ceb779f1e2e8baf4b9496510c6a69561992b042f8f2c536c6cbd747b7b1f919e

Analysis

user interaction
yes
max time kernel
1799s
max time network
1799s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/04/2026, 17:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
91r4dB5tOxL._AC_SX466_.jpg
Size 77KB
Sample260424-vrt18sfx7p
SHA256 ceb779f1e2e8baf4b9496510c6a69561992b042f8f2c536c6cbd747b7b1f919e
MD5 900b8396dcf212cd63f2344e3946dd8f
SHA1 d9f4d7c6f2b2b47cfba48cc8356b34ab535d0d7f
SHA512 5ac3caba845f6f6e429ad7cce92826b28a2b24e2d0522ed346de679a29a1833eee71ce1a40cb874d26a6738d212b81cef7c763e18e02da9e511bf066fa835145
SSDEEP 1536:vc5/yMhPTLt6OcCg7xRuIESPSyMpB+o57yTBYMCmW8c3:vcZyMhl6OcxxRuwjMpB/U9da3
TLSH
T1637312B61BB08164097C4562C9306394B7C19C9937AEE68BE628DE4E451F8DEBCDC13E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery motw phishing trojan

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
138	5064	chrome.exe

Checks computer location settings 2 TTPs 12 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000\Control Panel\International\Geo\Nation	firefox.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000\Control Panel\International\Geo\Nation	firefox.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000\Control Panel\International\Geo\Nation	firefox.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000\Control Panel\International\Geo\Nation	firefox.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000\Control Panel\International\Geo\Nation	firefox.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000\Control Panel\International\Geo\Nation	firefox.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000\Control Panel\International\Geo\Nation	tor-browser-windows-x86_64-portable-15.0.10.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000\Control Panel\International\Geo\Nation	firefox.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000\Control Panel\International\Geo\Nation	firefox.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000\Control Panel\International\Geo\Nation	firefox.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000\Control Panel\International\Geo\Nation	firefox.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000\Control Panel\International\Geo\Nation	firefox.exe

Executes dropped EXE 45 IoCs

pid	Process
2364	tor-browser-windows-x86_64-portable-15.0.10.exe
7924	firefox.exe
7648	firefox.exe
2312	firefox.exe
620	firefox.exe
7832	firefox.exe
8000	tor.exe
4028	firefox.exe
7444	firefox.exe
8992	firefox.exe
1160	firefox.exe
3556	firefox.exe
9176	firefox.exe
10052	firefox.exe
9540	firefox.exe
6828	firefox.exe
4836	firefox.exe
7452	firefox.exe
10188	firefox.exe
10068	firefox.exe
8268	firefox.exe
9108	firefox.exe
8428	firefox.exe
8948	firefox.exe
3356	firefox.exe
8740	firefox.exe
8188	firefox.exe
7352	firefox.exe
5020	firefox.exe
8420	firefox.exe
4724	firefox.exe
9768	firefox.exe
4964	firefox.exe
9924	firefox.exe
4044	firefox.exe
1940	firefox.exe
7976	firefox.exe
6140	firefox.exe
9316	firefox.exe
9352	firefox.exe
8452	firefox.exe
5152	firefox.exe
10020	firefox.exe
696	firefox.exe
1360	firefox.exe

Loads dropped DLL 64 IoCs

pid	Process
2364	tor-browser-windows-x86_64-portable-15.0.10.exe
2364	tor-browser-windows-x86_64-portable-15.0.10.exe
2364	tor-browser-windows-x86_64-portable-15.0.10.exe
7924	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
2312	firefox.exe
2312	firefox.exe
2312	firefox.exe
2312	firefox.exe
2312	firefox.exe
620	firefox.exe
620	firefox.exe
620	firefox.exe
620	firefox.exe
620	firefox.exe
7832	firefox.exe
7832	firefox.exe
7832	firefox.exe
7832	firefox.exe
7832	firefox.exe
7832	firefox.exe
7832	firefox.exe
4028	firefox.exe
4028	firefox.exe
4028	firefox.exe
4028	firefox.exe
4028	firefox.exe
7444	firefox.exe
7444	firefox.exe
7444	firefox.exe
7444	firefox.exe
7444	firefox.exe
620	firefox.exe
620	firefox.exe
4028	firefox.exe
4028	firefox.exe
7444	firefox.exe
7444	firefox.exe
8992	firefox.exe
8992	firefox.exe
8992	firefox.exe
8992	firefox.exe
8992	firefox.exe
1160	firefox.exe
1160	firefox.exe
1160	firefox.exe
1160	firefox.exe
1160	firefox.exe
3556	firefox.exe
3556	firefox.exe
3556	firefox.exe
3556	firefox.exe
3556	firefox.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	firefox.exe

Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs

phishing motw

flow	ioc	pid	Process
490	https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html	5064	chrome.exe

Checks system information in the registry 2 TTPs 1 IoCs

System information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	firefox.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5064	chrome.exe
5764	msedge.exe

Checks processor information in registry 2 TTPs 64 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Current Record Version	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134215244651493072"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	tor-browser-windows-x86_64-portable-15.0.10.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4640	mspaint.exe
4640	mspaint.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
8744	chrome.exe
8744	chrome.exe

Suspicious behavior: LoadsDriver 10 IoCs

pid	Process
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
656	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
5816	msedge.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe
Token: SeShutdownPrivilege	2940	chrome.exe
Token: SeCreatePagefilePrivilege	2940	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe

Suspicious use of SendNotifyMessage 40 IoCs

pid	Process
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
2940	chrome.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe

Suspicious use of SetWindowsHookEx 64 IoCs

pid	Process
4640	mspaint.exe
4640	mspaint.exe
4640	mspaint.exe
4640	mspaint.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe
7648	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2940 wrote to memory of 4152	2940	chrome.exe	92
PID 2940 wrote to memory of 5064	2940	chrome.exe	94
PID 2940 wrote to memory of 1732	2940	chrome.exe	95
PID 2940 wrote to memory of 1732	2940	chrome.exe	95
PID 2940 wrote to memory of 680	2940	chrome.exe	96
PID 2940 wrote to memory of 680	2940	chrome.exe	96
PID 2940 wrote to memory of 4136	2940	chrome.exe	97
PID 2940 wrote to memory of 2944	2940	chrome.exe	98
PID 2940 wrote to memory of 4136	2940	chrome.exe	97
PID 2940 wrote to memory of 2944	2940	chrome.exe	98
PID 2940 wrote to memory of 3740	2940	chrome.exe	99
PID 2940 wrote to memory of 3740	2940	chrome.exe	99
PID 2940 wrote to memory of 1348	2940	chrome.exe	100
PID 2940 wrote to memory of 1348	2940	chrome.exe	100
PID 2940 wrote to memory of 3052	2940	chrome.exe	101
PID 2940 wrote to memory of 2408	2940	chrome.exe	104
PID 2940 wrote to memory of 2408	2940	chrome.exe	104
PID 2940 wrote to memory of 2544	2940	chrome.exe	105
PID 2940 wrote to memory of 2544	2940	chrome.exe	105
PID 2940 wrote to memory of 4828	2940	chrome.exe	132
PID 2940 wrote to memory of 2376	2940	chrome.exe	133
PID 2940 wrote to memory of 2364	2940	chrome.exe	134
PID 5800 wrote to memory of 5816	5800	msedge.exe	137
PID 5816 wrote to memory of 5768	5816	msedge.exe	138
PID 5816 wrote to memory of 5764	5816	msedge.exe	139
PID 5816 wrote to memory of 5832	5816	msedge.exe	140
PID 5816 wrote to memory of 5832	5816	msedge.exe	140
PID 5816 wrote to memory of 5832	5816	msedge.exe	140
PID 5816 wrote to memory of 3392	5816	msedge.exe	141
PID 5816 wrote to memory of 3392	5816	msedge.exe	141
PID 5816 wrote to memory of 2484	5816	msedge.exe	142
PID 5816 wrote to memory of 2484	5816	msedge.exe	142
PID 5816 wrote to memory of 2484	5816	msedge.exe	142
PID 2940 wrote to memory of 6740	2940	chrome.exe	148
PID 2940 wrote to memory of 6740	2940	chrome.exe	148
PID 2940 wrote to memory of 6776	2940	chrome.exe	149
PID 2940 wrote to memory of 6776	2940	chrome.exe	149
PID 2940 wrote to memory of 6912	2940	chrome.exe	150
PID 2940 wrote to memory of 6912	2940	chrome.exe	150
PID 2940 wrote to memory of 5780	2940	chrome.exe	151
PID 2940 wrote to memory of 5780	2940	chrome.exe	151
PID 2940 wrote to memory of 3040	2940	chrome.exe	152
PID 2940 wrote to memory of 6424	2940	chrome.exe	153
PID 2940 wrote to memory of 6424	2940	chrome.exe	153
PID 2940 wrote to memory of 2504	2940	chrome.exe	154
PID 2940 wrote to memory of 2504	2940	chrome.exe	154
PID 2940 wrote to memory of 6752	2940	chrome.exe	155
PID 2940 wrote to memory of 6752	2940	chrome.exe	155
PID 2940 wrote to memory of 7036	2940	chrome.exe	156
PID 2940 wrote to memory of 7036	2940	chrome.exe	156
PID 2940 wrote to memory of 7044	2940	chrome.exe	157
PID 2940 wrote to memory of 7044	2940	chrome.exe	157
PID 2940 wrote to memory of 7060	2940	chrome.exe	158
PID 2940 wrote to memory of 7060	2940	chrome.exe	158
PID 2940 wrote to memory of 7140	2940	chrome.exe	159
PID 2940 wrote to memory of 7140	2940	chrome.exe	159
PID 2940 wrote to memory of 7148	2940	chrome.exe	160
PID 2940 wrote to memory of 7148	2940	chrome.exe	160
PID 2940 wrote to memory of 7156	2940	chrome.exe	161
PID 2940 wrote to memory of 7156	2940	chrome.exe	161
PID 2940 wrote to memory of 5460	2940	chrome.exe	162
PID 2940 wrote to memory of 5460	2940	chrome.exe	162
PID 2940 wrote to memory of 3528	2940	chrome.exe	163
PID 2940 wrote to memory of 3528	2940	chrome.exe	163

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\91r4dB5tOxL._AC_SX466_.jpg"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4640

