hxxps://dnstwist[.]it/

Analysis

max time kernel
1800s
max time network
1502s
platform
windows11-21h2_x64
resource
win11-20250410-en
resource tags

arch:x64arch:x86image:win11-20250410-enlocale:en-usos:windows11-21h2-x64system
submitted
12/04/2025, 21:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://dnstwist.it/
Sample250412-z8x7fa1ps5

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133889667692111229"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4144164418-4152157973-2926181071-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4144164418-4152157973-2926181071-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4144164418-4152157973-2926181071-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4144164418-4152157973-2926181071-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4144164418-4152157973-2926181071-1000\{504EF00F-7130-4F46-8B9A-D21ECBE7BB8F}	chrome.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
8	chrome.exe
8	chrome.exe
3360	LocalBridge.exe
3360	LocalBridge.exe
3360	LocalBridge.exe
3360	LocalBridge.exe
3360	LocalBridge.exe
3360	LocalBridge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 51 IoCs

pid	Process
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5320 wrote to memory of 3004	5320	chrome.exe	78
PID 5320 wrote to memory of 3004	5320	chrome.exe	78
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5420	5320	chrome.exe	79
PID 5320 wrote to memory of 5148	5320	chrome.exe	80
PID 5320 wrote to memory of 5148	5320	chrome.exe	80
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81
PID 5320 wrote to memory of 1316	5320	chrome.exe	81

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://dnstwist.it/
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=133.0.6943.60 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd443adcf8,0x7ffd443add04,0x7ffd443add10
  2⤵
  PID:3004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1892,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=1836 /prefetch:2
  2⤵
  PID:5420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --field-trial-handle=1428,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=2224 /prefetch:11
  2⤵
  PID:5148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --field-trial-handle=2324,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=2332 /prefetch:13
  2⤵
  PID:1316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3152,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3160,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4224,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=4248 /prefetch:9
  2⤵
  PID:2304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5128,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5176 /prefetch:14
  2⤵
  PID:1424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5452,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3140 /prefetch:14
  2⤵
  PID:1504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5380,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:6064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5212,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3876 /prefetch:14
  2⤵
  PID:5484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=5648,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5664 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:8
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=1460,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5636 /prefetch:14
  2⤵
  PID:5992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5904,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5888 /prefetch:1
  2⤵
  PID:3288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5796,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5808 /prefetch:1
  2⤵
  PID:3452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=6108,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6128 /prefetch:1
  2⤵
  PID:4828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=3308,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:5884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5720,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:4240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5716,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:2052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=3140,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=212 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=6068,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3336 /prefetch:1
  2⤵
  PID:808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=3348,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5728 /prefetch:1
  2⤵
  PID:4224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=5568,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=1432 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=3304,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=4284,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5536 /prefetch:1
  2⤵
  PID:5544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=5544,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5192 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=5644,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5636 /prefetch:1
  2⤵
  PID:1068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=6040,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5824 /prefetch:14
  2⤵
  - Modifies registry class
  PID:2040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=3864,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6056 /prefetch:12
  2⤵
  PID:5560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=6208,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5464 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=5596,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:6040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=5740,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=6248,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6292 /prefetch:1
  2⤵
  PID:3540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=5352,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5192 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=6384,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6280 /prefetch:1
  2⤵
  PID:5608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=6220,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6288 /prefetch:1
  2⤵
  PID:720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=5916,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5328 /prefetch:1
  2⤵
  PID:1148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=4376,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=4628 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=6140,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:2172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=6228,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6436 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=6060,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=3180 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=6500,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:5244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=6496,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5732 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=6668,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6680 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=5564,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6836 /prefetch:1
  2⤵
  PID:3432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=6852,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6948 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=3344,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6984 /prefetch:1
  2⤵
  PID:5196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=6960,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5632 /prefetch:1
  2⤵
  PID:2436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=5652,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6320 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=6592,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6624 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=6828,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6832 /prefetch:1
  2⤵
  PID:2508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=5736,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6216 /prefetch:1
  2⤵
  PID:992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=5664,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6568 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=7164,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --field-trial-handle=6736,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:2848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --field-trial-handle=6340,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6624 /prefetch:1
  2⤵
  PID:4236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --field-trial-handle=3328,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5464 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --field-trial-handle=5580,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=5496 /prefetch:1
  2⤵
  PID:1232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=7048,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:5900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --field-trial-handle=6748,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6648 /prefetch:1
  2⤵
  PID:2596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --field-trial-handle=7068,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6348 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=7124,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6856 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=7008,i,11168470245448945345,27921838456580830,262144 --variations-seed-version=20250410-050051.531000 --mojo-platform-channel-handle=6256 /prefetch:1
  2⤵
  PID:1420

