cf924980c8c178d19c98cdc80a7d4beeb4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\d7c7e9ee-5cb7-49e0-bcf3-4744b38e9f47\index-dir\the-real-index~RFe58c762.TMP

Filesize
48B

MD5
c6bb271f6589125f152f5fc27ef77068

SHA1
4fab76f5ab59c4a04724e4a0c97dbd781ded141e

SHA256
9c09f95f11f668f9c125aa51fc217d90ea302c3582515d909f40270174fd3193

SHA512
b4582e5d67655525fa3d7274d4f1bfd523c2be7b361ac4438dd37a9f4cc5d2cc7af2b314b3166d1e06290a38f1e5853c8c9a0eb09b0af9374652832b9f32ed01

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e0b52191-1259-43e1-8109-88896b3ac5ff\index-dir\the-real-index

Filesize
576B

MD5
c4bb03473b20225d7050b3935152e5ba

SHA1
41c679e36e6cd4529f561d4397af6876c59f7ecb

SHA256
d63e9f4582d8909a58df4de8822911dc1843931d4019b716596d670b5df306e5

SHA512
400e622ce5cb95d7685bd1dbb99c9778d1e47c5c9c6e97a3c1291cd2aa63a8625cd0535790f46239649d3fd433ff0f7608fbb39afffd15e072050563c55c59ed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e0b52191-1259-43e1-8109-88896b3ac5ff\index-dir\the-real-index~RFe5931c4.TMP

Filesize
48B

MD5
c1b3811678cbd894435f51db34041a3b

SHA1
5d9be38b8ebf9968fe45f04b585a80c151c8a4b8

SHA256
e6a317b2e3f6732ec7547713a3185c77fb0e49ebe4d00bcacb2252636eb67eaf

SHA512
01c636ca73c965233f36020b655bb8e36eee3946b991928785b6e4f3853636ce09cd638da36872a80446a1f9cf9490451f09984435df9761a1f0812a0921b592

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e96d7923-420a-49b0-9e2b-745bd7c043a5\index

Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e96d7923-420a-49b0-9e2b-745bd7c043a5\index-dir\the-real-index

Filesize
2KB

MD5
2aa1a8175cc3460dd29e64ddf08d27fe

SHA1
d41c7c02aa6eebf4f19f536d91083bc846298819

SHA256
24d8c3b86984505536b4c24e99ab9de3884c205c74fd9c4aa1133f12721c6824

SHA512
f9b1b377fbb0c97e4f7c084befe2f39aaf1531dd6d5b16dc960b8e094c4086404da8bb642c8e52ec1d8dcf162e013f83f5a6c65280b5e4e2b0098609df2de5e0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e96d7923-420a-49b0-9e2b-745bd7c043a5\index-dir\the-real-index~RFe595828.TMP

Filesize
48B

MD5
ee289d7d9927a5a019fbea98efbef8e9

SHA1
4666f3b9adbc942ab8af073530aab22ea8cb2e54

SHA256
05a57b592dc4bf6a097fa32edb02bdf0a4ed22f58397a9c54144e844930789c6

SHA512
1d8c836ce5367351bea0e6af63a5d38a7f7c8c3b05f341a4b97de95b03a739a5344d720c1bdb7f8667824a42fb2c99840ebbab1926301bcf475dde468d981515

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
198B

MD5
48b40b99eb5ce3689095925b6dc839d6

SHA1
acfe19dc3b94fcfbba84d331aac595afb5c607bb

SHA256
94d5b5172a8b9329f319776f352dd0411c807ad7236e1b7111035faf38cee348

SHA512
51ba46596c857279bc75604dd095d8acfdd0f3020fc18edc1b1b4b2581bfc472c77e48d253677fdce0e35e72da777cd788a09fe96ae3a37926a5234a651f9e84

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
255B

MD5
4ae05d1cfad764d805536ccf5dd71151

SHA1
df3a80f855f883329a315b873343f65503a8d8b7

SHA256
29451cbff8f28faaad07bed0ad141d6d08e71bc5710620cf11abf5c4bea94f52

SHA512
ef3c978220c102b948d1fd218a4260e09afdf7096f4bc69cac3c606f32212713b75cde4fd57a56239c4bf18952e709ed820a7a82a2ebbdffc7cb4cd6023f9ccf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
198B

MD5
d2460f511631d6bef02bcdaa8ee9d9d9

SHA1
7bb61ab94b4a232e67e79151fbb5769cd0bb8295

SHA256
9c842b9523b4a0e136036467d21eb61b97dc81847e0e4023a814964d92b62f26

SHA512
bb3f48d6032ade733c511d5d6058c2a7efd95efbc3ab894db65d6110de3404dbdf3ecd4f18ee95c73dc05b0afb62ce7a4acf317d45d74177d4c60ef1176b1dd4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
264B

MD5
4ff42993c1d982ca3f008972ec7043f1

SHA1
f75c0dc794f40af3f07fa524061a2b417b5ae3eb

SHA256
4bbc106438367e22c3cd8d91a73b363cd66591310904501ff11e111808d4dd93

SHA512
d6ea8bc7386f80d77a3521a57d4e003828354c013970570984c0d30b99556571d89e18b24436317e9abf185781c31177076d04464544dbdb8eadf24168e445f5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
135B

