castlerat | 7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42

Resubmissions

05/07/2026, 02:28

260705-cx3lfsgw6w10

02/10/2025, 20:13

25/09/2025, 01:44

25/09/2025, 01:37

21/09/2025, 15:10

23/05/2025, 02:40

Analysis

max time kernel
900s
max time network
898s
platform
windows11-21h2_x64
resource
win11-20250619-en
resource tags

arch:x64arch:x86image:win11-20250619-enlocale:en-usos:windows11-21h2-x64system
submitted
25/09/2025, 01:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe
Size 7.2MB
Sample250925-b556wavzbs
SHA256 7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42
MD5 58253bef795c914bb2dca89f74ae0aec
SHA1 ab517aa83178957381a9f9317c15901f4ee79cc4
SHA512 49b0d94812f6a0fd710db9e97fd48413b1002371358bfe3fa2b577773d4f7b9f716dc12191f3f1b76d142fa304f7b4e2a2092e3d6a67be01a546debf9ce62eb4
SSDEEP 49152:DCiAb9key/HOSt9/uW2P5asIOd0S0IBRQVvOIQrDMsjP4yIJgieTgueLJ93Ij/hs:DpsZZwbJFeg/3SP
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

tag_150 apt discovery execution castlerat persistence trojan

Malware Config

Extracted

Family

castlerat

104.225.129.171

Signatures

CastleRAT
CastleRAT is a trojan available in both Python and C variants.
trojan castlerat
Castlerat family
castlerat

Command and Scripting Interpreter: PowerShell 1 TTPs 15 IoCs

Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

execution

PowerShell

T1059.001

pid	Process
420	powershell.exe
1152	powershell.exe
3340	powershell.exe
5896	powershell.exe
3792	powershell.exe
4000	powershell.exe
6720	powershell.exe
2628	powershell.exe
6476	powershell.exe
4084	powershell.exe
6400	powershell.exe
5840	powershell.exe
5852	powershell.exe
5380	powershell.exe
5600	powershell.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	EXCEL.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	EXCEL.EXE
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	WINWORD.EXE
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	EXCEL.EXE

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	WINWORD.EXE
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	EXCEL.EXE
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	EXCEL.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	EXCEL.EXE

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134032383145417024"	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4024151881-1944119507-1574723210-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4024151881-1944119507-1574723210-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4024151881-1944119507-1574723210-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4024151881-1944119507-1574723210-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: AddClipboardFormatListener 4 IoCs

pid	Process
332	7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe
3944	WINWORD.EXE
3944	WINWORD.EXE
5096	EXCEL.EXE

Suspicious behavior: EnumeratesProcesses 47 IoCs

pid	Process
420	powershell.exe
420	powershell.exe
332	7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe
332	7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe
4900	chrome.exe
4900	chrome.exe
1152	powershell.exe
1152	powershell.exe
4900	chrome.exe
4900	chrome.exe
3792	powershell.exe
3792	powershell.exe
5328	chrome.exe
5328	chrome.exe
3340	powershell.exe
3340	powershell.exe
5840	powershell.exe
5840	powershell.exe
4000	powershell.exe
4000	powershell.exe
5852	powershell.exe
5852	powershell.exe
5852	powershell.exe
6720	powershell.exe
6720	powershell.exe
6720	powershell.exe
2628	powershell.exe
2628	powershell.exe
2628	powershell.exe
5380	powershell.exe
5380	powershell.exe
5380	powershell.exe
6476	powershell.exe
6476	powershell.exe
6476	powershell.exe
6400	powershell.exe
6400	powershell.exe
6400	powershell.exe
5600	powershell.exe
5600	powershell.exe
5600	powershell.exe
4084	powershell.exe
4084	powershell.exe
4084	powershell.exe
5896	powershell.exe
5896	powershell.exe
5896	powershell.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
332	7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	420	powershell.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe
Token: SeCreatePagefilePrivilege	4900	chrome.exe
Token: SeShutdownPrivilege	4900	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe
4900	chrome.exe

Suspicious use of SetWindowsHookEx 20 IoCs

pid	Process
332	7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe
3944	WINWORD.EXE
3944	WINWORD.EXE
3944	WINWORD.EXE
3944	WINWORD.EXE
3944	WINWORD.EXE
3944	WINWORD.EXE
3944	WINWORD.EXE
5096	EXCEL.EXE
5096	EXCEL.EXE
5096	EXCEL.EXE
5096	EXCEL.EXE
5096	EXCEL.EXE
5096	EXCEL.EXE
5096	EXCEL.EXE
5096	EXCEL.EXE
5096	EXCEL.EXE
5096	EXCEL.EXE
5096	EXCEL.EXE
5096	EXCEL.EXE

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 332 wrote to memory of 5996	332	7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe	79
PID 332 wrote to memory of 5996	332	7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe	79
PID 5996 wrote to memory of 420	5996	cmd.exe	81
PID 5996 wrote to memory of 420	5996	cmd.exe	81
PID 4900 wrote to memory of 4756	4900	chrome.exe	83
PID 4900 wrote to memory of 4756	4900	chrome.exe	83
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4940	4900	chrome.exe	84
PID 4900 wrote to memory of 4960	4900	chrome.exe	85
PID 4900 wrote to memory of 4960	4900	chrome.exe	85
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86
PID 4900 wrote to memory of 4988	4900	chrome.exe	86

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe
"C:\Users\Admin\AppData\Local\Temp\7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:332
- C:\Windows\System32\cmd.exe
  /c "powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5996
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:420
- C:\Windows\System32\cmd.exe
  /c "powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit"
  2⤵
  PID:5776
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    PID:1152
- C:\Windows\System32\cmd.exe
  /c "powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit"
  2⤵
  PID:2208
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    PID:3792
- C:\Windows\System32\cmd.exe
  /c "powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit"
  2⤵
  PID:4224
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    PID:3340
- C:\Windows\System32\cmd.exe
  /c "powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit"
  2⤵
  PID:3152
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    PID:5840
- C:\Windows\System32\cmd.exe
  /c "powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit"
  2⤵
  PID:576
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    PID:4000
- C:\Windows\System32\cmd.exe
  /c "powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit"
  2⤵
  PID:6160
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    PID:5852
- C:\Windows\System32\cmd.exe
  /c "powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit"
  2⤵
  PID:6616
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    PID:6720
- C:\Windows\System32\cmd.exe
  /c "powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit"
  2⤵
  PID:992
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    PID:2628
- C:\Windows\System32\cmd.exe
  /c "powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit"
  2⤵
  PID:2060
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    PID:5380
- C:\Windows\System32\cmd.exe
  /c "powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit"
  2⤵
  PID:5992
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    PID:6476
- C:\Windows\System32\cmd.exe
  /c "powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit"
  2⤵
  PID:420
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    PID:6400
- C:\Windows\System32\cmd.exe
  /c "powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit"
  2⤵
  PID:6280
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    PID:5600
- C:\Windows\System32\cmd.exe
  /c "powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit"
  2⤵
  PID:728
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    PID:4084
- C:\Windows\System32\cmd.exe
  /c "powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit"
  2⤵
  PID:4252
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Add-MpPreference -ExclusionPath $env:USERPROFILE; Add-MpPreference -ExclusionProcess '7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe'; exit
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    PID:5896