C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe"
1⤵
PID:3164

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2132

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:5328

C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe
"C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe" /InvokerPRAID: Microsoft.MicrosoftOfficeHub notifications
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3360

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

70f64fab-2e25-43eb-b6f3-abd98551463c.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\70f64fab-2e25-43eb-b6f3-abd98551463c.tmp
Size 11KB
SHA256 5f6d00d0145731a16ae32e3beddcb416027c8750c6e6ad049010024be91aaa66
MD5 723a959cd74274ecd04df3df941857d6
SHA1 01f2bb5dab52f2d56ac18727d8426b2fba6c59bc
SHA512 9096f338468ea3ff033d9a25a77e1d3872b0f4e0ba5519653c842becaa2f30cb289c078212e2c1ade1e9e18b7864f71a1a66e8859559f55be02c2a4e48a2816f
SSDEEP 192:QYapto9DTpZ8PRpbvLHN+WNphHpZBa2eNZenpfyIsnA/g2:QYap8iXbvjPpNpDa2eSg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

8992bc9b-a28a-4abe-8915-e1fbe84b7f86.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8992bc9b-a28a-4abe-8915-e1fbe84b7f86.tmp
Size 10KB
SHA256 28c2acff651d0fcf1675ccd544432c60c6bb358ef6ae3232992071a06aa4ad6d
MD5 97412078eb3c92bfeb9921e75cc7bdaa
SHA1 ae61cd27a7c2b5b4a52b4244560bef7ac10e5cc4
SHA512 3af64b3dbf62c151ecccddb91d0f16a1d4dee6ec5abec1f6b7a287186df096edea289b55e986d267e0d59d489ddedd7cb6d38038fa7232fba3ae45e2bc9e08ea
SSDEEP 192:QYapto9DT/Z8PRpKLHS+WN+Hj0m4ZenpfyIsnA/g2:QYap8oXKjcyAm1g2
MD5 SHA1 SHA512 SSDEEP

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 dc5b698dcbb8e209a28d342df4594072d4bf2e9d0d0388c0aabb977aa8b330d3
MD5 a88cb4e96edb09f5f2e01922a844f331
SHA1 6f524f531201ac58f9f544f60a2d256b4291c37b
SHA512 fe3e789e0f2b1b77c853a2f4d6ba7e9a7b99e1ac9ab9382bc15446c3f065630459cc19c0de41388288bef5db2c1ebd1517360a163e854f40074644692f5434d5
MD5 SHA1 SHA512

Submit Download

f_000033

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000033
Size 216KB
SHA256 e990d9d31c4c7d57dd4795e43baea05501fb6ea8b7760f89001be660425dd01b
MD5 50a7159ff34dea151d624f07e6cb1664
SHA1 e13fe30db96dcee328efda5cc78757b6e5b9339c
SHA512 a7768dd7e315b07754a305080e0fc023765e5a224b2c3824e8e10f29286df63bbdefef379e069941fd8cd9c7c3befce976779ae2efdfb6e7da697b09d7f07250
SSDEEP 6144:iprd1ItBjbmy74npup6EFUdzziBu9u60ZNgxNrk1mP:iprd1ItknfEqzio9u60Z421mP
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000054