MD5
947aaebc3dfdebd357193746121bf763

SHA1
c363bb26689fb58e6de65fbaa21e01dad0aa38b9

SHA256
c9ddf582c95aaf8724d4cd0f551e50ca1e387e7da732ea857257ce8320444789

SHA512
cd497ca56f5855507a633a46e41de97bdc49e5e47605d9749ed599396376d5b41f45265be6b97f4bff874f9910b02eb6dc2a448a9091d0d40eda2b1c6cb584c8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
262B

MD5
ba1b40d992b0512a3c0cc72f1f78eefb

SHA1
64546d10d0e6f62d671b7c63ce5e85f0a36cf448

SHA256
88863c98beda5ec8f9ad592e4cc1fe1a13126e7a3814ed63d4c1091312e4b362

SHA512
635a917c94cbdb86390be513b6a65a519a973a3c354fa015044c9c1d1acc023c68497eb0d9d536afce6c3a9b8353abc95e9b21267ff6809af35bdc20bb920667

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
191B

MD5
35a0597fbc2131fd1b6049e8fece7974

SHA1
4b4bec1a67ff25e22272b29c7b81e2a161e473b9

SHA256
d86d13c4387010a759da3acd81fd2959dd705463aeb33754cfde2fe62308de3f

SHA512
8f99e2e1b97904b9a2026e8929253ec721039aacbd2a417992c8c704ca5c002b5ec43a2990fb87e8d07913be7dcef6eec537452939faacaff6fc224b3696b717

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
112B

MD5
aee5e90a1341b335ba6bcc78deae285c

SHA1
41bf17bcc4bdafeafe83786a303de3ed21549297

SHA256
ec754cc88b39e1eba4d9569dac304dd9d8518ab9aba591a5af75c78ae2e34ade

SHA512
ffd502672490b00f75ae4c77f4dd5b3131e751f8cba9706f7ecd530b7ce6f90f9e52f18151a8d2d09bf7e5dad5da408cd194fe1a5ab89281087fedaf54b6e5b3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
176B

MD5
33f974e57702ad2697789ccd62d0c097

SHA1
5222876bb7cdfde2efa3a0a8280fae020bd2b289

SHA256
efc46ceb1d63c5b7c64c58c0d9b9eda748789f9c5ce8510ffe21cfc71c4915da

SHA512
add7758cac67e1dd0d9b1231ce0a1ad375ca9b226d82253edc6f6e46c29442e7b30f58870cea63deaa97bcfba5ae8e3b9f92b42cf7498b49e6ad79bc1aec7be9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
198B

MD5
208721bac428a2f1698e94fe8717296a

SHA1
d583ad805755505132ce150208027efd2aacd97d

SHA256
b60700591c1942b71a3f03dd3778352f5370526ec2d0f7231111e1de2e7aa5e2

SHA512
2f3abc2ae83d5cf690b0b58524b39aa6a6390349677e2fa050e21310f8e6b899eb549b7a9bf035e5cd11bf739e125b80a88aa984eb99613dc08816327331892c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
112B

MD5
4b7f8090ca6a2c7132342ffe6b488cc3

SHA1
66cf66130b816a9b37aaab721cfe381dca0a1ae3

SHA256
592e67e375c60359589f79d22b95935e69cdf2f650d6c8ad5ac0632b2a5afc79

SHA512
eba66167cbbf855281fcadb5fe08609a7a008cfa0c7b82f0e1edf8dea305564d4eb0bc61db2ece6d947c76e5eb12fd4b40f4184ee0eaff4de911b4675a9035da

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58a728.TMP

Filesize
119B

MD5
7de7ae1217ff9796de28185712d093c9

SHA1
8d9e2c90dac1c1b96b15f051ead0e9c561bb9087

SHA256
7bf3a0e04bfc36d4d9f02c87532ac5ac31a2656d282414a16d4ed04e1a78a238

SHA512
6e576edc461831f8767834e0ed54a677a6838b1887f11798406a0c7a9aa18911e752a7123c84e8e4717716d33a508e5905afb0a3cef2774a6fa7a451cd276d57

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\4eb351f01b4dbb3881da09123f52108cc5be432b\da39f516-de05-480b-aac8-9cbaed34f7b3\index-dir\the-real-index

Filesize
72B

MD5
ef24e7d1a1eaa72a19a457daa58af3b5

SHA1
442551250f7d1c80016b76a793fa6de60fd304c0

SHA256
c0bb4f00c67e53aad71a1f86f09a54d7db2537b64f16232755864996cb53a74b

SHA512
a19b17ceffae9d5e0589eb599e5ea169eaa225cf5afc3980a1ba21ddfcf7f70d1e0bc9e140146f5ea3302733d0d6b79c9dec0603c11ea74eae090175d16a7767

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\4eb351f01b4dbb3881da09123f52108cc5be432b\da39f516-de05-480b-aac8-9cbaed34f7b3\index-dir\the-real-index~RFe599764.TMP

Filesize
48B

MD5
0bc34a1122f5ed1e243369efb63db851

SHA1
412a9d26379385a3cc9d82b49bba05896460fc1f

SHA256
622bb200c1708e4ec91c5230844fd71b8cf22038cae94b01262ac760c6dfb1b5

SHA512
e59e5e282c0523dcfb83b62287b113daec249cc6bc797c5a43470cced03222923b837aac8cd0e2e12e7abf5608767716d9f312c7cbec334c9c593dd5c590b5d3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\4eb351f01b4dbb3881da09123f52108cc5be432b\index.txt