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=133.0.6943.60 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff6e14dcf8,0x7fff6e14dd04,0x7fff6e14dd10
  2⤵
  PID:4756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1928,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=1924 /prefetch:2
  2⤵
  PID:4940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --field-trial-handle=2244,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=2252 /prefetch:11
  2⤵
  PID:4960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --field-trial-handle=2364,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=2380 /prefetch:13
  2⤵
  PID:4988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3224,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3292,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4212,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4192 /prefetch:9
  2⤵
  PID:5324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4640,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4652 /prefetch:1
  2⤵
  PID:3028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5304,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5312 /prefetch:14
  2⤵
  PID:5680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5552,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5564 /prefetch:14
  2⤵
  PID:3176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5344,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5348 /prefetch:14
  2⤵
  PID:4148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5320,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5712 /prefetch:14
  2⤵
  PID:2824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5332,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5328 /prefetch:14
  2⤵
  PID:3460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5808,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4796 /prefetch:14
  2⤵
  PID:4584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=212,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4800 /prefetch:14
  2⤵
  PID:3680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=6096,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5992 /prefetch:14
  2⤵
  PID:3992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=6100,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5824 /prefetch:14
  2⤵
  PID:1904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5852,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5348 /prefetch:9
  2⤵
  PID:4976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1292,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4288 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=5952,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3840 /prefetch:1
  2⤵
  PID:1520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=5660,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5604,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4752 /prefetch:14
  2⤵
  PID:2008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=4716,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:4100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=3624,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:5588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=3684,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:2196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=6060,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=4660,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6028 /prefetch:1
  2⤵
  PID:3092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=4580,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:2512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=3648,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=6204,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6184 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=5616,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:4704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=4664,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6584 /prefetch:1
  2⤵
  PID:5308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=3476,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6628 /prefetch:1
  2⤵
  PID:3516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=6348,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6384 /prefetch:1
  2⤵
  PID:2904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=6792,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6776 /prefetch:1
  2⤵
  PID:5176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=6944,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6972 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=6576,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6552 /prefetch:1
  2⤵
  PID:5500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=5728,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6216 /prefetch:1
  2⤵
  PID:5252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=7240,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7260 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=7404,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7416 /prefetch:1
  2⤵
  PID:3128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=7564,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7436 /prefetch:1
  2⤵
  PID:3860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=7720,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7572 /prefetch:1
  2⤵
  PID:3900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=7868,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7884 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=8016,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8040 /prefetch:1
  2⤵
  PID:4488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=8184,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8200 /prefetch:1
  2⤵
  PID:4624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=8340,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8356 /prefetch:1
  2⤵
  PID:6100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=8496,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8512 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=8656,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8668 /prefetch:1
  2⤵
  PID:1960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=8788,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8824 /prefetch:1
  2⤵
  PID:5760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=8964,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8980 /prefetch:1
  2⤵
  PID:2432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=8344,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8368 /prefetch:1
  2⤵
  PID:3104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=7612,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7652 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=7576,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8680 /prefetch:1
  2⤵
  PID:2952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=7388,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8684 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=7676,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8804 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --field-trial-handle=8412,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7700 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --field-trial-handle=9240,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8452 /prefetch:1
  2⤵
  PID:1456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --field-trial-handle=9484,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=9508 /prefetch:1
  2⤵
  PID:5888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --field-trial-handle=9340,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=9644 /prefetch:1
  2⤵
  PID:5852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=9816,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8416 /prefetch:1
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --field-trial-handle=9796,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=9780 /prefetch:1
  2⤵
  PID:2616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --field-trial-handle=10092,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10100 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=10220,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10140 /prefetch:1
  2⤵
  PID:2636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=4832,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10352 /prefetch:1
  2⤵
  PID:1492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --field-trial-handle=10524,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10572 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --field-trial-handle=5204,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10728 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=10516,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10864 /prefetch:1
  2⤵
  PID:492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --field-trial-handle=10948,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10980 /prefetch:1
  2⤵
  PID:968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --field-trial-handle=10700,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=11144 /prefetch:1
  2⤵
  PID:908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --field-trial-handle=11252,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=11288 /prefetch:1
  2⤵
  PID:5256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --field-trial-handle=11408,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=11440 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --field-trial-handle=5628,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=11600 /prefetch:1
  2⤵
  PID:5392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=11712,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10484 /prefetch:1
  2⤵
  PID:6168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --field-trial-handle=11412,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=11876 /prefetch:1
  2⤵
  PID:6268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --field-trial-handle=12008,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=12020 /prefetch:1
  2⤵
  PID:6276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --field-trial-handle=11036,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=11052 /prefetch:1
  2⤵
  PID:5144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --field-trial-handle=7876,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7784 /prefetch:1
  2⤵
  PID:5524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --field-trial-handle=7472,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8068 /prefetch:1
  2⤵
  PID:5932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --field-trial-handle=9944,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10532 /prefetch:1
  2⤵
  PID:6872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --field-trial-handle=8592,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8620 /prefetch:1
  2⤵
  PID:6880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --field-trial-handle=8808,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7872 /prefetch:1
  2⤵
  PID:6884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --field-trial-handle=9904,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10728 /prefetch:1
  2⤵
  PID:5944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --field-trial-handle=11676,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=11640 /prefetch:1
  2⤵
  PID:6900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --field-trial-handle=11576,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10520 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --field-trial-handle=8912,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=9332 /prefetch:1
  2⤵
  PID:3864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --field-trial-handle=9932,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --field-trial-handle=9324,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=9140 /prefetch:1
  2⤵
  PID:2312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --field-trial-handle=9248,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=9312 /prefetch:1
  2⤵
  PID:948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --field-trial-handle=9292,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=11092 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --field-trial-handle=9256,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=9792 /prefetch:1
  2⤵
  PID:6912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --field-trial-handle=10208,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8208 /prefetch:1
  2⤵
  PID:6916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --field-trial-handle=9504,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10924 /prefetch:1
  2⤵
  PID:1832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --field-trial-handle=8696,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8368 /prefetch:1
  2⤵
  PID:3292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --field-trial-handle=8684,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8732 /prefetch:1
  2⤵
  PID:6040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --field-trial-handle=9972,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=9988 /prefetch:1
  2⤵
  PID:7016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=9928,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=11072 /prefetch:1
  2⤵
  PID:4600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --field-trial-handle=7204,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7080 /prefetch:1
  2⤵
  PID:5896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=6960,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7148 /prefetch:1
  2⤵
  PID:7132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --field-trial-handle=7128,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8904 /prefetch:1
  2⤵
  PID:5964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --field-trial-handle=10192,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6836 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --field-trial-handle=6612,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:5500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=10288,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10968 /prefetch:1
  2⤵
  PID:3632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --field-trial-handle=7216,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6412 /prefetch:1
  2⤵
  PID:7116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --field-trial-handle=10584,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10256 /prefetch:1
  2⤵
  PID:6140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=10372,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=11116 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --field-trial-handle=10396,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10404 /prefetch:1
  2⤵
  PID:1040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --field-trial-handle=10648,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10332 /prefetch:1
  2⤵
  PID:2012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --field-trial-handle=11856,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10444 /prefetch:1
  2⤵
  PID:4400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --field-trial-handle=10432,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8584 /prefetch:1
  2⤵
  PID:5328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --field-trial-handle=9516,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7900 /prefetch:1
  2⤵
  PID:428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --field-trial-handle=10820,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10964 /prefetch:1
  2⤵
  PID:6220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --field-trial-handle=10776,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10852 /prefetch:1
  2⤵
  PID:6228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --field-trial-handle=9804,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7880 /prefetch:1
  2⤵
  PID:6244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --field-trial-handle=8396,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8116 /prefetch:1
  2⤵
  PID:5604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --field-trial-handle=9356,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6452 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --field-trial-handle=10484,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=11236 /prefetch:1
  2⤵
  PID:2240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --field-trial-handle=9652,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=12372 /prefetch:1
  2⤵
  PID:6380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --field-trial-handle=12396,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=12416 /prefetch:1
  2⤵
  PID:2636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --field-trial-handle=7544,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=12672 /prefetch:1
  2⤵
  PID:3404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --field-trial-handle=7980,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=11664 /prefetch:1
  2⤵
  PID:2908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --field-trial-handle=9036,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7976 /prefetch:1
  2⤵
  PID:5296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --field-trial-handle=9436,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7924 /prefetch:1
  2⤵
  PID:3740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --field-trial-handle=8812,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7712 /prefetch:1
  2⤵
  PID:1152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --field-trial-handle=10300,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=11600 /prefetch:1
  2⤵
  PID:6188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --field-trial-handle=12380,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6904 /prefetch:1
  2⤵
  PID:3616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --field-trial-handle=8724,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10016 /prefetch:1
  2⤵
  PID:6420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --field-trial-handle=10020,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10956 /prefetch:1
  2⤵
  PID:5912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --field-trial-handle=12560,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=9720 /prefetch:1
  2⤵
  PID:6608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --field-trial-handle=10408,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=12324 /prefetch:1
  2⤵
  PID:6228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --field-trial-handle=10476,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=12144 /prefetch:1
  2⤵
  PID:6660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --field-trial-handle=10756,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=12436 /prefetch:1
  2⤵
  PID:6628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --field-trial-handle=8388,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7208 /prefetch:1
  2⤵
  PID:2520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --field-trial-handle=10864,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=12444 /prefetch:1
  2⤵
  PID:6664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --field-trial-handle=11424,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=12300 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --field-trial-handle=8452,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10684 /prefetch:1
  2⤵
  PID:6744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --field-trial-handle=12556,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10528 /prefetch:1
  2⤵
  PID:6912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --field-trial-handle=7304,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=9404 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --field-trial-handle=9412,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=12620 /prefetch:1
  2⤵
  PID:5956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --field-trial-handle=8740,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6912 /prefetch:1
  2⤵
  PID:5260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --field-trial-handle=9004,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=12332 /prefetch:1
  2⤵
  PID:6236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --field-trial-handle=9768,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8860 /prefetch:1
  2⤵
  PID:6032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --field-trial-handle=7056,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8400 /prefetch:1
  2⤵
  PID:6500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --field-trial-handle=7132,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=12628 /prefetch:1
  2⤵
  PID:6244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --field-trial-handle=5988,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8756 /prefetch:1
  2⤵
  PID:5264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --field-trial-handle=11276,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=9016 /prefetch:1
  2⤵
  PID:1492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --field-trial-handle=11892,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6644 /prefetch:1
  2⤵
  PID:2792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --field-trial-handle=4560,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=10328 /prefetch:1
  2⤵
  PID:4240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --field-trial-handle=8680,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5672 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --field-trial-handle=11876,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8672 /prefetch:1
  2⤵
  PID:6900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --field-trial-handle=8256,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:6748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --field-trial-handle=8288,i,9090680677684582310,7688088357651236989,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=8320 /prefetch:1
  2⤵
  PID:5240