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000054
Size 35KB
SHA256 a29f00644f70e058e413930d0aefcdfb834333ef54a072475f724f2e687e230e
MD5 8dfe4431aa4fcd959f5be19347251c61
SHA1 b497dc70b2c757b2ea61ecd5f9bba57a9668a215
SHA512 47c9d5e3f123376d03d2087ef95605d3ffe7a509f57515523ea474f1d310398facb3fc34507a13899c4a4b7066ca27632ab396cfabdbd307fa55e6e640ab45b6
SSDEEP 768:TP2y1iZVcJ7n85NdxBB5gPCGIW8rnaVGexrEs0Ddem+euROvvMzLXWI+6NXRNbf5:1OrnSGexrECRLrp
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 d00da36a9a42592529a667598818be21e0c988b27ae965f6931a507b99e72b91
MD5 a7b05466b3e32a569d8620763403520f
SHA1 9652101ac317203ca035af2f4160198fa3b70cba
SHA512 f61acdc23fbc991ffb607b9d5679ff198ef9504e47af9c0d2eb79b6e36df97365603c900740b93ca66720ee11929881fe3c3812e4d1be5602e83a54b63d62eab
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 960B
SHA256 dcd37b2b64b1216117c45c81e2798001f200cd0a56aae4c5863ff9e34d11556c
MD5 a815cdaf3f6f858cd8c3c10afa71a1fa
SHA1 372b683b39c4bf59f3deb420411699747be2e620
SHA512 b30e3eb2b4854a4d3ddfe063e4333ee91b65e805bfec8c18fa70e888d235e393304ebf40c193e943770bd9bfdaba0a3b327d8fce3702eb5a1a67871d60f350b2
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 768B
SHA256 b1811a5ba29e2732837086378312c943bcb90e16e9d55fb2e62057cfb994526d
MD5 77f13925d03108a9dd9dae19dab4142e
SHA1 a684137c5fca6b41552f38022aa3b4707181935e
SHA512 8e6cac9a04137397dbab800a16d1734131dd8cae27b7eb0490c5e81826982acd7ebe10b605ab99fd322f93108d749da67696741b008c963a8021699b08c62e1c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1008B
SHA256 6e74f8593c350785a60112ff93ce9b34501550ff83d4567013aec240432938ff
MD5 c2a263f40fb2c7dbccdc506277970689
SHA1 365219cf83af162b35b969b0445da55aacbff720
SHA512 1b26fd36ff30f2d292bc241cb1bedb4c8f49d9f8c06b60ec7614f68d8bc12bb7ddbf82134eb4f7bc78cac88f5abd6c3591a8831bbf394133e4ef7676576aaa6a
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 db3ac5501cbb2cb74c18b28d21f3422e31d61924e8d83e89d997baa9d9aebf74
MD5 8b224f1f89a7e801487e2327b7421323
SHA1 280d1f74c2ccdaf85a15e267dbf0f4814e1b969a
SHA512 42062458446041f9028e85727550be7782ada32c737049cca5dc4ff8f6855e5562feefae87525dc059e39fb052a4308f09aee50f6924c38d80d43797d9300de0
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 fac8dd413550ef260f735c3baf35b844c9507a9cabe6aa91dacc67676611eba5
MD5 76e280f71cb19778a61a121600b824c3
SHA1 20293c7205d8dade99c559c2f87c0e7540efabfa
SHA512 05ccc7ed982098a4f36dae42eb296a5b91a9d4e484bfa5c6dbad52b17132d55fc217c97a03ac0101c8cae82fe33808ceaf21250269aafdb5abc7713817de6a41
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 5d11416a88b8d2cd2129b9edb81540ec571a91fd5b77abe62f849aecaa7e8862
MD5 30d2324deeb6fe09707987a7e3631321