Filesize
99B

MD5
93d900ac803d1aa151289355869b3987

SHA1
57a82be57ac1d62277dc96712ab4249b8f6e2b02

SHA256
ef5fface45a6b0738692f9fd0e674dccfbfa22b8106544f0bc7b4ed6b8d3ffdd

SHA512
3634f1c3164909f0dce5378479854955c1c244a512eb01ee67f7292f62385e9a15409b6ecd3cb805d7c479b748e7f6640a922913a0084864e4a118838d9ba7ea

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\4eb351f01b4dbb3881da09123f52108cc5be432b\index.txt~RFe5997a2.TMP

Filesize
105B

MD5
044113741926abcdf28f216b9640936c

SHA1
74f33f6b3a05bbe1f39b787beb2e4734a5868684

SHA256
2c6941eccde478af5f6b0e53a8b7fd70cdc1092251b826b4023ea3740848de6b

SHA512
c6c1514217bc555ea361392c769e5b749bca38de2de47233ee96bff4ef133900a82eb72014ab6f6d411ff64923330270420d15e15fd9b0f56619ec39ee211e28

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG

Filesize
336B

MD5
a6c4d3ee8a36038f3e81a6f3ab2c8ba8

SHA1
b13beb6c45eaaee1edcbefad5f3cda61e5e4d564

SHA256
278f8bb2cb8979848b8a8b124f6628a8076b7e194c377616aa60af349856ff10

SHA512
5648825c55582c0d9b02637528b536b94963d558b2e090e12eb8c47f1853d82c49ea95568ffb75def7d95a671c98c0f972cb3c24ec618821f7a3e35c1fd8a178

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
d49bc190068cf33bc7e194dca1428a86

SHA1
f71fd70c17aa42b6ff2f141eebff837ede7d6910

SHA256
e378b7fce5325bbc66cc5f77071e0a813fe2c22b5af600ba7d2547bbb366a3cb

SHA512
5005ab7abaf3b8ed394d80c35c9afac653d44aa2fd3a4d7c423e92eefe9d33b7ab7ff9597a2f2ee78855c33203a732a63cfea33594db4a86f372fd028391e23b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
366bec6951ddd1d506ad00658a2adb15

SHA1
0240bc18b2b9623e8bc6ccf2cbc6c10677a8b14a

SHA256
b5e5387b64b3713ff878b29abe33f8eb6da1a916c399af055c405783a568c871

SHA512
f30609843355697992d8df71704dfd66b768446b86efabad7ebd1ff7ae5ebbd1b4542ed725c50f62e54d73eb9809ecd46e18628f4dd4cf0f6616193eef05d08c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
168B

MD5
42eb21ea6100aa594f7e426d52ee06e2

SHA1
d5801f0cbc7345e499ea3cdb743f50d1feadb69b

SHA256
45bf4d4b07a86f23ba68275563595bc0f434924a71d1d60f68324e68cdf7b637

SHA512
b977b76f0757de4764f9987116b7330f4e1de1cda3307163a152abe776e521e5c7e70890f374bddc3556d4477f64dd5bbfec2726881f5355a2a1713ff15048f5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
120B

MD5
a56650e306d7905f5ec775fb2a82f8a5

SHA1
43345cad2fc0da5b828601f3eb20bb1c3292f63c

SHA256
130905861c10ca8ea2b17258a8875353fd84b64131c2b26abf894077e269e29e

SHA512
2ff7afafc320f4176f5738fc4fc666ce6bba67c90b6c2f75dde05177786f5eef4e1c7eff8ec4159d103e06646052e778f83a94546f315f785a050b55f3c96ec0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5817f8.TMP

Filesize
48B

MD5
864e48800369813e5bbc62319096edac

SHA1
063cd7127861158452eaef7dab7892c3529423fd

SHA256
cfb770aff457017663a0537513521f1c77a264835f08890fc1107f932aeb155d

SHA512
bd3d0b51a7053f4bdc6a26ec6fc5063c5eb8a0fa242a57202a92ecb12754e2e1d2f81c24f6863284ac0d853e95398e841a5d0567732a9be020d7c14507bd2c15

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\86e5356cd74d9175_0

Filesize
64KB

MD5
a8fc42ef2ead5ba3bc30d17b79f106ff

SHA1
94d4e441982ce7ac7aa9607682568c2f6ad4b32c

SHA256
5ab03dd5a5bbaf74cb2463b3d4b923832f8d214db6b6c56dd7fd67dd13aa38e2

SHA512
d37657732c202b12906caa1939d23f3184ba62b8c97a7f7028559d5c99085cd4c72ef7be25e3db4ba229c21857295ba91c908452639a9524ab851649c5d87472

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index

Filesize
72B

MD5
dc978e88514ce9e0e267eaf0c83d8d6f

SHA1
91af0887f70dbc2221e92d2710c8b59eafe6575b

SHA256
29e60237b87706610dc6d9d1abeaa4e4d3df66cd3238e47987e04fa8824bca77

SHA512
5d578c1a05b432fd067684698d1a07404ced9603024bedced025425ad3af85e33c290ad48df8b357c6cedc327e4140b736beb05412ba4ae33cbc5c1cee57b0e4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG

Filesize
348B

MD5
3abc554b0e94c9a967dd8de5015ef635

SHA1
06a99f31cc5167f53315a55b8d8277a5dd67ee31

SHA256
2df0b0ea94d7f9a6a1596913856ba5d64a3c3f8795c0d1ff775e59f62c7f3daf

SHA512
23931f3ef2acd058447a0c942bff11f0e80e8ef52b1c316abb02bd736a31d1e72d006f474e2a001ff711ed1b7fc7bc0f67b656411ec719c8591e69068c1980b3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG