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:4620

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fffe9b1c728,0x7fffe9b1c734,0x7fffe9b1c740
  2⤵
  PID:4152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,12078304777728085287,18063559439650053787,524288 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - Mark of the Web detected: This indicates that the page was originally saved or cloned.
  - System Time Discovery
  PID:5064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,15946649996204169989,8405142508571570968,262144 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:1732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2464,i,4943245939968447648,3568579874240200196,524288 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2484 /prefetch:8
  2⤵
  PID:680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3332,i,4367329723051790663,15717017400062299075,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2572,i,14032794532923566043,7581626808615589289,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2800 /prefetch:1
  2⤵
  PID:2944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4088,i,15985713695624989914,15121119919107799811,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4064 /prefetch:2
  2⤵
  PID:3740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4732,i,668854366695838119,2488019601644873536,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:1348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5548,i,4698534797999759185,9503609207590888898,524288 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5556 /prefetch:8
  2⤵
  PID:3052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5788,i,13018595869121740357,1766330489329989705,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3512,i,6508736088526643608,5579225244787352671,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3424,i,9669691904202061747,8423226821789018871,524288 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3408 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3420,i,428749830893300061,6589288855912756766,524288 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3456 /prefetch:8
  2⤵
  PID:2376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3432,i,17410931451624887678,9780411148391270406,524288 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  PID:2364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=1800,i,10662416768119602943,15523795863251586624,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:6740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6264,i,2103963137111369452,1518071630078567319,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6272 /prefetch:1
  2⤵
  PID:6776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6408,i,11622500128102318599,15818428182229722267,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:6912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6704,i,9823965717431976467,11414603016301250431,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6228 /prefetch:1
  2⤵
  PID:5780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4888,i,11665572651531556567,2033913097560350874,524288 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6816 /prefetch:8
  2⤵
  PID:3040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6816,i,16154166867874054469,5933316781293715091,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6844 /prefetch:1
  2⤵
  PID:6424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6708,i,4729598883232014384,4823618130177879819,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6796 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6648,i,12435058566784030066,7213138641239101266,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6980 /prefetch:1
  2⤵
  PID:6752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7108,i,5947029873728255684,11422641153002688161,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7100 /prefetch:1
  2⤵
  PID:7036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6908,i,17644200172513939020,13116248743330092260,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:7044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6668,i,8520280366524326976,7437197296808150087,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2924 /prefetch:1
  2⤵
  PID:7060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=3484,i,4729737574864238763,15925474650076651106,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=240 /prefetch:1
  2⤵
  PID:7140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7212,i,11854755556306431037,7541800629311642790,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7216 /prefetch:1
  2⤵
  PID:7148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7380,i,15376993630011363112,9776434672549637157,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7348 /prefetch:1
  2⤵
  PID:7156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7516,i,10221128948183233732,4158940357029077686,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7512 /prefetch:1
  2⤵
  PID:5460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7668,i,216104909169156993,12616386243266449282,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7684 /prefetch:1
  2⤵
  PID:3528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7880,i,3274330949811086960,7799919534794687910,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7924 /prefetch:1
  2⤵
  PID:5824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=8056,i,604792783477809356,5104625999024060510,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8060 /prefetch:1
  2⤵
  PID:636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=8212,i,5273777249540011710,13752980727043023973,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8200 /prefetch:1
  2⤵
  PID:5264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=8344,i,17715296942836440029,13566653334915022758,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8368 /prefetch:1
  2⤵
  PID:5208
- C:\Users\Admin\Downloads\tor-browser-windows-x86_64-portable-15.0.10.exe
  "C:\Users\Admin\Downloads\tor-browser-windows-x86_64-portable-15.0.10.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Modifies registry class
  PID:2364
- - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
    "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:7924
  - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
      "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe"
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      Checks whether UAC is enabled
      Checks system information in the registry
      Checks processor information in registry
      Suspicious use of SendNotifyMessage
      Suspicious use of SetWindowsHookEx
      PID:7648
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -parentBuildID 20260420133000 -prefsHandle 2604:26451 -prefMapHandle 2608:276293 -ipcHandle 2664 -initialChannelId {0227c9ea-12b0-4542-a499-d8f38045603c} -parentPid 7648 -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 1 gpu
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:2312
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 1908:27031 -prefMapHandle 1996:276293 -jsInitHandle 1920:242716 -parentBuildID 20260420133000 -ipcHandle 1916 -initialChannelId {271ca392-2cda-4645-bbf9-c48e6f4cb34c} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 2 tab
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Checks processor information in registry
        
        PID:620
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -parentBuildID 20260420133000 -prefsHandle 1796:27718 -prefMapHandle 1840:276293 -ipcHandle 2224 -initialChannelId {0d958c0e-2fbc-4427-bb3c-a059f3c53a24} -parentPid 7648 -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 3 rdd
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:7832
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Tor\tor.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Tor\tor.exe" -f "C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc" DataDirectory "C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor" ClientOnionAuthDir "C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\onion-auth" --defaults-torrc "C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc-defaults" GeoIPFile "C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip" GeoIPv6File "C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6" +__ControlPort 127.0.0.1:9151 HashedControlPassword 16:9f5832379a77906160b4680a6d04969356c08d1361529e186ac9b54ab5 +__SocksPort "127.0.0.1:9150 ExtendedErrors IPv6Traffic PreferIPv6 KeepAliveIsolateSOCKSAuth" __OwningControllerProcess 7648 DisableNetwork 1
        5⤵
        Executes dropped EXE
        
        PID:8000
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 3368:27780 -prefMapHandle 3372:276293 -jsInitHandle 3376:242716 -parentBuildID 20260420133000 -ipcHandle 3384 -initialChannelId {a68afc39-688a-403c-adb5-648f887ae7ad} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 4 tab
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Checks processor information in registry
        
        PID:4028
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 3384:27893 -prefMapHandle 1952:276293 -jsInitHandle 3360:242716 -parentBuildID 20260420133000 -ipcHandle 3376 -initialChannelId {bad87aa6-fdbe-4a36-9ff5-e5e1fefec002} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 5 tab
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Checks processor information in registry
        
        PID:7444
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 3644:27614 -prefMapHandle 3648:276293 -jsInitHandle 2228:242716 -parentBuildID 20260420133000 -ipcHandle 2936 -initialChannelId {df22b370-96bc-471c-8806-c18ff9b65132} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 6 tab
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Checks processor information in registry
        
        PID:8992
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 1940:27614 -prefMapHandle 3004:276293 -jsInitHandle 3248:242716 -parentBuildID 20260420133000 -ipcHandle 1832 -initialChannelId {64d89913-b5f7-406f-a53a-55d57fc347f0} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 7 tab
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Checks processor information in registry
        
        PID:1160
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 2172:27614 -prefMapHandle 2176:276293 -jsInitHandle 2040:242716 -parentBuildID 20260420133000 -ipcHandle 2144 -initialChannelId {12a195b2-2353-47ae-a1a4-7d925797310f} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 8 tab
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Checks processor information in registry
        
        PID:3556
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -parentBuildID 20260420133000 -sandboxingKind 0 -prefsHandle 4256:29871 -prefMapHandle 4260:276293 -ipcHandle 4404 -initialChannelId {859f73b2-3c96-4ca2-a3e3-edc291533df9} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 9 utility
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:9176
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 4620:28919 -prefMapHandle 4624:276293 -jsInitHandle 4628:242716 -parentBuildID 20260420133000 -ipcHandle 4636 -initialChannelId {e58f5bed-d74f-40cf-bb45-ee967689e326} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 10 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:10052
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 4776:29089 -prefMapHandle 4696:276293 -jsInitHandle 4396:242716 -parentBuildID 20260420133000 -ipcHandle 4420 -initialChannelId {fbbd98e0-b07c-48fd-a03e-fbec37fab8f6} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 11 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:9540
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 5188:30764 -prefMapHandle 5288:276293 -jsInitHandle 3660:242716 -parentBuildID 20260420133000 -ipcHandle 5376 -initialChannelId {6e8acc4d-f569-44a1-9da2-d84d3342dba8} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 12 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:6828
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 5172:29535 -prefMapHandle 1364:276293 -jsInitHandle 1360:242716 -parentBuildID 20260420133000 -ipcHandle 3592 -initialChannelId {36f8bc4b-c873-416f-8158-9599bedb2cb0} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 13 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:4836
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 5868:29535 -prefMapHandle 5864:276293 -jsInitHandle 5860:242716 -parentBuildID 20260420133000 -ipcHandle 5892 -initialChannelId {ee89cafb-f983-405b-9adf-e4154aaa7f5c} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 14 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:7452
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 5924:29535 -prefMapHandle 5928:276293 -jsInitHandle 5932:242716 -parentBuildID 20260420133000 -ipcHandle 1800 -initialChannelId {b56f90be-53e4-4c4b-96ca-391b0e435e13} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 15 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:10188
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 6116:29535 -prefMapHandle 6120:276293 -jsInitHandle 6124:242716 -parentBuildID 20260420133000 -ipcHandle 6132 -initialChannelId {d9942873-db11-4139-a14c-609c848c434a} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 16 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:10068
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 6316:29583 -prefMapHandle 6196:276293 -jsInitHandle 5224:242716 -parentBuildID 20260420133000 -ipcHandle 6260 -initialChannelId {a50b91c5-ea88-49d5-a972-95b5fc724a4f} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 17 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:8268
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 3440:29583 -prefMapHandle 6176:276293 -jsInitHandle 5716:242716 -parentBuildID 20260420133000 -ipcHandle 5184 -initialChannelId {661f389d-eedd-4f2c-8ddc-b06117558f4a} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 18 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:9108
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 4052:29583 -prefMapHandle 1900:276293 -jsInitHandle 4724:242716 -parentBuildID 20260420133000 -ipcHandle 1964 -initialChannelId {01914a30-35c2-4c12-8eca-0c74207c2d84} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 19 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:8428
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 1532:29583 -prefMapHandle 2160:276293 -jsInitHandle 6360:242716 -parentBuildID 20260420133000 -ipcHandle 5400 -initialChannelId {3a498598-ed5a-4935-bd51-34cb04af0ee5} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 20 tab
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Checks processor information in registry
        
        PID:8948
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 6076:29583 -prefMapHandle 6096:276293 -jsInitHandle 6084:242716 -parentBuildID 20260420133000 -ipcHandle 6124 -initialChannelId {f8aec09d-4eba-4fda-b97b-d57f207cb28e} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 21 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:3356
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 6036:29583 -prefMapHandle 5820:276293 -jsInitHandle 5492:242716 -parentBuildID 20260420133000 -ipcHandle 5180 -initialChannelId {ad7bacd1-1b61-4b93-89c4-e7ee424ddb8d} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 22 tab
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Checks processor information in registry
        
        PID:8740
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 4332:29583 -prefMapHandle 4360:276293 -jsInitHandle 3484:242716 -parentBuildID 20260420133000 -ipcHandle 4336 -initialChannelId {35dd87df-06fe-4f72-ac33-519d99de4d64} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 23 tab
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Checks processor information in registry
        
        PID:8188
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 5760:29583 -prefMapHandle 1936:276293 -jsInitHandle 3684:242716 -parentBuildID 20260420133000 -ipcHandle 4332 -initialChannelId {4db1dcb7-779e-43b3-9464-861e0ba54c85} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 24 tab
        5⤵
        Executes dropped EXE
        