SHA1 24dea083ec7101d76a199c1365cab37d7df32f5f
SHA512 badfec889967112395be48e5fa1b4ad4cbf5efdba4c6e64a373fad146ff5059912f76987ee08aec9817b36a95318248322105f2a0933e361ddef20bf50f97362
SSDEEP 96:pVL5e4nmPuGudTDToTtWTQTRyBgBPMN1ZDc/5s5ycEBBcBXod3ubc:pVL5eTPBoTDToTgTQTRyUPMNTDaeycg7
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 3KB
SHA256 7d0f80ccb3b439784046c689dde018b2d2fb1a8486aeb163945a83d08362fdfe
MD5 bf6e9991cceacf70c186601d8a01cc1b
SHA1 cbc4253f8fa4290c1151bd7c881ce1f7637ee905
SHA512 c0a51c5c3f1a8554e121699286dd040cae5237509bb58b5624751b638ad6f9173abf59038c56a452cfb33a2404bf288dcf7d47dcce43e14757f6de639a9f1cc3
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 18KB
SHA256 bde381babec7a416e5030c78b8164f34b90a312ad570f533c50086791af457ca
MD5 aa916773ef789dfc8f6ae3487a2a46a3
SHA1 721ac160dd53c7ba1ca6ac955f134ed4f7eb42e6
SHA512 302bc85ddd31ac8996f4716fabbf7afa2f5088f4f7688743aadc7d24d015cf3f3b70e3cd77ceb69fc1ff5583509dad881d43b7473f40e0f410bf15d10e96a553
SSDEEP 192:QYapto9DTjZ8PRpt4FLoDHYy0+WNH7T5HTkEUZenpfyIsnA/g2:QYap8kXA0rReHXlwERg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 10KB
SHA256 33bf9fb9c5b26563ade548ed5c7bb4bc8e2f7f2f448a5857edda5e999f94619c
MD5 6acffcc9ab14d2bb8efef3303cbdb453
SHA1 35a17829a5b006310aaeefcf8ee602bd7326b124
SHA512 f7d6d93af5640a2dd9f4578c5cbe578ad03254aafdb2982c84544c2bcda82d7729c829f990c039e83492a0ca0fdfef34e9412a8e37ed7a38469d21ca37f40d43
SSDEEP 192:QYapto9DT4Z8PRpKLHS+WN+HGX+5ZenpQyIsnA/g2:QYap8VXKjcy8+OZ2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 4f20a80c46f982da96cd742983b98aab2a24a76be65ae7183eadea41f8e69c4c
MD5 48cf8a3d1176b7b0484805b54d196fd6
SHA1 57389ffafc8039a5f6bcdd6f4f9b937e50eafcc7
SHA512 7ac78d562a2cf98f79498d4b3a930536de63ecadcf55f1a0b102fda217ff050e792c461f7e28a2bb6423c036c6d8081b7b263573701bf0efdde391bf0dca0ab4
SSDEEP 192:QYapto9DTNZ8PRpGLHtY+WNYhHJp4qZenpfyIsnA/g2:QYap8+XGjtSYNT4Hg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b9421b6f7ffae8d9a02c7293ad072b92312faf6c29489ca2eaf28797823c533c
MD5 5ce6507ba2c6b8bd943b1fbc9620d861
SHA1 d44fdb68db126e27f68b2665537bef65fa8f2972
SHA512 8da2b3f1c5e5720e30e7db4893d50729a4062bd6424f7a6b9db37fba32b0ba3a7fc48cb09ddab45543a02cfcceb3ac73db624f1ca8360c33e06260f865e0e55b
SSDEEP 192:QYapto9DTnZ8PRpuLHt7+WNW5HxK4qZenpfyIsnA/g2:QYap8YXujtFWlk4Hg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 ce1ff409ffa325bace6c5fb52215b285f7dd22b51f53cd38685f593916932a10
MD5 05f5595cc474fd91ea0b5fbd2c07d4bf
SHA1 a3ba3d14006543ec64d17fc34890c8feb5546f3b
SHA512 a814b2032d02dd04dcfaa95a6b75c1feabf9b0e28230c3af4038dcd8436e981f13fef8002fceb4761ccc61f961af424f11581b1713676ef668352f715c468e0a