Filesize
324B

MD5
f3e9e147bde05c52199909d782b469fd

SHA1
94c8a504ebc74f67e2440ba4e519c42e15046738

SHA256
22ed15df4d4912dd5069098437d04a988bf9d10546515fb425360cbf767ec876

SHA512
40990e31a0be82a4236f829cf41f929da72fbd3f9ece08b475a4bba7acb574403ea4a2ab4eaed9e8c7ba70cd70c321a22b4ef6bbc1b80ee7663871d46b7b691e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5668_45985671\Shortcuts Menu Icons\Monochrome\0\512.png

Filesize
2KB

MD5
206fd9669027c437a36fbf7d73657db7

SHA1
8dee68de4deac72e86bbb28b8e5a915df3b5f3a5

SHA256
0d17a989f42bc129aca8e755871a7025acb6292ce06ca2437e95bedbc328fa18

SHA512
2c89878ec8466edf1f214d918aefc6a9b3de46d06ffacff4fdb85566560e94068601b1e4377d9d2eabefdc1c7f09eb46b00cf4545e377cc84a69edf8e57e48b2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5668_45985671\Shortcuts Menu Icons\Monochrome\1\512.png

Filesize
10KB

MD5
529a0ad2f85dff6370e98e206ecb6ef9

SHA1
7a4ff97f02962afeca94f1815168f41ba54b0691

SHA256
31db550eb9c0d9afd316dc85cdfd832510e2c48e7d37d4a610c175667a4599c6

SHA512
d00e2d741a0a6321c92a4aab632f8f3bafd33c0e2875f37868e195ed5e7200a647b4c83358edcef5fc7acbc5c57f70410903f39eac76e23e88a342ac5c9c21cd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5668_71695023\Icons Monochrome\16.png

Filesize
214B

MD5
1b3a4d1adc56ac66cd8b46c98f33e41b

SHA1
de87dc114f12e1865922f89ebc127966b0b9a1b7

SHA256
0fb35eacb91ab06f09431370f330ba290725119417f166facaf5f134499978bd

SHA512
ce89a67b088bae8dcd763f9a9b3655ed90485b24646d93de44533744dfcf947c96571e252d1ad80bdec1530ff2b72b012e8fff7178f1b4e957090f0f4c959e0d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt

Filesize
73B

MD5
85a1098f0b106bc502bdb5ca2535a776

SHA1
2c252f914f0e022296d2868cdd57c0ebd82641c0

SHA256
3e7ee140727337f243ff7bfd42b6dd9db23bd9062d69d991cb84e54d9667b55d

SHA512
586f73c592e5e53540deaaa091abc61a61584171f25af4d8d5845a5f1519a1c5f8d155da1057f0dc756e6da05a6d1f890b3c34ee4f8d1c2f0fea6c7b5b2c3af1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt

Filesize
137B

MD5
f55bde4846dcc5846c13e7ef5895eb86

SHA1
f18430bf290fd1150e73f605476abc08bc9159cf

SHA256
2f627813234d6e6a9b01e04f4b3dc386d72f7d2988d33c09a04d6aa0af596cb1

SHA512
fd81ec27edbb2470e002c7f22e6891cd1878062e8800728d467cd57d7231454e1fff932ebd5c2aa5882070a0c38b24a33a1f65442db2e2276f069e35c38eb548

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt~RFe594c42.TMP

Filesize
137B

MD5
82211ded11e46a4a80c603a9c1c985a2

SHA1
4e0bb43d8e376117bfb290904325a7aa95ce4c60

SHA256
2edeefd8ab03726dcf2ffd9c4b6cd29b62b2c87dd9a2a9445681acad75c41e63

SHA512
9e27c205c6d16ca3eb7ff372521c59562ab8910f893ef678c1edaffd65b4cde387de2b2d5f89a98c735f390828fa2a9cc7fce1ce3c870ad8dd934f2130b3a5ba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version

Filesize
13B

MD5
a4710a30ca124ef24daf2c2462a1da92

SHA1
96958e2fe60d71e08ea922dfd5e69a50e38cc5db

SHA256
7114eaf0a021d2eb098b1e9f56f3500dc4f74ac68a87f5256922e4a4b9fa66b7

SHA512
43878e3bc6479df9e4ebd11092be61a73ab5a1441cd0bc8755edd401d37032c44a7279bab477c01d563ab4fa5d8078c0ba163a9207383538e894e0a7ff5a3e15

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
80KB

MD5
5596d0abce04214885ce1e40748445b9

SHA1
a80640a3039a6f4f3ab0dc0c03598667efde91c0

SHA256
8ae34d4136d5dc0e92a5997e9b6f4f3f6cd027e26c7de0b2dcfffd433c33828b

SHA512
1cbe44c7e9868922f0f8bfa58636e7b642cc70731cb0d5e73d58e49fdca9d322b56095558562327eb127438a2666f8cce9e3b73402dd67fb1a04966b02ae23cd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
155KB