        PID:7352
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 5776:29583 -prefMapHandle 4936:276293 -jsInitHandle 3568:242716 -parentBuildID 20260420133000 -ipcHandle 4972 -initialChannelId {dc36ac4e-8663-4056-867e-f2ef9da557b1} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 25 tab
        5⤵
        Executes dropped EXE
        
        PID:5020
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 1484:29583 -prefMapHandle 5188:276293 -jsInitHandle 4028:242716 -parentBuildID 20260420133000 -ipcHandle 6032 -initialChannelId {8fa86a5e-2031-4eac-a497-1263da9fbeae} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 26 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:8420
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 6440:29583 -prefMapHandle 6444:276293 -jsInitHandle 6448:242716 -parentBuildID 20260420133000 -ipcHandle 6456 -initialChannelId {9dfa0819-228a-486a-a2b4-2fc86b537271} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 27 tab
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Checks processor information in registry
        
        PID:4724
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 6740:29583 -prefMapHandle 6744:276293 -jsInitHandle 6748:242716 -parentBuildID 20260420133000 -ipcHandle 6724 -initialChannelId {04ab5a2f-60a4-42ff-9dd2-7b4d169b28d9} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 28 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:9768
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 5776:29583 -prefMapHandle 6320:276293 -jsInitHandle 6756:242716 -parentBuildID 20260420133000 -ipcHandle 5044 -initialChannelId {21aecf16-e277-4565-ab6b-9413a137a4f7} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 29 tab
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Checks processor information in registry
        
        PID:4964
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 6648:29583 -prefMapHandle 6032:276293 -jsInitHandle 4920:242716 -parentBuildID 20260420133000 -ipcHandle 6716 -initialChannelId {ccab59a1-d6c0-4b9f-81c3-53c1da2f265d} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 30 tab
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Checks processor information in registry
        
        PID:9924
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 6392:29583 -prefMapHandle 6460:276293 -jsInitHandle 5244:242716 -parentBuildID 20260420133000 -ipcHandle 6528 -initialChannelId {34984724-93c9-481e-afc7-0ba95aa1691c} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 31 tab
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Checks processor information in registry
        
        PID:4044
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 3460:29583 -prefMapHandle 6668:276293 -jsInitHandle 5032:242716 -parentBuildID 20260420133000 -ipcHandle 6452 -initialChannelId {fddd9b13-8263-4c2d-9337-b5d7706edf18} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 32 tab
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Checks processor information in registry
        
        PID:1940
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 3460:29583 -prefMapHandle 6668:276293 -jsInitHandle 5032:242716 -parentBuildID 20260420133000 -ipcHandle 6672 -initialChannelId {c8085d0b-f57b-4c73-9f66-1fe9135113e0} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 33 tab
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Checks processor information in registry
        
        PID:7976
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 6592:29583 -prefMapHandle 6252:276293 -jsInitHandle 3620:242716 -parentBuildID 20260420133000 -ipcHandle 5440 -initialChannelId {1df486f0-937f-4905-bf46-f8b0df5fcad7} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 34 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:6140
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 6356:29583 -prefMapHandle 3472:276293 -jsInitHandle 5868:242716 -parentBuildID 20260420133000 -ipcHandle 6668 -initialChannelId {c16739fb-568c-41e8-a205-1252038e6c66} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 35 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:9316
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 3948:29583 -prefMapHandle 1968:276293 -jsInitHandle 6284:242716 -parentBuildID 20260420133000 -ipcHandle 6316 -initialChannelId {06fc0335-c196-4c6f-b401-3c5743972668} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 36 tab
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Checks processor information in registry
        
        PID:9352
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 7140:29583 -prefMapHandle 1820:276293 -jsInitHandle 7080:242716 -parentBuildID 20260420133000 -ipcHandle 5880 -initialChannelId {60a16cfc-9e7d-4705-84ca-4991ec291a16} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 37 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:8452
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 4276:29583 -prefMapHandle 6316:276293 -jsInitHandle 6448:242716 -parentBuildID 20260420133000 -ipcHandle 7116 -initialChannelId {cf7480f6-cc1e-47eb-b7bc-0316f5b19979} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 38 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:5152
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 6800:29583 -prefMapHandle 6788:276293 -jsInitHandle 6808:242716 -parentBuildID 20260420133000 -ipcHandle 3472 -initialChannelId {f38e2a75-4c82-4f48-b5f8-4ecc0506a4a2} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 39 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:10020
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 4920:29583 -prefMapHandle 6788:276293 -jsInitHandle 7152:242716 -parentBuildID 20260420133000 -ipcHandle 3472 -initialChannelId {72fef62a-3d64-44fc-b300-7358d910cadf} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 40 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:696
    - - C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
        
        "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -isForBrowser -prefsHandle 4296:29583 -prefMapHandle 6072:276293 -jsInitHandle 2440:242716 -parentBuildID 20260420133000 -ipcHandle 5168 -initialChannelId {850c6237-9d0c-4789-8e75-d9e72bf87e53} -parentPid 7648 -win32kLockedDown -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 41 tab
        5⤵
        Executes dropped EXE
        Checks processor information in registry
        