SSDEEP 192:QYapto9DTZZ8PRpuLHt7+WNp5HqrExZenpfyIsnA/g2:QYap8SXujtFpl8EGg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 7d85866972f580ab0c15270d54b527dd1d9eb868030e90be90d8684613d26e9c
MD5 d4f1f7ccf3201219d2686b8ed994146f
SHA1 54f481af4bac0141232d8c1de124348f7116cd1e
SHA512 0b0f37aa0ec565987627214b4986fd767a4b9003a94a4042c423fde2758ce1993f80979c6cd718fd4dbbc3cc66e6cb899a7a8b2baa250c721d8177439422efda
SSDEEP 192:QYapto9DThZ8PRpt7FLHsP7+WNG7T5HgjE/ZenpfyIsnA/g2:QYap8iXXj2FGXlEEkg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 10KB
SHA256 2b0592e189ed00cd671f780b7db79384b9e5aad8fd0f842deecaa22890bec072
MD5 7685083e737d0881c39ae79b3be654da
SHA1 3bb496d355409720c0f410cc1113db3a7573b599
SHA512 09d9aad1f122d660d9489f3ddc3719e1b9affd484e4e529e549a447e50178be8b40da4c08f30f066d983b0622e2adf8980be2d70d0646f381c566b2d302a7b9a
SSDEEP 192:QYvXpto9DT2Z8PRpKLHS+WN+HGX+sZevpQyIsnA/g4:QYvXp8rXKjcy8+BZ4
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 296d0db2c640e86fcf757f8aa5cc46b7ba331f34e759cc7e98309900fe3db682
MD5 09a9d62993337c4372019bd30ab89f44
SHA1 c149b513639ee2f6519ed091add40af88f7654e7
SHA512 d196fb000fc3303963e317a33e8b1281b3b171d9938b0ea3b385951b9db1817acbf4e0b1d179e596601a0a594f3e2c97449db62bf5bdbfa17f6e3358f086024b
SSDEEP 192:QYapto9DTwZ8PRp87LHty+WNYhHwImfZenpfyIsnA/g2:QYap81X87jt8YNnmEg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 29aba0e82d66e99da0ed37e586b8f70c160b4ddad8937cf81e1d91e8abf0f773
MD5 643296da818f828932b47a10e4ed3fec
SHA1 46b6ed7b9f1a31aaefedcc891275b216fc97a203
SHA512 36b57def885331b1933d69b64e067e7d539671496ca26cf04ab1780b07081b986271d6e3bb085aec5e3d795ff6587f2fa0c92674faf7a1c7ea1338338e6c1fda
SSDEEP 192:QYapto9DT0Z8PRptzFLHsP7+WNGlQ5HqrExZenpfyIsnA/g2:QYap8xX3j2FG6l8EGg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 13a92b76aa5fa8fc8c499d33084f754ded41d0905c37b3cfc12c150665e20bf0
MD5 e861ab0cfd9663cf111392598b3c0361
SHA1 5c0c982daa1f311bb6bea504c32155f4ab455cf4
SHA512 af6495a46bc0f35306fbcbfb2ce0423346ed14c1eb71b41d693f08ba08bc900466758ec3dce29eba7f680edfc3b104f934dc4c2f201a97ec10606bfb5a9dd6f1
SSDEEP 192:QYapto9DTcZ8PRp/7LHN+WNvhHpimeZenpfyIsnA/g2:QYap8ZX/7jPvN8mbg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 624b25fc02adfee6d4ba374e9977591837a1f714af9541d0460a2d68e7f9c3f7
MD5 aceaa8f9ee4afe2fa1159403b0bb669c
SHA1 24334b15afa8903f0801fe5b4fb2172f608c2720
SHA512 eb0082e7c8eef9f484da04b4500817d2343d5ef12540869a9e7ecac75b4e3ac8ca591c699540da296262e89b5a78994537d1ccfc39742959070ff2e25285b874
SSDEEP 192:QYapto9DTQpZ8PRpt4FLHNy0+WNF7T5H+ZE9ZenpfyIsnA/g2:QYap8nXAjQeFXlYEig2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 63af9b0469f3259ccb9e7c6cb60ea98a3577ede00770c32f4bf3613639728b87
MD5 e0cfeed21b22acc08f50f5e0358053f9