C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe"
1⤵
PID:2044

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5644

C:\Users\Admin\AppData\Local\Temp\7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe
C:\Users\Admin\AppData\Local\Temp\7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe
1⤵
PID:6048

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:3216

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DisplayEnhancementService
1⤵
PID:6192

C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\Desktop\UnlockSwitch.docx" /o ""
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:3944

C:\Users\Admin\AppData\Local\Temp\7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe
C:\Users\Admin\AppData\Local\Temp\7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe
1⤵
PID:1724

C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\Desktop\WatchStep.xlsx"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:5096

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Desktop\WriteConfirm.cmd" "
1⤵
PID:7020

C:\Users\Admin\AppData\Local\Temp\7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe
C:\Users\Admin\AppData\Local\Temp\7e0d097412ca8c3acdbaaa7c1f79c42cda3a4e50b52c0a8b34d6c75cc764ce42.exe
1⤵
PID:4080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

7eb70036-f5a2-4f3f-8796-1d24ff448d5e.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7eb70036-f5a2-4f3f-8796-1d24ff448d5e.tmp
Size 11KB
SHA256 c3e3932c1a89ec81d05406b369d0d921fef35e52df6ba985eec8c3fadb05c53e
MD5 8d36b350019c4c374817c0048d2de946
SHA1 f8c66526cb49e60c0fc04cb93e373ef5ec3d7c0d
SHA512 446252faa487c4b57cbd9e6398efc8d30903ec290074c214a82aed1a60924c8b0d9eb5df39065c8f4e8b7b20dcb6659bec793b60835c48ca0c7f611c5508c08c
SSDEEP 192:XBYEXVMdc1HZ8PRpYpHS+WN4A+oU3ruEkwpbED+pQyIsnA/g2:RYEXV1cXYxcuoCJW4Z2
MD5 SHA1 SHA512 SSDEEP

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 af66c700ccd5411426934a81109316009c37454c0e717cb25d456daf3edbe732
MD5 f0526cf6d4f680c59128640ab77df1ee
SHA1 9c484fa172fee57d2c53db873ff107889b2fd0ee
SHA512 440cf8435d4e841270ceec110a42ec993fbd58c6efb0b6c8032dd6bac71ca1d9f793a06da8310a39815f08ff7f11cf255bfdf4e49b60edc942ece4b9406ada9f
MD5 SHA1 SHA512

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
Size 340KB
SHA256 e036e1a8b3160c7645b7b35fc435c70a4ed5b287babe33596079fbf3be7a3a5f
MD5 09452dde4753c0c907e4a45566e4b2a4
SHA1 a5c2df599d79c03887021fb2f020576a8b166cfc
SHA512 cac5fe5670c8d9a5e09cf4ad061bd78c31cc5e66904bfdc22bf8d86f43707b2f8584c0fcad22aa70055ca89d48f4e1260ebb669925415970cd4dc217f8317aaf
SSDEEP 6144:AzIs/f2XXvOAyaQswJarwjwr4CDGjgaFoNf+lgdVbCG7Xxmi2LW3mwekSqY:AzIs/f423ywe4CDsFFpKbCG7XqLWWPFb
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017
Size 41KB
SHA256 e049c970d15d7fbdbc0413f01fa732fec178d919d7b469e43d66e94ed4269afe
MD5 98c2a4379bb231e3c846c1968821f0ae
SHA1 853ed14902805f620e101427a38e3afe466dce47
SHA512 69e0416803b76fa4ee455fd3371dba857db9814c33bf33b74f8924300681ad6ea0bd92879042c302df6ea4d8b29e811229a0f9c60e4216c7bd0a9c245ed1c0f2
SSDEEP 768:r5/2EUqaPn8XoeSnXXmie9HSBHQSBcV41eUC+JDwHVxrOFaLKP3BxqYi:JVlN4LnnWRsHx31C+hw1xqXPRgZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000030

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000030
Size 22KB
SHA256 9dc222fa3e4df03dcea1acb357b3a27d74aaf32a0422e8954dfb4ffd08254de7
MD5 b725c98b7a93e468abca85c3ccd15843
SHA1 9b98ef484c0f2c2cfa7ced3ee6c25d7a3a3b53a5
SHA512 0e1569dc6e6c6439d39dd1e33c55847b725a5bdf470da494f1b3d11c2ae19874aa7c70ac46d5d1ca0dd0da8a98edc30e624bf41a21b1871fc4a10f777bbd1a26
SSDEEP 384:gjv0ITB1xxsKhS0RlhaGWFFZVu1qdZcERWaV4BIGM4/BdrhDPalsTXM:BeB1xxsoaGWFvw0dGSuIG1/DrhDylOM
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000036

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036
Size 68KB
SHA256 7705244c011f717707bb05d6fe87ec7c17bc78f9cbd658f6e43bd38a6e433adc
MD5 9421400cba8680d18c6d87256ade404f
SHA1 bf43e190b7b032e47f0ccf072e13333fcf1e4638
SHA512 2e2174b3347670d7afc184257d28b9abf8fc99ee04a73b0b18e87946e963a2f7810bd1ac870a14b55fea176e89e84144606f7bbed22599c36daa72b77a26621d
SSDEEP 1536:IgawbcSWKJ1ypIG75gLBX4b0QDqVfhessDD:NaHk7uIGaaDqVfHsDD
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00003b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003b
Size 71KB
SHA256 f909631364f3036777ee595a9e9772369a506828a2fc3981867ea674082b624b
MD5 8027ffb5606f09fff587f415a27e330c
SHA1 b8a9ef87b7a1cdad2a35b2dfe743f46a1fc370c1
SHA512 674b5b803ab92517d6d5a885873e08a37bb3443cfb87dbe064c45100d6e5a5648a380b80ae3091111ceef0aec92ac5f9fae0eac371b18ecba73882e836a037df
SSDEEP 1536:MkZWE5imczV6RiwQn9ctCriltDhHemLvnYse/:Msi9gi7caY19jnYX
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00003e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003e
Size 145KB
SHA256 4920cf8df2a3d5fa1b20c2d40883b58fd478ff01345b20c589986d8a8f92d695
MD5 cecc2e99a5e00d059ca7f6d3296d48d1
SHA1 4f67a4bd303a0f369f6e4d2f2c17d4c418b4d66a
SHA512 be6d087daeac3f5b678d2516f88346cf352ddd7ad48a9f7df53b64fb08d758f72fd0690ce04a285a75de7e1b2162426b1b708cf28e1e9e0ef5ac3152d084f103
SSDEEP 3072:SCRPtAbt5ohdQqP0tMNve6VKTYMZY8ke7q+WTww+/W2NW+v1EouSw:9PHZNe6VKTTe8a+WTE1Xv1Eou1
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00003f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003f
Size 16KB
SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
MD5 9c6b5ce6b3452e98573e6409c34dd73c
SHA1 de607fadef62e36945a409a838eb8fc36d819b42
SHA512 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7
SSDEEP 384:XQrDFyKFRXQQ5pGG913BahobGGOal+0HuXpAWBY:grxyUKQ53pdbGg47PY
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00004d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004d
Size 20KB
SHA256 8460b242e9ce49651dfd1c6efe846c187cb6fd07ffdd4e376f062aa84a2bb4ab
MD5 3f94be687925d8720ddbc5ee2e389327
SHA1 1c64034d80a35e03b9d690624280576aee6b6b66
SHA512 6784eaf1f519235218341d158312478b881cbd6b4da03b91c74ce26e0903da6e847ff694bf472ffcc9a6a205b78378f599f0de3cc56350bc343b279e622abc3a
SSDEEP 384:vVwn+PxHAycj5jdJWAmbjr3HZSA4jQ3belrs+IfAn0O2JqVdgM:dRPOj5/RmrHZSA4jmelrPfIux
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000051