        PID:1360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=9016,i,6241326207351154821,17833106748564772226,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9020 /prefetch:1
  2⤵
  PID:6456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=8988,i,3967487123847274424,4438912536396011055,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8852 /prefetch:1
  2⤵
  PID:6452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=8820,i,5665700497790524925,4653644969286835933,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8700 /prefetch:1
  2⤵
  PID:6504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=9252,i,14086323191990946819,12319281578128454397,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9276 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9404,i,8543384292812803710,12673490145824283206,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9416 /prefetch:1
  2⤵
  PID:4248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9600,i,10938540131202097759,2612983626713686706,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9028 /prefetch:1
  2⤵
  PID:6568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=8840,i,2665761558683530466,1023844458865049729,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9544 /prefetch:1
  2⤵
  PID:6560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=9760,i,14762985043135733459,9465347532746327966,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9300 /prefetch:1
  2⤵
  PID:748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=9856,i,607755926174623230,12566335246207747130,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9612 /prefetch:1
  2⤵
  PID:1140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=9880,i,10567863893847997473,16883276478608274489,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8544 /prefetch:1
  2⤵
  PID:4120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=9904,i,294719672110402804,9880511761573310712,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9088 /prefetch:1
  2⤵
  PID:5152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=9996,i,13160385839788799755,9474050309904820130,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10000 /prefetch:1
  2⤵
  PID:3880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=9980,i,3642640042951537075,16717702677790317531,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9068 /prefetch:1
  2⤵
  PID:2228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=10020,i,5635404538336365461,9946072036004069151,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10936 /prefetch:1
  2⤵
  PID:2448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=10044,i,13581459121677137164,8493976537606908668,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8676 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=10068,i,17620697174117986740,10804574976244246505,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10972 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=10092,i,13356947993162982496,4426811836153538609,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10992 /prefetch:1
  2⤵
  PID:696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=10120,i,8039683754596511639,8322875938491942212,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10704 /prefetch:1
  2⤵
  PID:5996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=10140,i,10190735971605758316,12191159225379187647,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11024 /prefetch:1
  2⤵
  PID:6404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=10164,i,2274000603953092663,13342153639490097765,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10568 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=10212,i,18066862745120235847,7439575473979273207,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10348 /prefetch:1
  2⤵
  PID:6388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=10664,i,8614917182630326850,8388851786042995440,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10628 /prefetch:1
  2⤵
  PID:6384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=10684,i,2153733328676070895,4437330312581975685,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11064 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=10632,i,4495392965000996340,17929508317850348040,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11084 /prefetch:1
  2⤵
  PID:6224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=10700,i,16124817792122491685,1909063489662570385,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11124 /prefetch:1
  2⤵
  PID:1456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=10524,i,12307992259345638164,1791296020336599190,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11104 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=10712,i,9251135644078684839,12624334773816654520,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11132 /prefetch:1
  2⤵
  PID:2876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=10560,i,2775921476239688391,7504113587720390166,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11200 /prefetch:1
  2⤵
  PID:6332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=10500,i,7305268993891315625,8130685115240882161,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11160 /prefetch:1
  2⤵
  PID:6376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=10752,i,6201577943263794850,11009718567160701985,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11180 /prefetch:1
  2⤵
  PID:6596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=10188,i,10449667942302567540,3251646320714035625,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10260 /prefetch:1
  2⤵
  PID:6348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=10772,i,7268958696626531138,5168299035945296709,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11220 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=10528,i,15887547754028846610,4457873391907812493,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10768 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=10824,i,8796711048888423690,11549562754253320912,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10304 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=10724,i,14351683756221958336,17914641293097173925,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11252 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=10844,i,15955053739649965623,1332772076715604250,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10360 /prefetch:1
  2⤵
  PID:5932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=11184,i,13583319867177487610,18290019334486569605,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11160 /prefetch:1
  2⤵
  PID:7508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=10740,i,11352235909075211305,2424206818105685545,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11192 /prefetch:1
  2⤵
  PID:7516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=11104,i,12371336559177146930,7559159850703890785,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11124 /prefetch:1
  2⤵
  PID:7528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=11980,i,5956992615655786624,11782848854268199275,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13328 /prefetch:1
  2⤵
  PID:7536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=13392,i,4453994081222632821,12962016390504967287,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13300 /prefetch:1
  2⤵
  PID:7544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=14012,i,4533947515545866886,14160070333202795688,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=14292 /prefetch:1
  2⤵
  PID:7876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=14104,i,8099047911688427045,18333877940452918198,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11080 /prefetch:1
  2⤵
  PID:7956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=14116,i,17119770170205321740,15422456741512825066,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=12872 /prefetch:1
  2⤵
  PID:7964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=10524,i,9219991982907749987,8959320714152635055,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=12828 /prefetch:1
  2⤵
  PID:7972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=14172,i,10301233811610390374,3422655714984085999,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11116 /prefetch:1
  2⤵
  PID:7980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=14192,i,17979578721997306730,8195390389351367982,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11040 /prefetch:1
  2⤵
  PID:7988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=11652,i,3144591342270670171,3424775215275959121,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11760 /prefetch:1
  2⤵
  PID:7996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=12372,i,13427075664046959271,10612271328726324581,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9928 /prefetch:1
  2⤵
  PID:8004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=10364,i,4786652616819190272,5461248521677537110,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10140 /prefetch:1
  2⤵
  PID:8012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=10416,i,6271892692025789010,12269937953687109521,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=12664 /prefetch:1
  2⤵
  PID:8020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=10764,i,5284443912191431386,12971052890595210846,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=12952 /prefetch:1
  2⤵
  PID:8028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=14260,i,17004575299217611881,13116986546272452341,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=14228 /prefetch:1
  2⤵
  PID:8036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=14304,i,457070156201954649,7638569930889723502,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=12972 /prefetch:1
  2⤵
  PID:8044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=14272,i,11195549604791839117,5097130827362662975,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=12632 /prefetch:1
  2⤵
  PID:8052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=13392,i,12558655542634844271,8486329300933002641,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=15352 /prefetch:1
  2⤵
  PID:9008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=12928,i,4601770727877547943,15422957182131736746,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10344 /prefetch:1
  2⤵
  PID:9016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=11104,i,17526325391045334153,3992684242103435386,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=14084 /prefetch:1
  2⤵
  PID:9024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=12860,i,8804820021869690304,1923612302786050787,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=14064 /prefetch:1
  2⤵
  PID:9032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=11880,i,13416147689066329650,1407872854489523485,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=14024 /prefetch:1
  2⤵
  PID:9040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=15704,i,11676923388676980193,1236210064244926035,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=14020 /prefetch:1
  2⤵
  PID:9048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=15728,i,10567406787874080537,6441738532030729552,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=15340 /prefetch:1
  2⤵
  PID:9056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=15740,i,16431887429590450418,16458131542782422109,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11052 /prefetch:1
  2⤵
  PID:9064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=15844,i,11180709646988417550,16566774463972633059,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13244 /prefetch:1
  2⤵
  PID:9072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=15904,i,5973357153937676584,10369216182565562802,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13224 /prefetch:1
  2⤵
  PID:9080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=15860,i,2131866500600985146,1518502348776219052,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11628 /prefetch:1
  2⤵
  PID:9088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=15776,i,6335731979212891488,12373948518677373069,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=14264 /prefetch:1
  2⤵
  PID:9096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=16056,i,2733722888760518265,17156511454774840761,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=16032 /prefetch:1
  2⤵
  PID:9104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --metrics-shmem-handle=18020,i,14544442632714888340,5987811816925701803,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=14920 /prefetch:1
  2⤵
  PID:9112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --metrics-shmem-handle=18040,i,4711528864488722088,2546006111931942997,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10844 /prefetch:1
  2⤵
  PID:9120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --metrics-shmem-handle=10672,i,13660204687419467689,32935292979381236,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:9128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --metrics-shmem-handle=18092,i,9398510381344993936,5691499971044446983,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=15700 /prefetch:1
  2⤵
  PID:9136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --metrics-shmem-handle=16076,i,14091336526830601366,13608076507684593159,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=16068 /prefetch:1
  2⤵
  PID:9184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=15820,i,134061320130226778,17723698949411103265,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=15796 /prefetch:1
  2⤵
  PID:9144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=15668,i,16630676865320999895,6394767233891069331,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=14080 /prefetch:1
  2⤵
  PID:9176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --metrics-shmem-handle=14568,i,3297382790170455274,17888717530273704532,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=14140 /prefetch:1
  2⤵
  PID:8300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=11932,i,16637478161258496603,9617890583355383287,262144 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8996 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:8744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=8216,i,1124249414763284563,2485199478040561748,524288 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10584 /prefetch:8
  2⤵
  PID:6796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --metrics-shmem-handle=9520,i,8071759367104294714,11709257188726044084,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9468 /prefetch:1
  2⤵
  PID:7376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --metrics-shmem-handle=9436,i,6786217845024323559,15419461148709019262,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7452 /prefetch:1
  2⤵
  PID:7808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --metrics-shmem-handle=9444,i,10472791915631553643,5091861610019965712,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7428 /prefetch:1
  2⤵
  PID:8224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --metrics-shmem-handle=9484,i,18207235995494263770,4023254153452663988,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7420 /prefetch:1
  2⤵
  PID:7336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --metrics-shmem-handle=8872,i,4340064087368454981,3356930764782165667,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7404 /prefetch:1
  2⤵
  PID:8180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --metrics-shmem-handle=10476,i,4317810856971482130,945010510936505922,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10356 /prefetch:1
  2⤵
  PID:8188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --metrics-shmem-handle=12748,i,11875229904857869597,5979429438117940723,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8228 /prefetch:1
  2⤵
  PID:8392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --metrics-shmem-handle=11096,i,15260343717316957156,8610007227823590087,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10660 /prefetch:1
  2⤵
  PID:8380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --metrics-shmem-handle=10496,i,8755250206641040250,14010826270669073923,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=15560 /prefetch:1
  2⤵
  PID:8400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --metrics-shmem-handle=7380,i,8241207269579878841,17521158454525971916,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10268 /prefetch:1
  2⤵
  PID:8636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --metrics-shmem-handle=13740,i,4847566184928657384,5947669788455284828,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13524 /prefetch:1
  2⤵
  PID:8920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --metrics-shmem-handle=15556,i,13701490687812354687,16980320395639561944,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=14240 /prefetch:1
  2⤵
  PID:7996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --metrics-shmem-handle=13692,i,6225106567860298955,13508635262439918964,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8888 /prefetch:1
  2⤵
  PID:5452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --metrics-shmem-handle=13648,i,14654227198242546025,13657392139731252451,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13616 /prefetch:1
  2⤵
  PID:7300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --metrics-shmem-handle=11272,i,10015886285674610045,8580661520783544854,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10264 /prefetch:1
  2⤵
  PID:5144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --metrics-shmem-handle=10472,i,15227427189283489238,12100201617758574192,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9832 /prefetch:1
  2⤵
  PID:7312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --metrics-shmem-handle=11280,i,10589743535720632174,17312165445103644890,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9724 /prefetch:1
  2⤵
  PID:7352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --metrics-shmem-handle=9016,i,2780230433427554152,14704492945490512727,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=12508 /prefetch:1
  2⤵
  PID:8760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --metrics-shmem-handle=10164,i,6763124312576575118,7749095787092172239,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11452 /prefetch:1
  2⤵
  PID:7944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --metrics-shmem-handle=12692,i,11616119210230789604,9073620117615306779,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11400 /prefetch:1
  2⤵
  PID:696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --metrics-shmem-handle=11348,i,1784388292674529270,1213830782532286128,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11416 /prefetch:1
  2⤵
  PID:5180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --metrics-shmem-handle=15264,i,6817749146476556301,16526733989227353910,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=14820 /prefetch:1
  2⤵
  PID:7360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --metrics-shmem-handle=14848,i,1080530177273207769,1399033400860534643,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11760 /prefetch:1
  2⤵
  PID:4760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --metrics-shmem-handle=11580,i,8001841206770063876,13704667363111922779,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11568 /prefetch:1
  2⤵
  PID:7372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --metrics-shmem-handle=13420,i,16466034095988263508,14349662717542024698,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11576 /prefetch:1
  2⤵
  PID:7408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --metrics-shmem-handle=13492,i,7383572921612585925,6779040652748371946,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13432 /prefetch:1
  2⤵
  PID:7708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --metrics-shmem-handle=14052,i,12755934187429572850,1622132330714702840,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=12332 /prefetch:1
  2⤵
  PID:7716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --metrics-shmem-handle=6000,i,17100155212766483192,8243335600429922399,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=12308 /prefetch:1
  2⤵
  PID:8844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --metrics-shmem-handle=7636,i,5560392719477355358,5498650888292473739,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=12620 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --metrics-shmem-handle=7608,i,13395114590084493123,13049333187165191605,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10480 /prefetch:1
  2⤵
  PID:3516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --metrics-shmem-handle=10840,i,4167826397594682513,735395453914544891,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7876 /prefetch:1
  2⤵
  PID:7416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --metrics-shmem-handle=8816,i,14661317685650936735,6872192366271852995,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11852 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --metrics-shmem-handle=12164,i,13709119110171145014,7145252123610376350,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11828 /prefetch:1
  2⤵
  PID:7464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --metrics-shmem-handle=7524,i,11179356147087600615,18108045741767011997,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10108 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --metrics-shmem-handle=7256,i,4662408391860325947,5283784740117357659,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=11000 /prefetch:1
  2⤵
  PID:7720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --metrics-shmem-handle=3420,i,5768354746786788512,12965640143656729557,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10016 /prefetch:1
  2⤵
  PID:8884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --metrics-shmem-handle=11732,i,4555229544127240822,1370277396299935663,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=15396 /prefetch:1
  2⤵
  PID:7424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --metrics-shmem-handle=18120,i,2918804313507874671,337978743361975597,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=12808 /prefetch:1
  2⤵
  PID:6588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --metrics-shmem-handle=12716,i,1493157805741465174,17794071187840357168,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13584 /prefetch:1
  2⤵
  PID:5680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --metrics-shmem-handle=13660,i,4118330547752464971,8503091507190185907,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13524 /prefetch:1
  2⤵
  PID:5804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --metrics-shmem-handle=14640,i,17347096716606604646,8885821108567666309,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=12272 /prefetch:1
  2⤵
  PID:7164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --metrics-shmem-handle=15856,i,2055437247473519844,7240610159843355820,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7636 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=155 --metrics-shmem-handle=13248,i,17980286769085206567,3316898084311263595,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=15084 /prefetch:1
  2⤵
  PID:6352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --metrics-shmem-handle=13544,i,6523220715763864250,32209911495022445,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=14392 /prefetch:1
  2⤵
  PID:6356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=157 --metrics-shmem-handle=9672,i,4261915894824468444,10997323409398269752,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9668 /prefetch:1
  2⤵
  PID:9184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=158 --metrics-shmem-handle=11944,i,12644519868548086024,13806542092624335903,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=15184 /prefetch:1
  2⤵
  PID:6420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --metrics-shmem-handle=9688,i,14439442497849203674,989867709900555023,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=9944 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=160 --metrics-shmem-handle=12296,i,10019104187797042991,1708506747675256477,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8208 /prefetch:1
  2⤵
  PID:5284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=161 --metrics-shmem-handle=14668,i,12903125339284775667,17784655598048693892,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13532 /prefetch:1
  2⤵
  PID:7400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=162 --metrics-shmem-handle=11912,i,2623107996259711109,6786815137759877496,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=15072 /prefetch:1
  2⤵
  PID:8552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=163 --metrics-shmem-handle=12112,i,14551849262272393348,7367216626547804737,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7576 /prefetch:1
  2⤵
  PID:6380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=164 --metrics-shmem-handle=14708,i,15811239212589649549,13148332312241942079,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10476 /prefetch:1
  2⤵
  PID:6628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=165 --metrics-shmem-handle=13708,i,2608492556940435868,10088599310704157988,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=12816 /prefetch:1
  2⤵
  PID:1648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=166 --metrics-shmem-handle=14908,i,10453564899288533572,4956704204578235869,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10092 /prefetch:1
  2⤵
  PID:6604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=167 --metrics-shmem-handle=16352,i,10320236901821995365,6199233208417630743,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13708 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=168 --metrics-shmem-handle=11380,i,8907714948335835997,9365949944602486199,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13692 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=169 --metrics-shmem-handle=12936,i,16563078068462759011,7512041151480148014,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10292 /prefetch:1
  2⤵
  PID:7528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=170 --metrics-shmem-handle=15376,i,14060846395464824802,301286984594355934,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=14396 /prefetch:1
  2⤵
  PID:8696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=171 --metrics-shmem-handle=16068,i,7481034847682022087,10739779668890811534,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7332 /prefetch:1
  2⤵
  PID:8168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=1720,i,3042940542887883178,14853272637241770810,524288 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13872 /prefetch:8
  2⤵
  PID:9244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=173 --metrics-shmem-handle=9168,i,8792158174943740495,10790041089959049859,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8964 /prefetch:1
  2⤵
  PID:9920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=174 --metrics-shmem-handle=14348,i,9055394963519759981,15195159973480829142,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=14848 /prefetch:1
  2⤵
  PID:6684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=175 --metrics-shmem-handle=1528,i,17697966054425892770,7955846168453055560,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13572 /prefetch:1
  2⤵
  PID:6260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=176 --metrics-shmem-handle=4864,i,8617787769268134471,3106044447789549432,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:6376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=177 --metrics-shmem-handle=3556,i,11707449509079126734,8177885637041939117,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13868 /prefetch:1
  2⤵
  PID:9572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=178 --metrics-shmem-handle=4808,i,9334088114618963577,17070032312664212946,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=15864 /prefetch:1
  2⤵
  PID:7420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=179 --metrics-shmem-handle=4500,i,14067554434099646607,14247137765492445393,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4804 /prefetch:1
  2⤵
  PID:8728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=180 --metrics-shmem-handle=17668,i,370895270355384923,18038238815507686795,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=17736 /prefetch:1
  2⤵
  PID:10080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=181 --metrics-shmem-handle=4832,i,16805318580974326990,1376371297525658368,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13516 /prefetch:1
  2⤵
  PID:9508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=182 --metrics-shmem-handle=7952,i,3413853228231536562,30407155225851196,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=8292 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=183 --metrics-shmem-handle=17724,i,9932581822720751008,6799732039376367238,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=17328 /prefetch:1
  2⤵
  PID:7484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=184 --metrics-shmem-handle=11228,i,1594086248824650452,1990334230883259094,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=17488 /prefetch:1
  2⤵
  PID:6208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=185 --metrics-shmem-handle=1528,i,12596189301173152459,10642143016209883062,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:4212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=186 --metrics-shmem-handle=9356,i,16736683941240814181,1526396745769879665,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=14112 /prefetch:1
  2⤵
  PID:9168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=187 --metrics-shmem-handle=10728,i,9814712101078086358,314748940203087546,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5736 /prefetch:1
  2⤵
  PID:4696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=188 --metrics-shmem-handle=12672,i,10268356510343534882,11885591444140188590,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=17612 /prefetch:1
  2⤵
  PID:9220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=189 --metrics-shmem-handle=15572,i,622586073184896904,5387176713561735268,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7384 /prefetch:1
  2⤵
  PID:7504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=190 --metrics-shmem-handle=17708,i,3528866605611935428,8189258540605547031,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=13776 /prefetch:1
  2⤵
  PID:4736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=191 --metrics-shmem-handle=17544,i,10401492705787421117,17329884754208388439,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4500 /prefetch:1
  2⤵
  PID:5512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=192 --metrics-shmem-handle=18192,i,2379990841958055994,2741848600680785636,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:9224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=193 --metrics-shmem-handle=13808,i,1527207644182922641,1309590529327626024,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=17784 /prefetch:1
  2⤵
  PID:10228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=194 --metrics-shmem-handle=18216,i,1629676457850148174,17966381052282493061,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=18208 /prefetch:1
  2⤵
  PID:9396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=195 --metrics-shmem-handle=18212,i,6541361016626716524,10052474497688689894,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:9524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=197 --metrics-shmem-handle=18284,i,12236975212019433066,11541674664822684251,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=18264 /prefetch:1
  2⤵
  PID:5344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=199 --metrics-shmem-handle=18312,i,15434379632028127927,3437302865822389089,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:2472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=196 --metrics-shmem-handle=18252,i,12046906324912718106,14165711489420698449,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=17516 /prefetch:1
  2⤵
  PID:10216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=200 --metrics-shmem-handle=17764,i,10343843320243563521,11111845852630708395,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10772 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=198 --metrics-shmem-handle=18296,i,3440026348124046848,9475954893255226411,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=202 --metrics-shmem-handle=4992,i,3641281457610691435,15601069890743113135,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=18348 /prefetch:1
  2⤵
  PID:5212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=201 --metrics-shmem-handle=5112,i,3362722335736101892,14872426875165157637,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=18324 /prefetch:1
  2⤵
  PID:9788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=203 --metrics-shmem-handle=1532,i,12877958736767949445,13934380254464704403,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=17136 /prefetch:1
  2⤵
  PID:2524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=204 --metrics-shmem-handle=13604,i,11711343542264559376,3403672445155669608,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=17764 /prefetch:1
  2⤵
  PID:9224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=205 --metrics-shmem-handle=15328,i,10331267844390391409,4401485551767098384,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4772 /prefetch:1
  2⤵
  PID:9396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=206 --metrics-shmem-handle=15332,i,14092154664119388543,4216858201499553179,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=16348 /prefetch:1
  2⤵
  PID:7552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=207 --metrics-shmem-handle=7304,i,15924886298711878359,13671788175898042316,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=17608 /prefetch:1
  2⤵
  PID:5128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=208 --metrics-shmem-handle=3216,i,5228992658420794084,14588221767529605396,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=10728 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=209 --metrics-shmem-handle=12100,i,6609655669742541483,2768442661563041178,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:3696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=210 --metrics-shmem-handle=7432,i,4314603972101922254,12781169452560860372,2097152 --field-trial-handle=2248,i,6253071826760766406,389445924852236275,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=17712 /prefetch:1
  2⤵
  PID:7484