MD5
342794d3973cd8e78abf102b0c0f4b11

SHA1
33a8e20bffd37ddb1e8b831d507792c5e71b3c27

SHA256
6832713ba3cfec0724111d8de31a3b4d4c74a52214d15422fe4e6875a2bd5776

SHA512
5e460b268ecf1dca3e998e8d003107227ea92877a628b86de09ec90dc75095672596246ba8040449dc993d7b25b6ced48aa52d53a456546c118296c172d6facf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
155KB

MD5
d4d2b22fe290311652417ae1c5ab667a

SHA1
2170c864e0a22a6d676ee8a148fd695ef76b99c2

SHA256
5117085c2aa70b7f21deeb462a372e44af3d3c59edfbaad4a28df17e17376962

SHA512
2c4ab700f8cf39b8212cfba7b8b1d8c145714969e9465dbc5975a2cbbc2f4e247d6f9cbbe5087e0d95ecfab767c663ffd068e68ba4824e8b9bb31eac22d0bee1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
81KB

MD5
3ce3c9b3b832cfefc581e99adfb56704

SHA1
e84b883b06c3365e68129f74bdf000bbef54c909

SHA256
397447a24f2061afa5161ac00dd926e5305e879c5dac25f6292664fb8485f819

SHA512
265461d640bffb7b79d511f1a5bf999cfcaddfa0f02228615ceb6b19877c7f0232f4c0e4bf478f8f00e62b06201481308201a4196690494df6e0003a19ceae92

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_0

Filesize
44KB

MD5
25ee47b82bb929c0d0885f225b715159

SHA1
61aa7158779556c29cfa53fd4cf60ed939db9ab7

SHA256
72f6bbdf2881692d0741c5c5ec43e535e95f832c004739d9fa1f50c94f0c6766

SHA512
8133214f41d431b2a9634e433bf8672ee5a6ce1bc21f9dd7157e86242dc7d453b265959fc4d60b15827c0adc248728c7d46a3adb4cea33038a9b6c51715b1133

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

Filesize
264KB

MD5
be7681bcbb1e1aa92f01a036f3a507e0

SHA1
a1dcc7c9486a5a10e4d1b1f9b2e1acdf3f19468b

SHA256
bca08c892163bd19fc8b04a257c3f336017f94c49e7a80abff287147ef9c0240

SHA512
710caf2e9a034d463d7a05a44a4f2b2cf24353803e4b09bd3ba16955077c6195740c43bd3dcb61b9ee06737a5a34434eb781b862ab17bbaf111fbc147e2a5764

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_2

Filesize
1.0MB

MD5
6c5201f337641cee957641132609e2e5

SHA1
2e75f95d6fad7402b6009a034217286518a83ca2

SHA256
77caf148e46bf8848d70ffdfa8a274195fd00e0262ed2dda4efa6932b5d987c3

SHA512
2329a53e0a23bbe62d772365068d1fe266e7e10fc0955036989a803f222bceb595f2383b01719fc2b47e26056a376beda0f7519ba8095b27021b7eb1622e4979

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

Filesize
85B

MD5
bc6142469cd7dadf107be9ad87ea4753

SHA1
72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c

SHA256
b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557

SHA512
47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db-wal

Filesize
160KB

MD5
e3072b16a38971a344ae4895a22cbfe5

SHA1
a155f32bd85e455a1078c12be4edd3dbcb429ef6

SHA256
f0f054fdeac3c24e3f601558ae3551d6fb57b88d075be2150907c34caa2eab47

SHA512
2d3d42522e48381bf4a5425999426744d59874edd27e0bb32c6e1d75a8dda75c57a80aa2f5067649ecc9a1406befa00dd1fcd3bffe089feb35f66e22e4e96c2b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist

Filesize
105KB

MD5
ca24ff33016bf05204edac9575aa97a6

SHA1
f116a8618ebeb921cdc190941a6711319576a6b0

SHA256
23d8ab6db94edaf6532a0cb18f9bb521085c58744d4be841303eb951ba5c32c8

SHA512
3e59751e8d8f251ab7086c2de5f324748636451ff38684e6bd0bd8f6c615f9e02627c10a2edf9ef1b564348463d7047826e60855e6b0599687b046e13cbbf1dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
14933cb0b5807f04fc859d1ff867f2bd

SHA1
46d999ec933b06c7868277e9dabb121e1e934f84

SHA256
3640f285e683e7eb4c7848475d1d342e8579f41ab72ef70b181047104390a3ce

SHA512
cff04d75c40f8003acfb0463f662553affc610a68afe06565681c948e7de9e366b547003005666383a15d68a7bed2f6d39007868bdb8a136347dc12a0fcb970c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
3d689edf3e0ef92347eff3c689acdb24

SHA1
86cec422436354b476116b65395d63a5ef09201e

SHA256
d4b0773d3bc0838fd83c903b3df564a8f66390f9e4788f0325bc26c4f6c7e89c

SHA512
ae3dfb881466a7e7d4549b56ae8e2dd487eed626f88c2caf90a849af1ea826edc2f07806500504f5f85698d975c94678c9c7558a3a408c3fc20bbaf003857e0f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
a997b0297bff22e78513aa587f547b3a

SHA1
c095a6ddeeef08fedcf686591c9e19ea90142206

SHA256
e993c678d3b80ab4fe3c48f349120395cdf90021cc24462289d460e2ef9e3a48

SHA512
e5a77362b501e7cb1c4affa1a3b5a038756177e417284e3bffb3ce01c0d2817b6510acff52ab5e1e2c5f7428003f5ca580dfd927d2cb94875ec5e810de31ca01