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000051
Size 21KB
SHA256 331c08b34dcbf5743cb6cec1e8f431ff9f1fa595eb7cc2ba5e897f2ed309acdd
MD5 1c9a3f87a5488fb8610572210882dc41
SHA1 02ab5f206d431e49da47e03b27c5d922bab23876
SHA512 c0bd82e6e05c81145cca0b00615f9ab1f1c7634b378c08b7d8932dc8b3db5323b11b5f9384d13f14d0c6b4223aaaafd4ba390d0e51e148f9024f5ab9dbb3bd52
SSDEEP 384:aL46z458HW19ys3tEtmutSY9aV+cULVSioYsqdwNgOC2jf5jcar2sTG/1YcHF5X1:aNz4wWus30mVDsZ6NgO9PO/1PvXTZgF0
MD5 SHA1 SHA512 SSDEEP

Submit Download

0346e514baa3eb7f_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0346e514baa3eb7f_0
Size 235B
SHA256 f1e4912e342f85dcb571162b8d7a128af55c9d0360fe4dce5bdc643b674b67a3
MD5 42b46de2e22343f28fdf52776f616fc0
SHA1 5f9b45aee87a58542ce3c14d66eae0f4cb2fef6b
SHA512 05b95b57da8be21dfda314c14b3f3c503f0d106dc5faa0b967215ecd4c72cf4453d56d23734f4c399adafb63c4eb4a62302d90417e8a8da1c81a2ecd01a67484
MD5 SHA1 SHA512

Submit Download

1bbf014285d5ac59_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1bbf014285d5ac59_0
Size 215B
SHA256 34116f68e969f8f4dddd8b22295376192972bd9021726061b926a8af550fe194
MD5 229041a4c2aba6bac3bba69733c74ea3
SHA1 89aa42f9e1e929d830c7587304a962a19d4eb4cc
SHA512 c7cc02c60b8ee48c17070398a9203d9a385fdec4b438ea59c77cf2d7b6949a1275d6b52078da22664ffff363090d34998543b62ec6e8f6eb60bd471e338e07b8
MD5 SHA1 SHA512

Submit Download

4f660ef002b76b62_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4f660ef002b76b62_0
Size 219B
SHA256 80aace0368c9846d5ca215e82b1b3ad366b69b0b33654dc03ecec54f4789776e
MD5 03f1000c5e641397f9e1486b7e073a2e
SHA1 c305646cdb64687c44087e71d0c42a352f3b620c
SHA512 f6d7b02380cfb7e8751b5fb26fb7c585c58322b9f1fcd051dacdbbd7bf973002cb1948dc544b4435cf7c79e38854b6c7ea87058d763519b77ed988a3b9677fb1
MD5 SHA1 SHA512

Submit Download

5470f3a74460fadf_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5470f3a74460fadf_0
Size 207B
SHA256 d021fbc0e8d3bb29f39a3031fb0cefaf65edf1d2e1b122adf9c8cb32e2766191
MD5 d185dfe21f3694e0bdef50e33f6b018c
SHA1 5cff261733e2bb563023ea37245893b2b408f56c
SHA512 da7db22d674d134524cdc5ce21d10db8e30b840dd4bb3bb6ae76e90b4cc621d20eb99f3f73691fabcdb1ce45ce13da49f4aa0601cb30fc6eb5a9345af1934ada
MD5 SHA1 SHA512

Submit Download

8f6a269ad7ec17d2_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8f6a269ad7ec17d2_0
Size 218B
SHA256 8cdb25be06d1d4d7ff497d98138a407c06aa8ac059d903a7da2796a9c487b44f
MD5 a10a3198fa1bf996821b1c2fc931c51c
SHA1 a1a1b178cefb3f703173146c12974eb043fd6b09
SHA512 254591228f98fa09af229cbae9d3e7a5457d39baa19c8bcebd577a7674301126c3bf19e6b6735b43f311d04ff3566becddc0ba28bdd09223ee986031f3e47900
MD5 SHA1 SHA512

Submit Download

b285fd21a810c468_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b285fd21a810c468_0
Size 254KB
SHA256 cc92878b3daa0bfff28d211fd7d731f8e8f38c8981738154eed5108b11129419
MD5 be0d4a1ed31bbbe85bdea48a0b984b32
SHA1 acfb5d025bf2149c40a9fa3e8e2de52c95846fe0
SHA512 cd905ee231258fa7c9c537d2b48c6ecce0117024f0a0f8436b9d2daa28dea366d6bdb22f18577d9c047dccf0d98178f85599d4e2e8b9831c7ec54bc4e885470b
SSDEEP 3072:PyKdWkrAS7uP1vPxyt1sHRqVmvHsZ873X7+GRbsvaAhSlTyezkCsmfyL3UFEYHOj:VzrA/tvkXM1sZiqGRbsvaACy6l7NS
MD5 SHA1 SHA512 SSDEEP

Submit Download

b6cf5ac29e472820_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b6cf5ac29e472820_0
Size 265B
SHA256 9cb6a07e55e19f2dd28932b4fdac2523da5b5137264243b13dd494d363132a0d
MD5 8d3e20d9b51b68ec7c4a1f672fa62be1
SHA1 242e39c083d6949381c8e2ab6be4d8f0f2243947
SHA512 0e290476768c20c39f4fc6620ee9bc1b1bf03c266871dbbf3595056a654254a9d881b1aab19bfef2fa76c88d24040ccabefe2b731c86aa019137210b92f2481b
MD5 SHA1 SHA512

Submit Download

bd1d12b0ebb48934_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\bd1d12b0ebb48934_0
Size 258B
SHA256 4c6208de17e378ee74a091e3bf1a5e6235bed985fc3f8a3582073f4577a4600f
MD5 54b51c73a08e928c9ac8de1606f2b41e
SHA1 1d5090897d65c9dd88c2d064c70d92daa61c6f16
SHA512 5dc5db9dc8124d787d70b6c65c314fe93c5858a0ff3674e253e0e65baa9957d5eaa8fb2e75fd690ae7de862b60cabb7a7ad4827ea98970d04ede3ee4d897546e
MD5 SHA1 SHA512

Submit Download

bd8519c92342ea0a_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\bd8519c92342ea0a_0
Size 231B
SHA256 4b356f50cd8f76b9cd9782a48c7fa06c622206d72542eddfe5a018b53032a763
MD5 f31538892d809ed8bde61a524557a31e
SHA1 a6329c693a05e7ee47c92de02e47ea8c81170daa
SHA512 a8db1e486380d2b131d6fad912e03db2fc58d1028ff4af57d10423f6c8169f4d9f5282fb4d272f6bdda2bd7000bca6d093fb4d552a6adb0233611661a87556df
MD5 SHA1 SHA512

Submit Download

c594e60a0e3c3968_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c594e60a0e3c3968_0
Size 254B
SHA256 627b61cfffd2c097f2d77798a7584de9378cc655f24fb16ab1beeac3a40ac32b
MD5 74844a101b53fc9e4368df439f85f30a
SHA1 2696afafe917b06698e221dd3ea78b94ba784b92
SHA512 b7a7e7e3f9a2dff1cc3c0af40b2e091b2b1224139f9518560b3d87d79b98519222fe6671bd9debe4ce62dbeed244d8d06ee3e5bf1b0e319df5b9656d35cfd6a1
MD5 SHA1 SHA512