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2232

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3984

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault87ee2f23h9ee3h4360h85dch35d0c86af78f
1⤵
- Suspicious use of WriteProcessMemory
PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault87ee2f23h9ee3h4360h85dch35d0c86af78f --edge-skip-compat-layer-relaunch
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:5816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x25c,0x7fffdf71c188,0x7fffdf71c194,0x7fffdf71c1a0
    3⤵
    PID:5768
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,12750267057388764346,7887014253296716628,524288 --field-trial-handle=2240,i,3434831389856369789,516556131824614901,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
    3⤵
    - System Time Discovery
    PID:5764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,5226304883488672085,7949000459938214202,262144 --field-trial-handle=2240,i,3434831389856369789,516556131824614901,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2
    3⤵
    PID:5832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,14433250217923420802,13961336860310232913,524288 --field-trial-handle=2240,i,3434831389856369789,516556131824614901,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
    3⤵
    PID:3392
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3180,i,1059357223978037464,2305064945152079228,2097152 --field-trial-handle=2240,i,3434831389856369789,516556131824614901,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:2
    3⤵
    PID:2484

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 a9855a56e8dbc8bb2a0b2b4ff578246c6c005d9dc1c574e062d53be2647fec9c
MD5 2751ee58c8f3fc532f3fd226bab5a4ae
SHA1 425f2f25aa206ec4caf0fcdc8b10a42412a5f96b
SHA512 c3b93aecfeec17580d4525680672a9a4218aa4077cff8a389346de1d88b35410a822672a2788204fcbdf829921e014662e5ed0db0f48f18259e18171d96c3035
TLSH
T118E022AACD26DC3B1EF90B6872544B42E75023272781581F3B3CD20D8FB577A4A8286C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000047

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000047
Size 270KB
SHA256 bdc3b72db9f5f65b10db75dfce90a09e78b09e4fce20084aa663a6b33b50c55e
MD5 d42bfce7292fd756d096946c1f674aa5
SHA1 aa77af8e4dc33b82efa102552fa5cfb29f417844
SHA512 f071e5bd40037b61fc22f4bbee465e0a20c9a4bbeaefe37aa423edfe6ee336bb29237a13bf4ec4c26962524734978f874ff45cf6fb99c91deaae6c69764fcbc9
SSDEEP 6144:dakyUusQB+oPdEmMGwmSXhSJjkE5tuVirIzdw:dak5uLAo19eJXhCv52irsq
TLSH
T17F442393F3CEAE6865DA21616240E7FEAB5D07CF0F42F7A91D833282516488E5107E37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000058

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000058
Size 45KB
SHA256 26110b3f7ec0b9b2734790c51a06c3a8fea129458c058fbd6ebbaf29ea8ddf32
MD5 28bdc9d8f23c958625aa378d6ae531b4
SHA1 430db9c8bd6422515d058c84580945ab8a12e186
SHA512 47b7d83cd84602b960ae8f6eca525fc77d5ef8710f7bf0e6b825d4c3e3f5ce3d8b611ab59bf007cc23b3acc8a63e4a34578845d5616061089a9dccd9c4216753
SSDEEP 768:Q2w/Mqq/p1TnnWy8XR/EoK0f6y1193oQI5sqAA0isEBGpNijn:QX/xq/jnWyOR/EoK0f6yV3oF55TJsEBX
TLSH
T16023F22FA84256B6DC249E81FF0F811D4CA284DF74D830D61562B6F4E9E97B20B0F69C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000059

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000059
Size 16KB
SHA256 284a782667d66bc222d79f0e054799fe28203c8b07153f8bfa3409c3bd2fcb89
MD5 3960ee94d5ce6a27d2f9ce1d4fb8a104
SHA1 942c0478cc614f3fdde17bb6dff27306784f56ac
SHA512 db58b2da099069c1b2f3263f305550197d1bafcb9c2f2226cadec7f8e6045510e05de68531a9002f0211d190efea84cfa7ae7da029eba66f780bd3c07dea698d
SSDEEP 384:v3Qi7h38xF+tPP5nVoEs/Qf0so4mrXmf6WZ6b2gS:PQi7h38xgR5nZpVo4Qmf646b2gS
TLSH
T14D72D0F6461824FFF0433B472EAD4BCF27492725F7949A0AD6638E42375476B9610C8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000061

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000061
Size 35KB
SHA256 57ad3bc69c218a19cc3f44dde72302f0c9731f36fdc0d3f8ec3e781925b529ed
MD5 070d7d3386c1c8c50764eef60a294de6
SHA1 d2ecb8d07341b919ef86416d2d89c8c7e4659b75
SHA512 9921b6139eeb7ed515a3de9e62882a6c3d26b3b87c9330985f33ddaec02d8877ced0f61a0df5c0184c65506980eab74c53354f23bdb823e7dda5c846c71ff11c
SSDEEP 768:xWZEZmISDMaa3XrrkytF16QDZ8pZC/71aU6q1FryHd4C:xWOZmIOG33kUF16xpZIav0F1C
TLSH
T156F2F15D6E5FDFB2A2C0F802F0B2042D43C219B456E287ED6602773B1DB8C99B650FA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000064
Size 73KB
SHA256 0a5ffc7f6fef62c4f19f415635193276804d39ff774d4f39537afff53b646042
MD5 ccc68a01b9b8c9778994e7771bba69c8
SHA1 839245645a834d1b4e92af437bc0150a8b09b9ee
SHA512 f1d087dd377d91311c469f8ff26785664f9aca535bcf027e9959fb9794b78dad5fef91c97538a485bf1647c919948354d328e37964a48fc9148f8d408b26b955
SSDEEP 1536:9+BtIuGx2g9hqmCs7pV887zFOCWwS5Z9jBV/mGyFL9u8M+AB4:KtVGllV8DCWH5zNA5M+M4
TLSH
T1547312802BEDEC135DAEB093C44590E83EBABDDC10F5E9195700FD8746B85CDA62B17A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000068