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
e45e49c3229579fd5211101a9fbd284a

SHA1
aa8fe134f55eea438dd33693e8587d0981cd4af9

SHA256
e59548296d52494262dc5cf73517ba8351b36839b650d5da9da4bf2d324b23fa

SHA512
e783066fd94376839ab9579fe53b44c325881be040903c5a21a26ae6ebc4ca22de9eae3128179159015659f61673eb8711e1f8dc54ad0bf91a318344608a86de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe57be3f.TMP

Filesize
3KB

MD5
4b0e2f6fc43a1c810cc4da32ca768572

SHA1
39b117e81267ea907e072f19b33e1ff8d9317c85

SHA256
c42ea2d8f5f277b8f36ea3a8cbff8b5b7321504cf010ed9fce0eac4a3f440c2d

SHA512
b8fcff417adad137768c495dbd7043e6233b16e3f4697c1912b5ff37b6d560f1df64d8491c4ae3f6b8507c93cdf5ec40e57b381b830b77b30ef7d45e1f8f7893

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

Filesize
69KB

MD5
164a788f50529fc93a6077e50675c617

SHA1
c53f6cd0531fd98d6abbd2a9e5fbb4319b221f48

SHA256
b305e470fb9f8b69a8cd53b5a8ffb88538c9f6a9c7c2c194a226e8f6c9b53c17

SHA512
ec7d173b55283f3e59a468a0037921dc4e1bf3fab1c693330b9d8e5826273c917b374c4b802f3234bbb5e5e210d55e52351426867e0eb8c9f6fba1a053cb05d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js

Filesize
9KB

MD5
3d20584f7f6c8eac79e17cca4207fb79

SHA1
3c16dcc27ae52431c8cdd92fbaab0341524d3092

SHA256
0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643

SHA512
315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps

Filesize
107KB

MD5
40e2018187b61af5be8caf035fb72882

SHA1
72a0b7bcb454b6b727bf90da35879b3e9a70621e

SHA256
b3efd9d75856016510dd0bdb5e22359925cee7f2056b3cde6411c55ae8ae8ee5

SHA512
a21b8f3f7d646909d6aed605ad5823269f52fda1255aa9bb4d4643e165a7b11935572bf9e0a6a324874f99c20a6f3b6d1e457c7ccd30adcac83c15febc063d12

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
6813282ac4fb2739f424ff3382b111cf

SHA1
f70a7a76d2b7962781364c682d0d3a9161561a9d

SHA256
f69d602b39a8b3c54e5a823e266c8ecddafbd510047a2f2fce99fffee2c372c2

SHA512
879bb3e7b72d40a4f51dd7e7e02ed8c1c0d6eaa9deadb1f8a1207eac563f3b599f3d14d5f5900b72ac768d87ce470318b82be586b722efb52a7b7d6fc7b22a96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
15KB

MD5
b72c4f4a25fb9763c548044357b07605

SHA1
98fb1ce016a89c7bd2c2ad701a37ee5a8e458adc

SHA256
fc97d1b658527a8e95c14a40681750ab606649afec429624dae51d58ecf9aa81

SHA512
a78ecbce5fb2519d4e01d9f1e5c682d4e61d877a1da54a8a601da13e76ba1e83dbca8465d76409d3798c13a7b66747d14a3a20299930f894411dc606e12740f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
36KB

MD5
ba883aa34fc7dcd94508a242c8ae1f4a

SHA1
0ef5f1d1a6d5208a36001ee4a98493d2cbbba368

SHA256
0f258ff30fec619659697f3833bace73895332e3b3a72d4db7c64d9118a884d4

SHA512
837f483027e5c3c74531a4bc4f910bde0d53dc1a1683ab622e9bf3949bafdd4212cedae2937d2acaba1f370cecadc2fe422ed1ec7b5d3008b859f8710c60e879

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log

Filesize
4KB

MD5
c1b95f0bd21c02a4a18acf07ee481877

SHA1
ef32b72cf8e7e0fad728f0bfda4e80e37a30cb7b

SHA256
3d7a280fbaf266e29ea80b41a075357d1efba9104de1880696a22bd4d96f04fd

SHA512
400927abfaac6ee753b910c0472788f945d56f65a0cbd53f3b44b9815558f0ff6fa9f5022c89806e3c692ec1e0ddae8e4b74cf7d21ec2c8f5761d92be22c1c1c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
36KB

MD5
42ac78c8b99cf3a9cfc96cf5bfcd6379

SHA1
06c60d842a6160f686abad6e9facd0e8c802d259

SHA256
d9ce8a6d5c81f08c4b6db6d2f15a1fd470ef4d3c9db23fc3bb8d0d22aa68e82b

SHA512
ca7c46cf5ed2ff52de1f437870cfdaff5dba2229e00999f6afb8c64ee5a08d5b88cfc93b706600d9261786a9fa41212b5e6c2296dbe9aa32ca609b9ec5a6eb3d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
6KB

MD5
22a3dc3eda901a1e5b612c4e00db8486

SHA1
55bfe4bee707ed3b7ab37412366b704049cae7f5

SHA256
911a4f342f35217918f3b7289f44117011b571a9e372ac32e8ca2e8c509351fc

SHA512
bfecb91dd5372d553bfade00fa5f69dbe57b4c81c583dd4ef4c392352f6ab581b9959cf4b137d1aaaadae23c8179befc04cc711e1b67d76f8bc24714ab7141d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
7KB