SHA1 4b9f4c3741a242b6d90ee44b2dc4f1f0684d01e4
SHA512 df2a4614133962dbdd6f2ca3a97f87872159fb748fcb04bd7406662443aa8875f0e5d962e93b40311b4b17ffb829516342eeda84bed20c6450aae4eaf00d9305
SSDEEP 192:QYapto9DTfZ8PRpuLHt7+WNp5HNGweZenpfyIsnA/g2:QYap8AXujtFplswbg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 e86bcd156ce39d0a7be8a36fe22e8aa76bcf0fb5dd764ea4e389521256b9376d
MD5 7d8fa16359136e5e5e601f36ee02a0b1
SHA1 8e06d074a97935ea575a48f1b0bd175d7c53e653
SHA512 0694df5f1d3e5c55ccb85d205939bc647e57caed33be3201acfb0caceadeb58f8f00dd7aa529aa41adc178f6259daf6daa05487e12673a1535af867f29b2856b
SSDEEP 192:QYapto9DThZ8PRpt7FLHey7+WNF7T5HmxEtZenpfyIsnA/g2:QYap8SXXjnFFXloEyg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 18KB
SHA256 ebf5e4ee721914b1517d6aab41f258965d8b45e2506f98a5c05a7b6f8a355dfd
MD5 b7c97dd8eb9e3097d37b808461bcf6aa
SHA1 fc18eaa73d4bf214c444e6aec6f348008518ee9e
SHA512 754b8e991cb9735312181c8c43863e58bcd89219fae1653e9da1b66b362cbeaa5e39bc24db99ad6a90a9ae67da8dfa6ea54e354ce8e7e0992dadeaf79a47c681
SSDEEP 192:QYapto9DT3Z8PRpt4FLHYy0+WNH7T5HTkEUZenpfyIsnA/g2:QYap8oXAjReHXlwERg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1bdff3940dbf99e8285a31a66a36c3e8897762969f0710c3b4652d03ee9bc799
MD5 b9ed5c2650861e924c64214a6b7bd383
SHA1 951bee1433c7020b8576a6a4e76630d52420d85f
SHA512 dea633038846b5108f1ac920f311237c9e474bc3457f904951eca4e5a74d5ded90a8f82f220ab008d3b8b7278096d8c8e2d2139bc6da3e6aa42ebe9a813e4d16
SSDEEP 192:QYapto9DTCZ8PRpnLHte+WNe5HJp4qZenpfyIsnA/g2:QYap8nXnjtoelT4Hg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 14acdbe92013d134086722925b43c2c7c7de8cf80ff8f0424844db23dd5bd714
MD5 56141f7d05614b2012ecbe405a2d1c10
SHA1 3f792cc1591f01ee01b64b1b127acadeb3f107c9
SHA512 5daaf4567cf7119c49c067456627fcc1812327bcfc47b084c66805804bd2f9d8a32c83041646b3aa9ecfb472f87930066b5994762eb99fd2c3e07ed5a9702429
SSDEEP 192:QYapto9DTJZ8PRptzFLHsP7+WNGtS5Hq9EJZenpfyIsnA/g2:QYap86X3j2FGMlsE+g2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 6548bc6e82b71fa4e5ae3b39bd6300fc675a79908c9dc4d66a353988770ee8f8
MD5 b475e7382c3c9f3cb4a7ec23f49dde7f
SHA1 3fe2e28225db40702a092b273130e116a3f093db
SHA512 d5d0bb05d28b0e5ddf1f45ea6e80e0af722005caf19aeef8dd76884f23571df83b59ce372f2c6633d064f8a8a897f0bb44a5341c2095345a272b1197e23ac041
SSDEEP 192:QYapto9DTjZ8PRpt7FLHsy7+WNF7T5HgjE/ZenpfyIsnA/g2:QYap8MXXj9FFXlEEkg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 15KB
SHA256 123972fc14f6444a6103064a97bc89fd028513d0368e5c1f038401abcd1f888a
MD5 d7dadd84ed3c27124999833093dc80a7
SHA1 056729baf602bbacdb3c0bd2d8777c2b8a9ba572
SHA512 f87140383e49b355fa243d19c8ed19d0bd4d07c8bea588356e70a0cc70cfda56925cc2e842c97b283076f038a0e5e65cc126a84d317b87ee4db29f342b3dbbe8