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000068
Size 158KB
SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
MD5 83266658f29f5cb762001d5d9f6985a7
SHA1 9ff52157193e1e798944e6a3172d938183f5e550
SHA512 60b2a8749bb597b71c6cb7113c4ea6c430ab90c6f6a5f78a36ab5fbd2676fbc173ade236be939e862569c786fbdc8e0aa984f1ae4263e91de2ba681cc8ce5d66
SSDEEP 3072:pqj6fcYjfI87fn/NWUEu+Y4rwgnWSPrrGh9SC2VRvkQdv45cf+Fg:pTvjg87fnVTEu+W3rSC2VRpBf+y
TLSH
T196F3232CABB1EF2298ADD32D789EF491C870553AC097303BB84FDF8575154348A7684E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006f
Size 21KB
SHA256 1dd2574255aca661ac921813b702de55395669be7a18348647dcd36542b4063c
MD5 a649772bf21808c8c507461e94f3b7e8
SHA1 2fe5cb401fd22d5c29b1557556dac54cd69980af
SHA512 d3f59d9757f2aa1ca92151520683c14f8976239be27e7a9c15cd7446690299023c6d792d119ff23f707c31a4bad4c5ac4a34dce9fd3353b69935e65026f87ebb
SSDEEP 384:kw9/6ZkbuAz38w6gtwVLkMhLLk3mHHuFOkQzXQRNUNwmPvjxwXKJpKeV9SYMQlTL:ko/6Zk6A5twVQMhHk3mHHTjaUNwmHjyG
TLSH
T1DBA2E15F0F5210539C37120E1B0E40F63FE0DAD975A7C1A8E8F298A71D9E7EA6D980A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000082
Size 18KB
SHA256 964e14ba6d5bed540c7d089bc6c4b2acaa8dae761fd26d1bcc24746db64be091
MD5 a703b78d4461b0a63c36260917091e7a
SHA1 d7dd7052da11065d8ed66c03ad1cacf5b5a6fc3e
SHA512 ddb0113539336c59fd8eb594f4adb5ce040e6e67d585f6fa2cd82125f2bd7d4e628ee426217b4d074d78a1978ca5b10c2ba5eab6d08d9828d03fb28918535510
SSDEEP 192:1D2S8YlmnDODoqXlKki5TftgmR8tgmRBatgmRDz/tgmR6tgctgmRAutgmRetgmRW:1VLaAowgkis8MhBlw9lMDvKvRt6t
TLSH
T1C2825476A0B21AB083A63C7C3DBFE63C9F2D9903E8C18F95740D61D20F76153245959B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000083
Size 19KB
SHA256 51111866e9de079258b36d2325369101ddd1560add971215b976af25a51ea15c
MD5 9081764fb8bad72ef4ce034fcf051481
SHA1 3c7502e5fefb8488165ebc81e0af26ea0d4f80a9
SHA512 358413ef5285f633cc77fb05a8e2ed8c7d0b754e4bf08067ca415bdbf6da4dd1ce187b7d3e4b442e2f8eaba984c60bc7c8f93a2361ae38084e1a54d102663c57
SSDEEP 384:DM1e0SEL0CMy+KZALtW1mNxzLFlce7BKtL46+R+0:Dke0S60CMyGLtW18LFlcZtkN+0
TLSH
T1BF92E1CF21B61E616A52764B23736CA4D339CE61B41D2F24D05CE05F831364DFC466AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000088
Size 59KB
SHA256 94cbfe216ff5a1acee212eacbaffddc4becd52544df9bb6f99e9487fb3244d1c
MD5 a16399ff963fcf04c2d92db4ef33f888
SHA1 625ef6037986ef4cdf3b0c5446cf17a68b4264b0
SHA512 0dc08cd3555affc0e82a1ae6e960ac857660871155ac94e30392510fafcf08be7734d995177a2690f18ef6d716f2d477aebdc5a00934ee22af0ae86dc6ba577f
SSDEEP 1536:J5aqYLLivKKznqI6Qzms7I9uhqP/VDdDcldYMh3ZuzxGA:JiLuvKKznqI6QzmEiuqHVDdYc8A
TLSH
T13A5302CD71376D96C0ADD447E3B9A41E34A252A9727C2B61B8AC0CFED8F5DC70A84364
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000092
Size 1024KB
SHA256 db0f08041823f4635d823acb39653b8d0378c2f120e576fbcf5dd43b5b96e652
MD5 b7a3a22f92ba397271e497bf5d99f284
SHA1 f8d5f3fc48dd5d6917a58a01091072ccd64a84a5
SHA512 a0e6a17bfcee36f72128d82b44ac944b72c9798c70a31cff3e40a81605e2c0687ea913cbe3dfbf28214dd04f4804d0026ab81713f90ff88fe1fb3c80574732a3
SSDEEP 24576:Mvwo8TMWu8oYy0l45PxbI9Okzbtl2rRPbLMryj:PokMZSFl4sIkzP2FLMrm
TLSH
T1CE25235563397957D2CC33BCEAD0AF41F8AE89916193A2A76017E1810B7B4FE0B65CCC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000093
Size 226KB
SHA256 170e9c84de178f358d63b4f4c50f7bd9d872f1c23a8de913f0f23d3ee35f81da
MD5 5dc9822c7955e7988714661367ffeb8f
SHA1 223b0b9f0777654f1ada7509bcb0710d832e31e2
SHA512 c496a088d26f0f2a38eedf4610362facacfc08f64e8b4735b70ed4e2e35441d276dffc64bce7000cce6928f790a4784276f6e37481e83a4977769bf6f9cee7e6
SSDEEP 3072:u7Kcx47E+0OrP56u1a0PHEH2McWrJwwRMvna8VKBNB6hJ74IqA47i/jbqGzRE/n7:u+i47L0O0lcJw4vVKLgJgAi+3wxDwWJ
TLSH
T1A03422F657B99C5409701CBAFD270BE4FC0DE0C75118EE916B1F4960C2EA6AD96E08F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a7

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a7
Size 16KB
SHA256 3374b0169bda7dd193c897d9846a881dc970569be877596e46f5f068faf09a83
MD5 fa52db7df50636c3ea6f5dcbc41b6885
SHA1 9fe11694766f2ff1be07d28f4d93ba743c9881ea
SHA512 242104bee110c458b6bb0f31231f5ae9666521dedd2e76c9d9621725da01105fc2f8856c5f8e65300f0e096add0ab78950b32a1107247352c20ac40b828f5aa3
SSDEEP 384:hFCqXdpWzS7Pe6etwILo8BZjYNeOtyj2pW8Tn4+QnV7+b7n:GYpWzwlfI3ZjYNTnCV7+3
TLSH
T17972D047BE60312185882346D11CBAABE5675C971CA108E982D0CB33DF767B51FE7D47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d9

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d9
Size 92KB
SHA256 51f8266dbc5292bb290b7adb23430270df2a033f64a4331fc33d96c0418c5709
MD5 9c34d69b42498955d9c534325461a1c4
SHA1 b1596df0d7c04ebd781f4f1ab10779c8e2e5f62e
SHA512 b2d620ff7e2bc5413af2d539410a3928559e354d789465a3441a89b8460e7178b0caa3e036099f21b14201f7bdf9d737d6f3abe67224b314764763dbcb1aaf6a
SSDEEP 1536:ehjmdntP4kS5bc0iB8NAHinSA713tVrml9P/IFSQ+WkXOO4XZwwnYHTsup/jz8K2:EcZz5afhPRm8FQFKNYzsup/jG
TLSH
T1199312A4488DC70232F6D267B97AE84772D880C1D9F1C1DD86C9FCB79E5027365CE98A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000da

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000da
Size 22KB
SHA256 97b8aed9a779e52f7b2c1b20f7ddf890c8151ba36977a9ff7f3b2dd4740d63a4
MD5 c09d29e09c068b6fbe872cdd05bde951
SHA1 f67a361d91d5e211dfdf639e251b2c1484f58064
SHA512 4224cf636ba45b1acd087d123cff4ad40d356ce451ef0af9379e5f0a59f8edde2644965629673ba2fab638b8d1a8d98101f31dff2c72d27045d8b7b25c42702c
SSDEEP 384:aJGOxFZxZ2KsXt5pu6NH0n7kfl8La7IAWGydDB64o2i1Qsu74TWcdBZjDsRg:SGkSKW5puySOF0AWGydDQ4Xg/WcrVgRg
TLSH
T1EEA2D06CB3121F695731E8A2F29414B7B8FD69CB244E57640B3D891948FEC166F24AC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

100d5954793f79b3_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\100d5954793f79b3_0
Size 471KB
SHA256 6218a30b6ac3e3d790f2a5dd664e8e7173898e40b58280dd8e538b483dfcf994
MD5 78a90ba5d3f166f940e1763da6ca2f7d
SHA1 01390f5ded418a04247e472023a6c9e398054f02
SHA512 601ce40a33775f8d2df446764df918247126656b2d1bca8a7596425e9adec955098704441722512c65e3babadd1464767cc8fcc4a1a1d367c8fd1d54b7ea476e
SSDEEP 6144:p07hZNY+kxtdHtN79jlm7GXhHESd+nVk9S7REpzxM23BTw4fU8gUbWYRXmTG3b4X:Uh38/O7G+7nV61p73hvb4RhKk
TLSH
T194A4D800ABA1AA33CF764BF55393C957723641483FD7E10722E197752C283FADA96C4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

14cb80638061ae4b_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\14cb80638061ae4b_0
Size 54KB
SHA256 8850eddb83625d00e24d183238346913ce773d101ef506f81230c7b14c16042a
MD5 352e403833c2f0c9f236a93423b51d6c
SHA1 06cb1f973c74aa9bc848e3ea5f4767de57a22652
SHA512 d10c7416733adadde747264f809cbc655ef0240a9aaae4633b407d0a87a3414058165e223e3b9efa629ef7120ab9fc5e71076f70c1887754c04c9c16629ba2e4
SSDEEP 768:sCEWIGkn5mKdbuJN9TYYx991Agjoe2+UpGaFtbpMNDv8ztnO:RExp5mKpS+EYpppu8tnO
TLSH
T1DF43A4156B90AB76CF3243F442638AAB3632818C3FD7C20771F5E7651C253E56E5AC8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