MD5
423f02b89f7437ec09d81fc41d74e8b1

SHA1
42505f7a228e37c012323fc763038ba72ecc1d6d

SHA256
48448d5c9f2bc45b3fd7885bfb11efc689ebb5b5d8cfbb3a95b8d2324e5e0796

SHA512
137d92035c9858cd96a9c008644964d55a9de8155b8ec6190390966bf5aa42862f871a8baddf380fe2e8eb861efa94e47f2ec7f3847e7b46f6a582c2bd8491e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Filesize
2KB

MD5
1ca19a23aa3b01a620072f653401413f

SHA1
6e4c3579f25aeeb25209cc832973a14252a3c1a2

SHA256
51fed0e4ed06438f76d25f887409c4fae61a5500e4d264a875e0a302040d5112

SHA512
2d948711e8b6e365773e51b1a40e9d39d1e46b338e16e8573b643da8942587bd7f4f6b74cd3795e289225d878f3d41af6cf6f37d649225da93cc54f7f9ac565b

Download Submit
C:\Users\Admin\AppData\Local\MinecraftInstaller\deviceId.txt

Filesize
36B

MD5
94ca779a0b37a47250d2f08167949b6c

SHA1
d47f2a19f2392fbfe790daca6aa5a72705e9f505

SHA256
556c8cdb53ede5fa38381ed07d291c3b010ba3dccc00965cad22ecde3545267e

SHA512
d742eae48c88bc0a6db525550e0a8a1940553b3de7ae37cb30fb4c82affd72bc796b4929be5eacb922cd494414fc3e1b43ab6e7e6091ff25b3465b20bbb989c1

Download Submit
C:\Users\Admin\AppData\Local\Temp\GamingRepair.exe

Filesize
565KB

MD5
debca559478b491bd58c4594657f4216

SHA1
b9b760b8dc7b969f1ce9a5fedd8f7441a55e6e22

SHA256
6de332811fc74b85637326edb00a03c7c8687f7ef5c73fecaee870e037dcc0da

SHA512
1af6215f5d2dbfbf52cc444d8b34d2fcd55a0c2c6c4c4ecf3e95c492157f03c94af66f7d4e607f1e47e3fb7845118db8841d7eb232acd34ed777751e94033cb9

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_4bfsr52z.xot.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Users\Admin\AppData\Local\Temp\ca698ea6-2cbb-46e7-aa43-70a6259b8dd5.tmp

Filesize
10KB

MD5
78e47dda17341bed7be45dccfd89ac87

SHA1
1afde30e46997452d11e4a2adbbf35cce7a1404f

SHA256
67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550

SHA512
9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5

Download Submit
C:\Users\Admin\AppData\Local\Temp\f8c52a5c-0fc4-42bd-a0f5-5a5f1ec8079b.tmp

Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir4836_200098634\e762514e-6fae-47af-a0e2-a6be1c0d11e0.tmp

Filesize
152KB

MD5
dd9bf8448d3ddcfd067967f01e8bf6d7

SHA1
d7829475b2bd6a3baa8fabfaf39af57c6439b35e

SHA256
fa2232917a5656ea4f811936561ea6b7c92b3c0004c5e08ecb97636d3afc6f72

SHA512
65347df34378c2bbb34417e2cccfb3251a0b2412422cc190eed9df525b6e0a9948e0295ea3c33b3ad873ce81e369e89a138ac41d6eb7229546c3269107e661de

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir5700_77015063\CRX_INSTALL\_locales\en\messages.json

Filesize
711B

MD5
558659936250e03cc14b60ebf648aa09

SHA1
32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825

SHA256
2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b

SHA512
1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir5700_77015063\CRX_INSTALL\_locales\en_US\messages.json

Filesize
1KB

MD5
64eaeb92cb15bf128429c2354ef22977

SHA1
45ec549acaa1fda7c664d3906835ced6295ee752

SHA256
4f70eca8e28541855a11ec7a4e6b3bc6dd16c672ff9b596ecfb7715bb3b5898c

SHA512
f63ee02159812146eee84c4eb2034edfc2858a287119cc34a8b38c309c1b98953e14ca1ca6304d6b32b715754b15ba1b3aa4b46976631b5944d50581b2f49def

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir5700_77015063\CRX_INSTALL\dasherSettingSchema.json

Filesize
854B

MD5
4ec1df2da46182103d2ffc3b92d20ca5

SHA1
fb9d1ba3710cf31a87165317c6edc110e98994ce

SHA256
6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6

SHA512
939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir5700_77015063\CRX_INSTALL\manifest.json

Filesize
1KB

MD5
2a738ca67be8dd698c70974c9d4bb21b

SHA1
45a4086c876d276954ffce187af2ebe3dc667b5f

SHA256
b08d566a5705247ddc9abf5e970fc93034970b02cf4cb3d5ccc90e1a1f8c816e

SHA512
f72b9190f9f2b1acc52f7fbb920d48797a96e62dfc0659c418edbbc0299dccf1931f6c508b86c940b976016745b9877f88f2ee081d3e3d5dcdcc2cc7e7884492

Download Submit
C:\Users\Admin\Downloads\MinecraftInstaller.exe

Filesize
32.3MB

MD5
e4deb3624e6d89f5f6ef22fedacc3f9a

SHA1
e0919c595923082f6ccf00fdd1fde3fca2d0c338

SHA256
e7b0b17e1ea03055fea83b1e6c7da387eb64ba064268140e3b33f1a15ee77eb7

SHA512
68a7304b531fa49998a0368c7d731549b155ca793237140b53dd9d190b7581c066f02f35bcdcd12e4bfbaae2ef560b1d75ec7a6d14fa3daa3a28b29dea0c3547