Submit Download

fe8b7ca011cc9644_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fe8b7ca011cc9644_0
Size 301B
SHA256 fbd945ff247d6e1e0a5f18cbc01b154e2f130747aa5c1a2b75d1ea7b8880bd2a
MD5 e455a07223285405158a0e45adaa776c
SHA1 d0bd5d24d6df0cdc20a43a73582601bbc0ef1059
SHA512 a9ed9e0cc9edbb26b49507113465aeeaafe010d436db21d2246574405b1193a300153df684e8085f7997a3c79e5d876c0d6ec8bfa185ddc772d5f365ee77d1f2
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 a15fbe4f632d145e1ac252c3e64ac23ac4d16e62c471cc837de0cb91f06a486d
MD5 94fb02d9a45282c1cdddb888d06d50ac
SHA1 9e8f6110a9f7104e09ba6a6f42c18a997483cd3d
SHA512 b7dde14211a9c3f123753dc04378c187940736b3e561558628dfd29438f66cbb023375df79c3a2c648b6190cdd68781b8ec25e41d26ea0edbf8797dde7486e17
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 312B
SHA256 a715086ec109dc8e0869dbc0549c51c3bbb8c1dbd4e4feebd7616ba7c7c1a917
MD5 6e573e278ae7e15f129a074f59f9cefc
SHA1 2e8b7665fd9dad28d48719744f373960ba4c48cb
SHA512 d6ad8d8c4583930c807dcad938356e49e08ba10149ae39732f83a3b0484467e7d05e00a8320ec1423352d354df3cc51d8cfb0b590e9fb3a9bb1aca953d68941d
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 528B
SHA256 e0582b17f3663f08fb65779841ef6adf3b39624206c2ed9f9fd2ea1200b6d82f
MD5 19b84fd798f76c6f056e66ca4603647d
SHA1 4da9201170c6b4ddd30b0625ee3dabd52bedb3da
SHA512 1a12e06be31963f807fcd0dfe23671e5b30916ad32ab472b3bde4b81bc854b9bc0ef2865dba75a638d10fac2dd16ced00495ba5dad91c61e52a0427a40b40493
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 59ce85b968cfe11538e1f004b3ab58288390c7b98d97b7fb6c10b23d126ed1d7
MD5 4d1298d7c966efacb7392f974e07e7c6
SHA1 51b414a1f26c0f5e277a412564c28ce632c74024
SHA512 a1409c7a2379aa0261aec1fc4d15ba6aa98c3052551f0c384314021038fc91ac768d4fec7f96ec0c0e151b2c2fad7837a512af6c7b1b84730f2a8f62eef0ca72
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9aec42b19d0c3ea8a2426b645a08f053c14c34787eb15a62fb19110194c4abf5
MD5 dc2586712ec79a0c6033efbda15b726b
SHA1 bd5a5afaee429df8a211f72639154e44ecd9c0eb
SHA512 3cfe1f461d4c038c181c40239ebc39d16c0b7c0167c59255e39d69194f04be99268e0f4c608672e65d562c193505492b0d843ab66c6206e34ac4a504199f5625
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 dd5607f4a38b3d04afd79266fcd39f1056eb665f2d7638265d9a0c49da41f67c
MD5 f08c5c35ea5771790273475e0d3f95d3
SHA1 6dab6e9e19d1a6bc25d2078f9735e1d812a9a9a1
SHA512 94f4f69034b7b36086b9043f4478cc26e1ac24c423eb656753ce9bdbeb53ffb16244bc0c421d129d4c9064357590c3219491b92fc9e9d9586a33d6fd61e8d2ef
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 99d0a3109a2a2dc91749af1146831b60116ae6cc3291d81e10691e1242b3f584
MD5 95044bc12db33bc8b0a4df591114dda0
SHA1 9cc77175592df8b53f3cb2b2bf2fb55e199d34ef
SHA512 c102d91ebd57368f2d8aae63d07d614fd88687c9cc92db57e4127f23d2602679fbf71fd0fd6043fe3562a8cf1efda3318f8d7a8b90c90f7916256b5256484c88
MD5 SHA1 SHA512