418429e60a7c8219_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\418429e60a7c8219_0
Size 315B
SHA256 8c798bc5fc3d665cc299213f7b97e800a01455a5d828aa455876e74d0c37d9dd
MD5 da763c3923d28ec9b4d1487a0cc9f8fc
SHA1 31f50bfffaf7499623c29ca4f0e628c2e0e310da
SHA512 a79a0ecc28f2a7724b395b1ef52dea1dce940c7c0bff58d06992595b9cab252a3e201cd777765dc8e1b0c802355c7d6a83f45ba761377bd74ec0b4ae91ba17ac
TLSH
T1B1E07D7380A44591CF324BB1A790230E4522B1DC08DBC9C41155602602447FC71C6334
MD5 SHA1 SHA512 TLSH

Submit Download

76db405ce8f734fd_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\76db405ce8f734fd_0
Size 313B
SHA256 9312143f8780ca536f726c0b957912a8813bae77a11cb33691bafa7d45c2c6a9
MD5 547a48bf9e7a776daac4e3c3e7b27777
SHA1 68ad306410b3ae2a4313e129493ed30aa9e73abc
SHA512 dce56e5e5fda55782fa6b8b289c156c70deeed9f2cf626efe4ca8423df31c7a4092f52d3fef50555c34ad0804d841c9867e6986365d6d2e17cafa851506157f9
TLSH
T1F4E07DF7A5841480C81342B095ACA75D5937B1E60DD1D0CBE515B13202922A4C188511
MD5 SHA1 SHA512 TLSH

Submit Download

d3f85b4332847fe3_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d3f85b4332847fe3_0
Size 257B
SHA256 f6ca57c5142f0aec10c04bba7afc16581234c9d1bb1e544861c0cae09a5e2b27
MD5 b7a0b148b8bd33553170707c3244faf3
SHA1 3240318d7300dd94e60a8dfc3a5e564961a3355f
SHA512 8bb04110db98836924dba5c7b98c7c203c1acc1ca5ab6051524897831fd6128315e61fef5ec31ffe82e06cb27b416f86d45d51f0642e71752b7af5a6250521c7
TLSH
T19CD097F721903948C382A8B689FFB34E837FD1A48E8C41B1C204E1B603909E2D0EC029
MD5 SHA1 SHA512 TLSH