Download Submit
C:\Windows\Temp\SDIAG_03fa50a1-00f9-4d2c-8977-ad2adbf2a2b1\DiagPackage.dll

Filesize
77KB

MD5
458bc0d439cb0d955120ae319c6ed91b

SHA1
b8899daffcbf912462d7e089d126d664c1a40216

SHA256
9454ec899ff78ff14c4c5137ba23d99dfaba079c629afd790640d0f07724201c

SHA512
fda4a2641db70fabc10d73dc28dc13f3b85140a382e032fa7a46abd5eb72e076f96794ccbc0f344a0cc88222fe27ee527a3587eed286e3e3db338824950369c0

Download Submit
C:\Windows\Temp\SDIAG_03fa50a1-00f9-4d2c-8977-ad2adbf2a2b1\en-US\DiagPackage.dll.mui

Filesize
6KB

MD5
84d58b706a4a16e582a140f72110b7f5

SHA1
bb7a3f254dde61f948417eabdc5a0883d102d873

SHA256
4b012aeaa40324691c6af926d5bb27409232fe8c484fd295d64925fc36f31060

SHA512
9f520c9d00586d9fb8a87b904d75616ca18b6dc3badd1db71ee85236a6bba459d56eee6ba29ae8cd2139fda8e5df961b232ad87a17fb4dbe61dd4422d804c508

Download Submit
C:\Windows\Temp\SDIAG_2902b231-c414-49b3-9e90-bc29d99ad103\DiagPackage.dll

Filesize
478KB

MD5
580dc3658fa3fe42c41c99c52a9ce6b0

SHA1
3c4be12c6e3679a6c2267f88363bbd0e6e00cac5

SHA256
5b7aa413e4a64679c550c77e6599a1c940ee947cbdf77d310e142a07a237aad2

SHA512
68c52cd7b762b8f5d2f546092ed9c4316924fa04bd3ab748ab99541a8b4e7d9aec70acf5c9594d1457ad3a2f207d0c189ec58421d4352ddbc7eae453324d13f2

Download Submit
C:\Windows\Temp\SDIAG_2902b231-c414-49b3-9e90-bc29d99ad103\en-US\DiagPackage.dll.mui

Filesize
17KB

MD5
44c4385447d4fa46b407fc47c8a467d0

SHA1
41e4e0e83b74943f5c41648f263b832419c05256

SHA256
8be175e8fbdae0dade54830fece6c6980d1345dbeb4a06c07f7efdb1152743f4

SHA512
191cd534e85323a4cd9649a1fc372312ed4a600f6252dffc4435793650f9dd40d0c0e615ba5eb9aa437a58af334146aac7c0ba08e0a1bf24ec4837a40f966005

Download Submit
C:\Windows\Temp\SDIAG_3fb73ad0-a574-4b31-a989-b3f0682eb8d7\DiagPackage.dll

Filesize
77KB

MD5
fc7504df42668c2918657d1b9a3102c9

SHA1
5f9a70a31678e2e8b9a10849ea8657702d0cb53d

SHA256
159c4d4621f4ce1f4da14246401d85a00b40c0090fd0b2640446a896127ac646

SHA512
c844f9e5ba72eddc6aca73e09214bf8372ee5676124077983b78b10b9830a5e5eabd9c9fff2650858836f995ea79b1f0502609a428797b838ac7cda3f627c0da

Download Submit
C:\Windows\Temp\SDIAG_3fb73ad0-a574-4b31-a989-b3f0682eb8d7\en-US\DiagPackage.dll.mui

Filesize
4KB

MD5
2ad9d1abe41ad048186f196b58fd8e9a

SHA1
d9c66f6ef89ad126ef2bbb36e0bcf6fc8a0e34af

SHA256
9b9acb69e01f79160d368cdcd8a4dc81f18da6398f920b6f663938171f5f718c

SHA512
4c4e1e5bbe173dfd37c65fff64a029883b2f719a360a9f5ee0772b304a518839605528b97b1ac0319b79a6d7f284767ad6c04b3b769559e2b14600c467947d61

Download Submit
memory/4328-3489-0x00000000077A0000-0x00000000077AA000-memory.dmp

Filesize
40KB

Download
memory/4328-3464-0x000000000B080000-0x000000000B0B8000-memory.dmp

Filesize
224KB

Download
memory/4328-3463-0x000000000A9E0000-0x000000000A9E8000-memory.dmp

Filesize
32KB

Download
memory/4328-3461-0x0000000007D10000-0x0000000007D18000-memory.dmp

Filesize
32KB

Download
memory/4328-3455-0x0000000006F90000-0x0000000007152000-memory.dmp

Filesize
1.8MB

Download
memory/4328-3454-0x00000000001D0000-0x0000000002228000-memory.dmp

Filesize
32.3MB

Download
memory/4328-3474-0x000000000B050000-0x000000000B05E000-memory.dmp

Filesize
56KB

Download
memory/4328-3500-0x000000000AFE0000-0x000000000B006000-memory.dmp

Filesize
152KB

Download
memory/4444-4031-0x00000228696F0000-0x0000022869712000-memory.dmp

Filesize
136KB

Download