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.96.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 5af2d1b45df55546f8766542f0554fdac4440b0850c509339c16cdae090ca111
MD5 062df604f336bd65427002b828dea129
SHA1 4d8aab9f3bda20a0fe03877f2c8fda70954e45fc
SHA512 d8c38a480f958e767be68f82bffed9c10d14b01175ed8180ef18f216a6b5a1c811e582c41b3e21b9ecb8a516581eebb6ba94fa5434a9056f67f587d6c6050a82
SSDEEP 96:D27qVr1lxgdyVTxP332PovNOIu1LPNYLlo:D27qVr1lxgdcTxf32AvwIu1ZYS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 93e3ac555e3c4a7b1311b964dff7222c262c91bd73125377c88d4de358fcb183
MD5 22751b30a646ef4bebc300328a07b64e
SHA1 dd29d0a184c850e382b442e380eb0c30c7ace9c3
SHA512 b798714ad308f25691b6c85f7e059770656cc1edb7db684b930b40307cec3f034260acde9506f3856ea348087f3f53af91b482a30d9c1232ad89296bafcf2933
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 39KB
SHA256 8ad8ba5bcaa9efd5bcd97be92b013152e1006875b4f385ab0361f108f2cee88d
MD5 d8b2b4310da58ebedd5e2c6879b8d3db
SHA1 01df65596d06f2c4195906a4c2c133ab7667866a
SHA512 f5713ff62e4731cff8fe6b5d4b51b6a7eb738d00a924e975ddeda11d1ac0260fde9fd5ac17c4fbe1aca166e5724665782c8107201f555ce6359a1d9be92b7135
SSDEEP 384:DwQgNpeZJEFiH2QV1ueLHiCcJKF9BeKp8mmgpT22AA0o2s222xbUbDQYEOMEZLsd:7e+BhWetZFFQ/MAFjdZf74Cl
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 39KB
SHA256 ba23aa8423e931cb60ffa23a55099b01079ab23ffaab45c6ccfd5de802ce7851
MD5 7c70ec95f8ec0fed20588bf00d573858
SHA1 c3fad88b4dd4c648afbcefc0695f76f2550dbb0c
SHA512 836f13401ab80d886c5afc1c4cb06da2c1aa2b91b843f06dcc434332a89f18e99a423ec270b4ba3d8ac3a0fb09c9d17937bff8692c13a3fa8ad068e6446e75e0
SSDEEP 384:DwQgNpeZJEFiH2QuueLHiC+JS39BemN8mm0mhkNvpT22AA0o2s222xbUbDQYEOM2:7H01hWexZFFQ/MAw96VC/ZUY
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 39KB
SHA256 2c0ea4e3cc16523a564511bde489ef488409ad2658f89174cc46b4ced1c140c4
MD5 4c9a00b4836ac853a9d587c8d7d61a13
SHA1 4b8c40aaded70ba2dec9aa3ac39a00cafcd5f405
SHA512 fd11a84fc9b93ed4ce797e0ff722c5b29c93c591329001fda35ab949add04dea917424653b2c75add3ac74ef6b8f7e91cdc9d7a74cbce2c49b5f5fc777660355
SSDEEP 384:DwQgNpeZJEFiH2QNuueLHiC+JS39BeKp8mm0mhQpT22AA0o2s222xbUbDQYEOMEU:7Z03hWexZFFQ/MAw5R7C/ZUG
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 38KB
SHA256 c44673445bb405fc642545ef83eeb9e5fe7b7af5dc1fa4c98490afebc2003857
MD5 bd4a865a490734360086b077c2a10acf
SHA1 2885b7712e1a925783f9f6b7073a10ed5b961aee
SHA512 43d281b4644fdba0857c971f17a5acb7e8f78b0d7718162aa091d272093cdc9c3330807ecfd498b3d7fadd921a066ed92eacb11384254bb44e66dac70505970d
SSDEEP 384:DwQgNpeZJEFiH2QuueLHiC+JS39BemNmm0mhkivpT22AA0o2s222xbUbDQYEOMEl:7H07hWexZFFQ/MAw9ltC8ZUM
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 35KB
SHA256 f478d38f3082a7acf10ebe96a7f04780fdcb4367b8d4a7379b596f3dce8f524a
MD5 ceec8c79d3ce9a107c67aae0a4153698
SHA1 12a23257d84c2a024e9a9f98af74ba18b3b35346
SHA512 4817422a25bf650cc9db60e53b74c668cc2d59a07673b455f1c519d91cb3515dec7571dd0822c9afcdda7527d55d360839b40ea70b2f912a84d3c858d2e5e6b6
SSDEEP 384:Dw7qyQepJq1ms6RV1hueLHi6pT22AA0o2s22ixbMYI4ne4QSjdRuSVvrPe4U2YY3:yA/tftaU5QZnfZKmn8fVI5s5
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 38KB
SHA256 872f024e26d010db5a6ad722feb4917c2793ea1db343b2c13378461a2f7791e8
MD5 34959474c67b4e5ebcdd7aa99b5ca41f
SHA1 cb75bf52a2450d044c48379a748a09a9ac8f998c
SHA512 2d9fbcb7c4d3b4eb29afbbd01f00cad1a73c96df5ce1fa6bac14fff843577c53cf28a4d7f4b2f6c913c0b36762cee0421c40481cbf2326aec854971a5d8977a4
SSDEEP 384:Dw7qyQepJq1ms6RV1ueLHiCcJKF9B2pT22AA0o2s22ixbMY/4QSbDQYEOMEZLsan:y8+JQpBJpIAna9v5Zz/ofZT/R
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 39KB
SHA256 620317b4072c5fdab4e1cce245165d3282eaede3b801f59044faaf16157ccea5
MD5 51c12cf99535c28a4c6d34be90252ed6
SHA1 db4f9b5c0467edba500ab524f2fc84bcb31f2a38
SHA512 7849e0d20fb115f5657bc08ed83f3e664f6af08fccd9a12b1e7185c3b305dbcaff8e27fd80dbd2424d5ad002305fca54d1372020308995e7006e0294705add1e
SSDEEP 384:DwQgyQepJq1ms6RV1ueLHiCcJKF9BeKp4pT22AA0o2s22ixbUbDQYEOMEZLsa3qo:/8+eBIrtZFBQ2L+1eD/Z4/ks
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 32KB
SHA256 549d4d3dc9d0eab39ac65fd67af4a3607bc34af5856ebb3bb3f1ec80fc8dd809
MD5 19ebb31cde24c7d690c4f6a33c08fa08
SHA1 560d781179b761a61764558ef65df2183934eacf
SHA512 340913f00e3f151d54ffdffd27bf05c16db7697a6fdc4f6aa8d4e81869c5e811d4235ce22c759d2c2fc779d0fcf84afb8147faa375836d5beb6727f2ce5aba77
SSDEEP 384:Dw7qyQepJq1mor1jTP32AZuh04R2svfi2ixbMYI4J4te4QSjdRIC+V6OhQ4WlKb0:ySd/CvnyCOrMSKifZO/7
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 47c6c37ab828ad54a7fe250b11473fc26640485ebb9d45cb2a871cd8a75dc519
MD5 8c5cc6dc22301032fa25700098b580d7
SHA1 f77c7859938444c84b0460b9bed5dc24763ac762
SHA512 b71c2f94e201b1780f0e3af7ddcd242784e94ce23888121c5c8e0548c0368518cb1d7de37fd3ef24bc4a925e1ccdbc4ecdd59e898e94def9fce2de6f698ea03b
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 4KB
SHA256 8d1c796cc198e36d77aadd6e39376f518c9ded1a4ebaee572eb92a68b3a7265d
MD5 56253176887d4ffc4207ba57836398c8
SHA1 435e5bfc3b8c3a2a7ae123d7cd1eaecffe4f94d9
SHA512 2b151652df60a78750a2cb775dd42e0f6a63c4fc90418157eb7d08be1055877b8c237c40844966a8b3548142df41f91a1504e9c728d823eaa4349e1b08741985
SSDEEP 96:qU+U9UMUXUxieUGU2UeUxUjUYUQZUHECUxUVUcUxUDKUcU0U7iUmLUXXAUPFU6Xu:qU+U9UMUXU/UGU2UeUxUjUYUWUkCUxU2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 8df0bb95e38366fdfd7a381e499765061ac6069ef6c53e21035255f2bad3b73c
MD5 d6d988db0eab93fd385021f4d9be0085
SHA1 334b8e0d5056b87ab7a9be44fb65a659311871b0
SHA512 485d6e4d0039887472ccca1e89784f4b2e45eef38d554324d246d4b5a58aaacf4735d13938d1d7a4ac155df696da626050fa3b5ba45fe840cab3069157ddbbdb
SSDEEP 192:XBYEXVMdcAHZ8PRpqSpHS+WN4A+/Q0mU3ruEkwpbED+pQyIsnA/g2:RYEXVAcXHxcuzmCJW4Z2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 5d6e7603d7bc663bcea9f2a8cac15f79a1340e98a27e2ba31bfa0ba597f6be47
MD5 68f5511de3085d3760664950d4735cb0
SHA1 85079220b458be65e3626ff9231b06b43a55e23d
SHA512 2d930ec5f3007915105d44670fada53942d023f7e7600ece487f626548abb878ff0740adbaa37c5715e72460c5e2a2d6376929d7a8ba3637013e5154e453f9b3
SSDEEP 192:XBYEXVMdcfHZ8PRpqspHS+WN4A+/Q0mU3ruEkwpbED+pQyIsnA/g2:RYEXVfcXVxcuzmCJW4Z2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 8086210dd85d826fe2beb0d6aaf4da0e8351a8620997efda45c7c7f62250c8f0
MD5 8201b2a3861b07d9c0bf3cef4b439f51
SHA1 4ad6ae1aada0cd4c73880aee6a4580e4ffce34c5
SHA512 8f2cfb7b4905e3613e13bbf8e96caf42fabfc0177afb814dd4f812cd21617753d35cb2d665385690b889ac82306c0426c7618cd5e5a570202d46503659483492
SSDEEP 192:XBYEXVMdcXHZ8PRpqopHS+WN4A+/p9sl3ruEkwpbED+pQyIsnA/g2:RYEXVXcXZxcubsPJW4Z2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 e07401655d87e045e39511d1fb59990147ba085645bda1c67d5722b4dcf6e566
MD5 f98fe3da515180ecdcfe3591ddfda4ec
SHA1 48addd0771530edb483973fcec85a3105a8c05ff
SHA512 1440c5e5d8780fba900d9fe6fab132823436531ece6e2e2030cce718e1507c24715a1b5febc24c54cff96ef7fe6d4c65cee4de1425d7e87b69364bee5d63b4f9
SSDEEP 192:XBYEXVMdcoHZ8PRpqmpHS+WN4A+/p9sl3ruEkwpbED+pfyIsnA/g2:RYEXVocXPxcubsPJW4g2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 fe0f5b7d19ae128a67be0d4961c4ee6d6c7e8fd8fd1998f1254da85d53bb25f0
MD5 9bff18b9d757421f93da784c43e2f25d
SHA1 adcc358b00d3a911a0020f4889acfc01daf0c7f6
SHA512 0fb165edd2ddb46d178e3565758d833ef9b44798266773aaffff03df405864ad99469de59eef40e5370349c69b998a4a839bd35c7d3af57d2a6a38117b0cad2c
SSDEEP 192:XBYEXVMdcgHZ8PRpqSpHS+WN4A+/o2+83ruEkwpbED+pQyIsnA/g2:RYEXVgcXjxcuh+aJW4Z2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 47e97c4ea2eead0812f4befbded271a837cd8e27f6abcfc4ed3fb6a522b36a2e
MD5 ffe82771cc58258b871ebfdb3a75f2a5
SHA1 dcf73d981b038263b32e843756148ae25597bc10
SHA512 ddce816bb716c78640c7fa5878a2e5fa211b252c4102bb4e205a7704f39c8942a6abed3e469546bb1491c0cf2320db8e174c7cd5e6b01335b7e9be6aac277c6f
SSDEEP 192:uqYErcBzVMdcf+Z8PRpXcucy1xpHS+WNpVXPM+eWzWPasK3ruEkwpbED+pfyIsnv:zYErmzVffXLxcTEoIassJW4gP1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 d6665921efa1a83d7d4b31c9b6ae3d4a605806b9179ebf151ecf0059b29bf654
MD5 15da06b0b52a79189757bc25ffc35f2a
SHA1 6b9d4a2230ad1575eb035246d74436881eb79223
SHA512 81673b6f15506e21b770e7e0198940ec48ad29e8b1f07a2546449582cdfb613ae15c72dadce5e0ac27e06fcf7f6f68cd3c9d73ca286a3347dcefe70ddcdd3c36
SSDEEP 192:XBYEXVMdcJHZ8PRpYpHS+WN4A+oU3ruEkwpbED+pQyIsnA/g2:RYEXVJcXYxcuoCJW4Z2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f7886ba39fa4b27f6c667d5a1bd68e5686dc672ff1bdc3585a05d2b1be6beb31
MD5 6860a2467c90f0e13fcbe2ab8dcafda2
SHA1 306954e1a1dbe9ffe80edbab094da9119908ea52
SHA512 4a0dfcd7a9aceea6223abd6fbf7947b17c5956224b3c97e2fe79910956bf2f784fd4a556e07c6c7f5903565dce3f7c3fabc9e1c08a577f6edd178bd65c6c05f6
SSDEEP 192:uqYErcBzVMdcw+Z8PRpXcucimpHS+WN4XPMmWoD7mD3ruEkwpbED+pfyIsnA/g2:zYErmzVwfXCxcwkAmxJW4g2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 10KB
SHA256 c75cc63da66f47725648001f5018b7c9ab325e872120ef1478b8705410878791
MD5 506b2078e55ced9f5612d9975a3d0c68
SHA1 46610c7dabaf6ce41832242b224fe294a3731bc0
SHA512 7aa9ee6e72e3f91d3ad69d3e8bd79fa0a023997a391080b92bd2d0338d960132ff6deb803b4073b110f7e762eb350761686a449569601699050dc6243f6d9ee3
SSDEEP 192:XBYEXVMdckHZ8PRpYpHS+WN4A+ot3ruEkwpbE3+pQyIsnA/g2:RYEXVkcXYxcuonJs4Z2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 846ad92e1aace17183859e4c40d7ddb80eaf851b16f8e11dda4c4b771c17c21a
MD5 b5d9e25df40329a69bb4ded6d1825bff
SHA1 74790c2800c78ce98df9daca587228d38c6ca10f
SHA512 b95edea4ac8298056d315ff663bc7fafa6c7708381f0d42f7452bae5078f646d11143b3faaea5d5306985485b046741426b78e210826cea7e9a3ecc8d1bcfc76
SSDEEP 192:XBYEXVMdcyHZ8PRpYpHS+WN4A+oU3ruEkwpbED+pQyIsnA/g2:RYEXVycXYxcuoCJW4Z2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2c6457e0cbf5ec9b621abdadc2d85ee76ec8cfcce0ddefaba480f4fc0ab45ade
MD5 c7f9aa3f6289c3ff238bb988a9fab504
SHA1 89f2588ba60e36f56c31ff36f9bcc9b28f1cdde2
SHA512 d9e93a659c4d9afe539d87f60d5190faa71e9ee812c10a339e790ab69790729278630cdabb183c08f175436c374d3a84be7385cc1fe3e986f2f08f2af881bbca
SSDEEP 192:uqYErcBzVMdcQ+Z8PRpXcucyTxpHS+WNpVXPEVqx+eWzWPasR3ruEkwpbED+pfyh:zYErmzVQfXZxcTPloIasbJW4gP1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 9078cc8e24256b4854a358bee5d9f8c35939754d47982793291a295571b0ee0a
MD5 ce5ed79520a55610ee4b91caddedfe41
SHA1 4ae535a445da86d041803d1b2aea59ae60ce5f88
SHA512 c47e8a73e72abd7f392bdd91c09d7ff014445a3057ab5c1b013ef7c768a11df1d3146617bcd319586e0d1aa791704d4600372748faf0cc26c9c7bf0830df58c1
SSDEEP 192:uqYccBzVMdcs+Z8PRpXcucyrxpHS+WNpVXPEvQn+eWzWPasqY3ruEkwpbED+pfyh:zYcmzVsfXpxcThXoIasqmJW4gP1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b22fe5031c12c4e0794b4237066feaf9eed2bfd6f4e744c41c87f55dcb421589
MD5 872d72dd00c8880748b65707820eebac
SHA1 b1c238a44b5001098ad012fddf67ff50e1caa1a0
SHA512 5482b1533f4dce6f36458b96610d31627ea8b2fbd6414448e5209e3d52cd650c7f11f694fed04fea5c0263a1b0df46ca7f8ab075288ac5d0558670700dbf1313
SSDEEP 192:uqYErcBzVMdcU+Z8PRpXcucy1mpHS+WNpVXPMmWozWPasO53ruEkwpbED+pfyIsv:zYErmzVUfXkxcTkWIasOzJW4gP1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b959150c14a1a3c8774b26f4edce0c5b98e7a82c6cf4cf70a008510b99bdd7ec
MD5 61c20a328dbc82d70cee57eb7bd21597
SHA1 bb9436ac14e8baca7ee2246ccf963cf1bb9020f4
SHA512 06c45084f8e5acd8c954e247021b03119c2dc4b4e31217a6b7e1c82421e10317dfa71754f17df59ecd0e9e68ab4bfe2f9b9f72d98371c6193b065ea94f07f1b5
SSDEEP 192:uqYErcBzVMdc3+Z8PRpXcucyTxpHS+WNpVXPEX0D+eWzWPasT3ruEkwpbED+pfyh:zYErmzV3fXZxcTfToIashJW4gP1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c1843d9969039cec92fa6134397830989ef1fd9e2906f551f9bbbee0c64fa321
MD5 7685280511ffc365aa2e9162db954a2a
SHA1 db2e413881822b34c3cb91a1ecc6818db4bdb5fb
SHA512 496c2d6bf97651bbb466a842fe23010c87eee671f745536c7e4d2b95f798f2e9dbea005d2b47e640478f60dc3dfc37158bb099b62fd6ebd05cc849f629fa57f2
SSDEEP 192:uqYErcBzVMdcB+Z8PRpXcucyTxpHS+WNpVXPE+Dv+eWzWPasi3ruEkwpbED+pfyh:zYErmzVBfXZxcTZvoIas0JW4gP1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 da8bc2b785fdb9d419b7c7ca3ca15b659732448cbbf251d31c52f16098c1866a
MD5 dc766af4dfd978f5c5d196f02396c93b
SHA1 a9ea8fd74366e5f06145003e28c3863d7b66fdd9
SHA512 5440dbd1c7fc6608d27879a4a35aa63338db4c28d4f02728e2e4d768bfb96bbc2f371a6f8f133626e3af1c67216973b527371ab5c328f81fe802015b317a8254
SSDEEP 192:uqYErcBzVMdclo+Z8PRpXcucyrxpHS+WNpVXPEvQn+eWzWPasqY3ruEkwpbED+pO:zYErmzVifXpxcThXoIasqmJW4gP1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2d5f1e5b1a2dc1bbee6b88e4358fa590259f4ae97182a3e1a16f9092f59fbe73
MD5 aa6a919dcf34b0ba04b9229b89858554
SHA1 56607d7190fbccaf743afb140937428d93d898ee
SHA512 aa6f77ed6ec7990df9ea43378346ec27dd4cd6c3c38e8ce0d05521ac62250d9047903e6d9b52821fef093da2e6156224e76dba09425fe001c50c8c46d8c8fce9
SSDEEP 192:uqYErcBzVMdcB+Z8PRpXcucyTxpHS+WNpVXPEh+cW+eWzWPasV3ruEkwpbED+pfG:zYErmzVBfXZxcTPHoIasfJW4gP1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b5b03fe37c5b0b7789cbb56a6ab894b22a1e296f8860a2b1909523c946049556
MD5 d89f34388929b8ec168aa34a8e27637a
SHA1 8426e8069a45bd0ca725b2becc6a0d4555c9ccc9
SHA512 5cb550ec8190b9ec06c8c7c30e4f17d5ad6dd71f0e9d317ea92da6cb8a99e2e3a42e2978e27b3926fc789f6652318d574815cda2cb7aae0866ddd91c5bc0d044
SSDEEP 192:uqYErcBzVMdce+Z8PRpXcucyrxpHS+WNpVXPEvQn+eWzWPasqY3ruEkwpbED+pfG:zYErmzVefXpxcThXoIasqmJW4gP1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2197a0c63a1a411bccc8b04a4bbcd080adc05eca9b89d045e2c95ceafb29c3bf
MD5 1d059feb94b922d08894df9f3a9a8dd3
SHA1 4059e2e7dc88a310248228a96bc375594fe9a014
SHA512 c62b5e5eb3514a8d98c1aa35d73fe2b201d72172184421d25e993754227f02bb074279d151f0f0fb9f8bbbf16915820b976bd6649d817b93a30abf1ab1d9f440
SSDEEP 192:uqYErcBzVMdcm+Z8PRpXcucyTxpHS+WNpVXPExWZ+eWzWPasd3ruEkwpbED+pfyh:zYErmzVmfXZxcTp9oIas3JW4gP1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 10KB
SHA256 c4eb8f7bdc3394e81d43d85b0b5af869f162d933663c58fbf1be2d09200f56f7
MD5 38bb515bbe9533c72d93be32a203f6dd
SHA1 4a1c62cd5c3008d1af3954472470a16c5d1c3e41
SHA512 9ebc9046d9d5beff2c619af403f027e83f7edb5b686c1531d1d8a1453dc09b5f7b1e6e94dc9d5e9d0bd71d0031f6fe71e33524f2e54f6f226150a9872ef20ac2
SSDEEP 192:XBYEXVMdc6HZ8PRpYpHS+WN4A+oL3ruEkwpbE0+pQyIsnA/g4:RYEXV6cXYxcuoJJz4Z4
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 2a10cb3c53a33a8218ac22931b917be9d2ac1c545456a0a01dbb474112af6df1
MD5 f78fe31913b8baed8c19eb4701d4fa8f
SHA1 01b37af44b33d4f6d77352c57425bda079869c11
SHA512 df71c787f5c52e681c91357b90117211c86722d25b7847061832e4df017734555ac7ebddce7b7bae04adcc96948ce14c5424ab14e884d550dad9358ac4e3237c
SSDEEP 192:XBYEXVMdc0HZ8PRpYpHS+WN4A+oU3ruEkwpbED+pQyIsnA/g2:RYEXV0cXYxcuoCJW4Z2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 487c39f02c7a1e67dd5f65c0ca32fde75214afa3f099d5909ebd623bb0d3c019
MD5 2a6d164660e680e6b2355b1658518d90
SHA1 7e0eabe8113a83866a940081bbc3ada06157614e
SHA512 577c9c7427b0d51eb73b609b777dcf05fbdbf55bf75c78ca2dca47c7992948eafe1650d7c4c324ea7205afed254f944db460e0b59a27bcd8747fbf2fa229299f
SSDEEP 192:uqYEccBzVMdcs+Z8PRpXcucyrxpHS+WNpVXPEvQn+eWzWPasqY3ruEkwpbED+pfG:zYEcmzVsfXpxcThXoIasqmJW4gP1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 18KB
SHA256 a0d9407514a431c2cdbd35aba49f091ee5f8c8ddf1346d5d650971ac43148ef8
MD5 09625c6e110f1d006d67e88feb02f15a
SHA1 8db7c2887ec1d0ab78250a2b69e1dbdebfba905f
SHA512 4419385f523dd6987099438786e0f729489b7f2cadd84e83933716673d19c5bd985173b4b73fafbce0d6f1971b8b59b279f28617a7e4a9e6eb56bc45c5f4d40b
SSDEEP 384:Cueq7pLuLcBU7pLuLcei6nXUhPkXqKf/pUZNCgVLH2Hf12vrUaxHGKxCOCYZT:CBq7pLuLuU7pLuL7rXUhPkXqKf/pUZNz
MD5 SHA1 SHA512 SSDEEP