SSDEEP 384:cQaQoE7pLuLcgr0RXaTPkXqKf/pUZNCgVLH2Hf1gRrUPmo3HG1C+5:cLQoE7pLuLFQ1aTPkXqKf/pUZNCgVLHb
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 c31509ac98b6382dab771915283575ba15050e1661dc3f69e6ef877d614c75a8
MD5 bbfd2f2b80d1b32c785869de5b19eb53
SHA1 3caf35f6c9c0741a68e23d2a485f02d794fa2252
SHA512 988786ed6d908177844ef497c3fef1b2ea1da2a1a813c80848e90e2759697b9d92dfcbc8dec67dd6b1369f71a0f2eaadd6b740a8c1245a7837c7709ac587275b
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe57bb80.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57bb80.TMP
Size 48B
SHA256 7e36ce222a0c31f1d45617e182bb2b89ab1d5fa1bfade8a940fc1b579dd1cf76
MD5 e1f57fdeaf0d2e172086bd2667f2d7b4
SHA1 ba5d47f74d98fa6e9fc9e7f9b8a407dbfbea7273
SHA512 ea2ec3c680d92a543aa6b0a52328c900581e6a5cf26dc3bd11fd7908fd5e691089c5d05f0ff32fef98b699827689f6693511c9b7307ef9248d2e3bcbbd220168
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 79KB
SHA256 05a049bbb39a78be1f24112d8270bf76b233c331d1b35265988d405bf2f2e446
MD5 f2e8aabe825b27bec0a99da6840d7509
SHA1 2db733734049cd5d1fe6ffb63634ea120faf638a
SHA512 bbb6806ffcf654155adbc8178f9f08e1b7c48e9ace60df5e045543b33816d5649c43e051b640ecaa65141cf6942eea12aa0c99aac76f6e3ad88cb26786047af9
SSDEEP 1536:0XmLyP7XUFOEQBs+Dok8WhL8WvSvMLUHISthRdVd3BO2MutDy3LIxikmm:csQmVk7wWvmJttRBb
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 79KB
SHA256 991b92e5b3be1bd2e5257200cf217a7ad72f5c1ea90bfba62231e994deaf7d7c
MD5 e2bebe2a35303cce13c695473e881928
SHA1 eb84a9b9d7423344cccd17e3b4b386a91e72bb9c
SHA512 8dd0de44505fe859c753de4a9618f7aea6e15c951a7983bb75cefa3e93a1250744b8a9828eab316b83adc17bce6336039157c2a1851a805d4eee29cc91df9573
SSDEEP 1536:xXmLyP7XUFOEQBs+Dok8WhL8WvSvMLUHISthRdVd3BO2MutDy3LIxikmm:9sQmVk7wWvmJttRBb
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 78KB
SHA256 40ebd5bf912afdd9f9aaef11d5103bb17439fb91c3023aace4c414d18d55dc19
MD5 365d5d1f16397256bf15350f3cc6688b
SHA1 a50a6a9d7bd3c02364a14f3c6fc509e0807c58a9
SHA512 e487ca9d7739da241a59357cd76f55c8c5ec1e3823635d05d5309b0fb0214ffd9f5bfbe42760a2dac0a1ed950dceb1435abc6ce7b79482d045ce4c7c5735c502
SSDEEP 1536:xX/yhyP7XUFOEQBs+Dok8WhL8WvSvMLUHISthRdVd3BO2MutDy3LIxikmm:lsQmVk7wWvmJttRBb
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 79KB
SHA256 a863e785af416a0c103c383bd9e620dec1ac7ba9b75ff1744862d07abcd50d69
MD5 6dcec2ffe7e26144dd9f60584775816a
SHA1 4c78252f506a4298fefe8b2c3a19df1d38ad6c61
SHA512 2e9b008ee3c4e3199bf6dd664eb92e70b40143b21af4e850fc897126481b41052f6bf4a83a029377dcf9d1791484e68b615d2bde0f1a3ebedf358fb173e531d6
SSDEEP 1536:0XLWJyP7XUFOEQBs+Dok8WhL8WvSvMLUHISthRdVd3BO2MutDy3LIxikmm:D4sQmVk7wWvmJttRBb
MD5 SHA1 SHA512 SSDEEP

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download