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 15KB
SHA256 f623623a70aa655e8565eb9dcfd0c6a4100d2932297de3d895d00cfc8dae8ae2
MD5 3a78732d1561d3e9f36103216a68e12f
SHA1 952fa2777d517b495d2d656d55628e9e2745c09e
SHA512 e85ce37fde43a8dbbd17ef0ba86622cdc955db54b773adabb74b17ce293dd35f2e6896ab75049ae7c398ba032beb6340baf76359a5a14a2e88a38fa1bb0584b4
SSDEEP 384:CuHr7pLuLco96nXUhPkXqKf/pUZNCgVLH2Hf12vrUaxHGKgCOCYZU:CIr7pLuLhEXUhPkXqKf/pUZNCgVLH2Hw
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 f16369bea33bc9bd1640acb693d6de51e5029cfc7b30bc9d08a551dadb1bd14b
MD5 8bf0ffe662a784b7be19011872c591f5
SHA1 2ca759ea089977f4d922ff99fd9d201e2df3483e
SHA512 1a5704d36499cdba41005befe9fe90f594789e1f8a16f6f464e44c9f6400132afb3611a162d9c98e32a9237ae0c484e25cc21ad9c90789dd548b8058e309bb57
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 d692b1b8365fd6b30535630cfc0ef99d6be275a014129502f979d444e35a0bca
MD5 989b304fcd5a70538aeac2efa8f0e57b
SHA1 730c526d5e4e83b8427f256308ff3a6d43105c09
SHA512 871f05e1580b55f05a829078d9af1da2b06e26faf75dc1d2f14fad4d67393f818618dc57f094bcb076491714e93b6d957f711d1168be6f3934213fab8b62dfdc
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe580b94.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe580b94.TMP
Size 48B
SHA256 a84e280efa700668193d90dac8f7a824ee6c5051bf181b1308f09e8ea9173cfa
MD5 700881dc9da6bab38ad8445b70e9e3ad
SHA1 aefdc47a89e228fbc3afe7fafff723d7c8fbfefb
SHA512 2a11e9e0d942fd7cc54a72203d6eeef663da880fbf672962aae2b55331889fb0cc2996ac46045336317f063d2e43eb2cd390fc29d7c44011801a59b7c1d2f3f6
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 defdd1faa734d3c4e4ddc427d5ef260987876e43f37a9b621b7200cfe1c53493
MD5 8be75b170b5a11f4a018588b2851ff6c
SHA1 4c1c2312a0fe7d9842836fa180e46c5182d152f3
SHA512 e61d72ebd94fe2e766e2df84b2f2a3d07c432b21273de1b0d6dbffe3d6b304e8430ae1b6f4ffe574718c41a56a96d670952e8c56c3c2aebf15397cb6fbf71109
MD5 SHA1 SHA512

Submit Download

cd478815-321d-4041-8c53-060f2cd63d4e.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\cd478815-321d-4041-8c53-060f2cd63d4e.tmp
Size 11KB
SHA256 aa3bd402aebfc590bf13751b29f42e7a42b976e98c14167dcad54c06d8fa8767
MD5 ba303e9577e314cbf3548d9bf68dfc79
SHA1 4ebbe30d95acc852e56b05efa400076edfe449f8
SHA512 89bb0405c7549d6a688260543baf7b343945fb564d6e88b0251dbf073cae03820783768c48425d08c3b6fd40be15bfee4d983ad878788a3e7f30ed03cf0e56d0
SSDEEP 192:uqYEXVMdck+Z8PRpX7hmpHS+WN4XPMmWo+u+G3ruEkwpbED+pfyIsnA/g2:zYEXVkfXQxcwkI+oJW4g2
MD5 SHA1 SHA512 SSDEEP

Submit Download

f4af64d1-fc22-412b-9812-d2dba4247464.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f4af64d1-fc22-412b-9812-d2dba4247464.tmp
Size 11KB
SHA256 602f4bf6f9f367c9d3af68b9258ae9b5f1f51f852e0919394cbd879cdbee22ee
MD5 6ff84fa6181abf58c8820e20e999815b
SHA1 5452ee81b466b5f748363ce6816d1b2fe5dcf7d7
SHA512 4fdd4bc1ebe719d72b9fd3f19130da4a47c919fca23f505c2a2ffa961ca2d5cd13a1abb26033acf7cb5440bc64f6841047c155bebbca6e7dfbc2a47be892588c
SSDEEP 192:XBYEXVMdcdHZ8PRpYpHS+WN4A+oU3ruEkwpbED+pQyIsnA/g2:RYEXVdcXYxcuoCJW4Z2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 181KB
SHA256 e50501bb1fa3f07b97cd9ff34c039b15f2b0ba688c4241d9e87c423028dddcec
MD5 3c1de4e100050fa77bb764fced649ac0
SHA1 ab77bc9d42ebe7a2fa0a3522a71a7462a8589f39
SHA512 48b4b2686f1d224883f5a6aac902e3adea3ad48a9a98b84655ba813549e22a1074723e74619f60f4c021437799e3036469d4eb5d9bc583b1a58e6a920003c458
SSDEEP 3072:vxMOTptv4/KAGFAMfIaw0NacT0O/i9s/XjM4rTmN5eWvStRNoV8cWK7XF+TwMd:vxMO9tAjaAMfIRcgxMJrTnGfzF+TwMd
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 180KB
SHA256 7e08d7758d31b91d1856dafd40c7d3482b9ef3d51dfd1febeb77ecd07636541a
MD5 e5aa8b43f4738923317ef69a33e88d40
SHA1 e33cc8e1a6cb4f26b5a16341e74217dc86d2c460
SHA512 52db9359a814e059aa37b699e7f5d05c1880796cbf3f776c5e0ffeb6dc65c953dab72a01bcd6521bc10ee999b19f2c795181bfe0f0386718f41946a7df76b87a
SSDEEP 3072:SMOTptv4/KAGFAMfIaw0NacT0O/i9s/XjM4rTmN5eWvStRNoV8cWK7XF+TwMd:SMO9tAjaAMfIRcgxMJrTnGfzF+TwMd
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 180KB
SHA256 5c74ccd55a2b0a784ea4af252f5b93ea2d293eee6917a8d9de558b309e9725bc
MD5 3cfd459c67b75b20c413c3273f416342
SHA1 2f54dafaf22777a3d400d0437c788903da40dd22
SHA512 fa82007bccbe84dde985e77154b547af87ba46570c3fa0f4628f92f3c67b904db1e569751742a9db7537d794f585ca1ae0158ad06de88b9e597ceed3926319b2
SSDEEP 3072:7MOTptv4/KAGFAMfIaw0NacT0O/i9s/XjM4rTmN5eWvStRNoV8cWK7XF+TwMd:7MO9tAjaAMfIRcgxMJrTnGfzF+TwMd
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 83KB
SHA256 1e40e305e5db77440669e55ed44a411004d3cce6e63bf03265b373d29c4bb2fa
MD5 214bc842ab1c0c2978ac8000a2a4e41f
SHA1 cf742b0881c6a3f8fbfee9992668dea4c21db7d0
SHA512 90ba841c6bc7edf5c088ee1240fd5c0c745e185422962cd0487d3f90151019d0ae2b55513fbb0d25f291367ee2d7ec1e991c21bc345ea0c2b5c1e44584850b54
SSDEEP 1536:hoXj8V43bjn6ldz5eU1vkHzZYiVNoV8cWKNR+K7i9U39SK17W5HvTwMgJ:yXjM4rTmN5eWvStRNoV8cWK7XF+TwMi
MD5 SHA1 SHA512 SSDEEP

Submit Download

powershell.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log
Size 2KB
SHA256 85b280a39fc31ba1e15fb06102a05b8405ff3b82feb181d4170f04e466dd647c
MD5 627073ee3ca9676911bee35548eff2b8
SHA1 4c4b68c65e2cab9864b51167d710aa29ebdcff2e
SHA512 3c5f6c03e253b83c57e8d6f0334187dbdcdf4fa549eecd36cbc1322dca6d3ca891dc6a019c49ec2eafb88f82d0434299c31e4dfaab123acb42e0546218f311fb
MD5 SHA1 SHA512

Submit Download