Submit Download

d419a3e6edeaaa15_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d419a3e6edeaaa15_0
Size 470KB
SHA256 4c7beed033f2f8a05e358bf18e85ad0e505f9e9aff6c72a0f2fda0a0d80b2eaa
MD5 7427275f4f13cb79db6b3d75da8bb3bc
SHA1 2f076a04f62248b948c7b0336d52da911bf0df7b
SHA512 da6b46e4d669cd69bd052586b8924f60ed42c9fb732d6557ca8beab278a77a967715d3d91d9cfb54dd4889cf23a6dcc0e153ef74972680d48deb1ac109ab6ed7
SSDEEP 6144:J075DFrW4XPvQlKxZJ+hQf9hxr+ZdHnGpmaYRx1YxM2ztKHnGWD+MLdBtcBCM5fq:05BZfwQfgjnGQX1SSKBCMqz
TLSH
T128A4D600ABA1AA37CF764BF543938957723541483FD7E10722E197752C283FADA96C4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 504B
SHA256 5019a0598d9c69f1529c1a3b957168bc552dd01d0be43f3c49c2acf1f8e1328a
MD5 89af3bf5f2e09ea8e7793a6afcd4852c
SHA1 b13c696960f6b9443d8c7a73daad487c7c3afe4b
SHA512 18e7d27a0d38edc6ca1991b36f7a9ad076ba726ff90693d76094feea4eb1ffee9f3eb14af53bf664da5c3ba5eec7d579e6272f5f12d5e6a9812378477600acc5
TLSH
T113F06802908BF800EFF503F032E54FE126812F010C053ED685EAE32835223A30140372
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 1ba8e9e2f93024d7fce4efb4add610a811f3b4c5c4347b3a161d60dc81ee9352
MD5 be53bf6752a7c3b4b72061ed61cb3a91
SHA1 c0ad574fd3ee5df73df6125cc7e36c2dea9c7f8c
SHA512 f64eccacb594f28a8056182f5e77b643c75c0131efb1fffa00029ec6b3e5517c75e1e62553a48078fc5ddd7cab68c1bf76953c39d0ed34aafb812c264a6a2e50
SSDEEP 96:T09HUwNgpH6X3wSviNrqwsZj/9OvpkyNdzWyzri3ksKb5EYBv6H2LQ:cHZgi3wrdqd9mHBPi3Sb5dgMQ
TLSH
T12CC1B32954D2C81AFF6006F668E64F533331B7C25C8B1F87AAD8987DB30B7D26116253
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 a06aaf765900f9d85a86cd77388d12027b3805b5fd4ffdeaf104df16f5cbc86e
MD5 e7ed0723caee86c22579555ce9e2210a
SHA1 9c3f3acc4890acfbf557d4de55cedd0c949157b5
SHA512 bf6bcbd9120dd8d408b8c91c1dcb82e7140f5875793da6300c7b285872be6db60dccb579803d2b71da51a8f45204229bf185f3cb625c75982886bd4410a2013b
SSDEEP 96:8296/0ZFgpTVX3woviNrmwsZj/9Ov+kyNjyry4rz3ksjb5EYB8C4H0e:/KogL3wNdmd9RFy+6z3rb5dmUe
TLSH
T142D1C62954D2D82EFF9402F658E64F523231B7C24C871F87AAD4A87DB30B7D6521A213
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 356b6d2137f901e17f578c1b3bab75394f1d076c91a88722588a79a6fc03e39e
MD5 253096f21197063c382144eb7cc8dcf4
SHA1 42773da67921f02b56add2763759c019d24f46e0
SHA512 a304e28070ae5607c62738483a763ee98fdd31778180637556fb1946b5edbb2f58ccdc1efbfa781d4add4dec7dfb68e89d13467242413951f131847a78533743
SSDEEP 96:v9HUx9F29X3wSviNrqSZj/9OqpriyNAuhWrK3ks5b5XBhpH+bs:VH8Q3wrdqS9FjWuhoK3Rb5X1as
TLSH
T1CCB193294456D419FFA406F668E64F523230BBC25CCB1F87AAD4987EB70B7E2911A313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 08d1920c34bc288947c429b6e9d3e2488676b399674f6a6c84b6d0d299704f78
MD5 99e303f17471a5ec8cd54e58e5061d6e
SHA1 4fc20519352c324b36026dff1e0a1f337c15cd07
SHA512 551b1151ff52bfdd494cd307951f866a967577ed790f126427574dca66d584068e61f7abc4b80156ac66c3e953ebf611729aa7635150fbfbea4e5c3997a1c417
SSDEEP 96:A9HUx9F29XYwSviNrqSZj/9OqjriyNAuhWrK3kMB5b5XBRpH+b4:EH8QYwrdqS93jWuhoK3Tb5Xxa4
TLSH
T111B184290456D419FFA416F668E64F523234BBC29CCB1FC66AD49C7EB70B3E2911A313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 afcf8625b30f16379f3c275ef554f430bacc7125dc1f2bb8b473a6f0185d9205
MD5 fcc37f33d0eb8051e4591bacd2581d68
SHA1 459d1e696fc069e218439006e205bd9218611b28
SHA512 c4ea53c7ec08ac85d1ce0582795957fb39e3463c6fdac38d34761089e93d14f32fcb80ef6679ce94a33de8a0a1d8220077dc71b285425ba7789d50786f2d6009
SSDEEP 96:596/0ZFgpHVX3woviNrmwsZj/9Ov+kyNwyny4rI3ksKb5EYBP6H0n:rKogz3wNdmd9Ryyy6I3Sb5dYUn
TLSH
T129D1C72944D2D82AFF9501F658E64F533331B7C25C9B1F87AAD4A83DB30B7D66216223
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 08bd6ecc6c2094f55dcb19848d97b20863a8689e4043743132733561ffad75b9
MD5 6c5f74053df10e21b084967cfd2c391a
SHA1 86c41b244c4aa3134f252e9e169389067ed42795
SHA512 b0dcfd7f585263ef0d89bc65e538c22ae18cd231dab1b204b2ebd7077322ec074013d5ac2aca3df5174f78855dc3801266d40a9ddfed4cd463e780d7b5469e89
SSDEEP 96:e9HUwNF326X3wSviNrqwsZj/9Ovp0yNApzWyzrd3ksbb5EYBzpH5Lz:2HZFb3wrdqd9yW9BPd3jb5d7Fz
TLSH
T1BFC1952954D2C81AFF6115F668D64F523331B7825CCB1F87AAD8987EB30B7D26116313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 46a9788310ccef8cd22c6656d55acf3b154dde1c100a764cdc2a2621a16a3e5a
MD5 58f1eb987e4ed38716709d341112ef82
SHA1 e6f39c50ab7db859559f6de1ea95fea62dd78bc4
SHA512 03fa39126020a687738a9271f6f5852e690865f71f914a3e5cc4ad207630a951bd76b091c9731171e6d04754279216baab3d4e90359387fa6140d30d582a4f57
SSDEEP 96:i9HUwNgp26X3wSviNrqwsZj/9Ovp0yNApzWyzrd3ksbb5EYBzpH2LG:yHZgd3wrdqd9yW9BPd3jb5d7MG
TLSH
T12FC1842954D2C81AFF6116F668D64F523331B7825C8B1F87AAD4987EB30B7D26116313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 16df93207f8d801c6edecfa8295cab56f0b820eb7d63a6a94de2215e48fea62b
MD5 03acc37fe79301142f8da6322c9f8de9
SHA1 181ff48f7c611bca8345d17c820f1ddea71defb9
SHA512 f5780582c646af4f13e4f14aa723db62478c43a17387166e706dbf38621519c7c7c735f6b2ef950d7a1f8395333769c4662f60831ae88ed57aa60d9a9ec1485d
SSDEEP 96:809HUwNgp26X3wSviNrqwsZj/9OvpkyNApzWyzrd3ksbb5EYBz6H2Lz:9HZgd3wrdqd9mW9BPd3jb5d0Mz
TLSH
T1AEC1A42950D2C81AFF6016F668D64F523331B7C25C8B1F87AAD8987DB30B7D26116313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 985e44e125702ab07cf0cfb7556c0b220a83b441fe97f3072e871330a3f6ac39
MD5 8711d917f37e0ad83986bf7ad723ff1f
SHA1 36b78762b91fa293d81db13b19fbd981838f0d85
SHA512 975a2e47f6771492bc2b3a85514aa8157cfa1621b279c561aa677bb03316001c832505cc1c8eb81465e81679177e9285a7d239b056f9c697ae1c9f0a4e711020
SSDEEP 96:A9HUwNF326X3wSviNrqwsZj/9OvpeyNApzWyWrB3ks5b5EYBPpHaXt:EHZFb3wrdqd9IW9BoB3Rb5dTAt
TLSH
T11DC1732954D6C81AFF6406F668E64F623331BBC24CCB1F866AD4987DB30B7D26116313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 888fdca08948dc314ce24793bf44b3e635e8a8903397e71bdf82051357b84017
MD5 7f959f8b9eaebf0f7f45d060fb3f39cf
SHA1 b1d9c832bcafe0ae808fbbfdb7205c578ef0144f
SHA512 3602e98b5c354fde21a6ca133c7464e5b4bff30f53114ed4fecce1a3073998932f4176d93f0ff76d99254a52a142fc870ad05cd7d6cdb64fdc945f429ab1f3a1
SSDEEP 48:YALlq2hSrhKhGhraXYfo7zs8Agmzs8h/s8kFs8APs84Ps8XLFsMz9zsZ+s8ufsPG:DNI4wJaIao3AesDzGdmHPrMiDf6
TLSH
T157C18BF7C3E8856E891156F5A7156F1FCE2D0A18432D3C66C8D4AF1B93F2871D21164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 69KB
SHA256 05d57974cde02932ba0abb4d546bfc9c42b1a0b03866b02042e6649cb1578134
MD5 4d74a55443b677d40573f26f07fb861e
SHA1 962a70317c62a0c2d3b595960cc760b440f74dea
SHA512 5551858061c27c2a65f7427690ba66f8abef1e442b0669389fd7ace9988a47181e6cb78b7a5a4efcb37f7a14e66e69173eb14fff10d14dd8a680580f2aa4a486
SSDEEP 768:GjKUy9ymUBg5F8dyGvZm1BCaL1NYOIoZcYPr8ZU:dYrW8dy+iBCaBNYOFo2
TLSH
T17863C0F763B2897E9A115AF59754BD2BCEAC0526171C3C628AD4BF47C3E2032D14A60F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 60KB
SHA256 36312d220c8fea2b131c1c7ef739f4c411557a89857e36827aaf7efae5bc0da9
MD5 5119271b5ec02361e73cf26565ad3822
SHA1 4ecc98595e7a721cc930d1faba53ae0e463c852b
SHA512 2ef509e4201342b29043442907398fce8af244ab07959523c1938aa0a4ec70205b038c9adc0e759e5fac7db9964b8d066601c253536f3d243002394bc402c858
SSDEEP 384:DNI4wx5Pwp1ENA0n4TedBeLsFiNOeLJPNVpjmeuDefSejfB/J1oJFkzn/STe7ZQw:0sAEELHymUBg5k8kFMEciRJLQqt+kDf/
TLSH
T1D553D0F7A3E28D6E99115AF59B147D2BCEAC0529471C3C628AD4BF47C3E2432D24960F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 70KB
SHA256 028a3bb08bafbe9cf7c17a4f0447d502d7021ae9a2ceed12e1106e2a19308f7c
MD5 03668e84077ec1f23959ba00f42668bf
SHA1 54ad282d648c20c69a7e7f233c8a8aa02efcca86
SHA512 7e54280ac1b7be865439669cd960668e87ff08609ad41f7fe189340ac441d9d869193595e040186946055b18477e35faf375fd281cd6e056cbe2cbc640304c99
SSDEEP 768:ujKvp9ymUBg5F8dyGvZm1oCaL1NcNCoZuEPrdrq:7YrW8dy+ioCaBNcN3Vq
TLSH
T11D63C0F763B2897D9A115AF59B54BD2BCEAC0526171C3C628AD4BF47C3E2032D14A60F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 61KB
SHA256 cbeb7e31dd83dfb817811a6f87ea8b4439979a8fc3fb20785b2e3f018e9a39f7
MD5 4b49d13adfec848f7ae0cd793f5d6d78
SHA1 2ce5659696bf65587d72f81da9c20a8fb5c492da
SHA512 1b8b1260a919bab06f8e644b694b7bff60b11fb6f98b4001f3ff6946cdde3e3ab61cf82521cfa184d8572d24ba17ce403120a5fb8a230ec9bd97c13f7cfeafb6
SSDEEP 768:I9FSv9ymUBg5F81yEvZm1KklA16rfbO5TiVPO:BYrW81ysiKklA8rwT5
TLSH
T197538CF763728D6E9A155AF59B54BD2B8EAC0136171C3C628AD4BE43C3E2033D14A64F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 73KB
SHA256 2fab4f3e1a960188c13f68cc2de2178d95e08cb991aeb73413561d22ed4782ca
MD5 1e5f405cc2677e457b896a02ddc0586f
SHA1 9c74f8976c7b68858333e6580fbd5abdd0344a20
SHA512 e2b79c66bfde4d29ce00c9a0c8b429409f1a9db7a4de75fa06e1c72beb66fef5adbb92da24bfbb58e33d6a9306d9916964752c03f5fbf205758342f9b12968aa
SSDEEP 768:8sAEqDymUBg5b8VyMqZm9gyPAHlr2QOFp7WMn:CGr48Vy5ygyPAFyXpn
TLSH
T14973D1F7A3E2897E99115AF59B147D2BCEAC0525571C3C628AD4BF47C3E2032D24A60F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 72KB
SHA256 221d917a3f26f0d1d199e02890dc38146ea4020cc4b02f69b864c4906caf67dc
MD5 e3be6f60c428007aea2841ab26cedf6d
SHA1 99519ccf3d8a623cb5895e9145ace296164f1497
SHA512 1a274ff7da6f33eb0fdb6a514a71e91c71c4d15726455f0b78bb727d3073a108a138cad7301e3061dad9924483482805d432e43a475e7bff23a1a37fa8fba620
SSDEEP 768:SfQ619emUlg5F8dyIvZeqwCaC1CvhyefrJ6CUcx:AIrW8dyQzwCaWCvhJ11
TLSH
T14173CFF363B2897D9A155AF59B54BD2BCEAC0526171C3C628AD4BF47C3E2032D14A60F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 70KB
SHA256 0282c69df22102f6875427beb500a086d9207ce8f496939cbceb9ccc0d6ab755
MD5 fa6c9a9969cdc44302f1228eb9b2fad3
SHA1 70a8d5575d377d396de6beeb74ecff1330a9ca84
SHA512 dc96a6049d09b73605dc8a3cbf0bfef2bab8b7b5713373b55e3da280318293bc3294568a5c1814fb1343d52c5bf01be7cae557aeefbf638af26ecd546fcb7001
SSDEEP 768:I9AE29ymUBg5F8VyMqZm94yPAHlr27OFpUmMI:5YrW8Vy5y4yPAFyIpf
TLSH
T12163C2F763B2896D99115AF59B54BD2BCEAC0536171C3C628AD4BF47C3E2032D24A60F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 13KB
SHA256 2b08dbcc841e49a461fcabb2e2220d399cbed2b869fbf42591cfa83ad5f3e6f8
MD5 8c019fd88dd378c1a59903bdf48eac09
SHA1 1294d71293301572c0f11b77dd98c1f88fa67e53
SHA512 a338c7d11d213f20da1223477049044689603ab5d8059787f3f6fc7b123e884cac1fc2ae4342017eba67f0e6b1da27e33dc132af623acb203b178e02ec10fbe3
SSDEEP 384:uENjANmesONMHKcGAOJZ9GDVSL1scRJDhCB2/Fl2oVbiNfRRhaXOCRHwwDIjkSoL:JeIxoKLQqh0zGtnNk/zHU2dcn0
TLSH
T113524C6BD77EB8AB14BD0E7B1D58BC451D7AF435019260F4EFA7826CB0858F30A1E462
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 14KB
SHA256 d83721e9f4cfe9746d95acc52870703e2bd5c82796ef43d948d126632288bbc0
MD5 d427a559b66a074893081e5cc7fe12b5
SHA1 b3c92a8f6945d4ace9d73fb11b3b505be2b31129
SHA512 b3f285c2a4b1793e80f78a048ae7ae387c48379890b39101109ab4480291c4b147be90517bd19f9a45fb92b8039126f46631dd739d56bfc5a27fb927e343177e
SSDEEP 384:S8fmAdNeUONiwcGAOlzGDw5LosxRww6Apy3FotkdVR8OiX3c2UYhaXO0/jhQwDIy:Sfcf+0Hzcd+S2snU
TLSH
T15262806BD7BEB8AB10BD4ABB1E48BC05197AF435018660F5EF67826C70D54F30B1A076
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 023ed4f0909b596e6b17089cf77eaffcadbb204578ef00d7728b69f8c8cd553b
MD5 dd819ccfd3b785fb1f541fe9384b60b0
SHA1 5f135ac14837c44d207d4f7b95588093658793fb
SHA512 222dea88f91ae238487a11cb746f24d7769a431410c2422007d1f5f738e985ed3c41193bb70e0ec1b6f3106bd39f9ef420dff5ee68c94fcbdeb274ba55336d04
SSDEEP 192:QRtcBzXL6eyg6DIv7rpAPRp23VjvuV98Hsb+WNsonC44LG42o62vEaTIVyIsnAU/:QRtmzXeBUHUX0vG6ww4h42P2saI8
TLSH
T1B552D52EB924797B5CD7C329F926771BD7F6102161842E88EAF88A3C14EB6CD2217447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 a47de9aabcb44399b2e34e431d80a6625369fb52521ab85ee2311bf8c87ba101
MD5 df2d6481230e37699ac06721a671ff43
SHA1 170b9574a5c88ec49244a84a6cb09cc35f52a158
SHA512 4d0f2e1b03657c43d5df01db1a8754b0db4bd1a5d6e1e28abed928d6e5183341183581203e2ab2aeb06a04a019ec2a657755129fa9bc38cefe60bfb935d78344
SSDEEP 192:XRtcBzHL6eyg6TIv7rprPRpP35yNf98Hsb+WNdC4V4By/4I7G42V62vEaT4VyIsB:XRtmzHehUHJXW6wB4w4x42w2sa4e
TLSH
T1A762D62FB814797B5CD7C229F925B72BD7F6102161842E88EAFC8A3C14EB6CD2217457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 cf7ac17322b80fd5cecd041a145bddf733708b1c960d5f03f05f777893ee65d2
MD5 4067bbf39603f2624cd36acbc0496a47
SHA1 4323b495af86e9e79a987a14aafd95c506555b97
SHA512 9019a7b15464f6a80fdbe22f34926b2634e9d58bb13555dfb002fe7ea764bde3663e85b0dc59b809110257e3b91bda8a8d50c95f945ad5d336866998f9f6964c
SSDEEP 192:XRtcBzym6eyg6TIv7rprPRpP35yNw98Hsb+WNdC4V4By/4I7G4GCQ2162vEaT4VK:XRtmzyjhUHJXV6wB4w4x4c2Q2sa4e
TLSH
T1A762D72FB814797B5CDBC229F915B72BD7F6102161C42E88EAFC8A2C14EB6CD6207457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 03973a25da0021eab19b8f1369a5523343654f3887234a1e1cc301245a48728d
MD5 e96921d5ae30116aafe48367f7ac6695
SHA1 c6641ccac61c68d82ff32eff425c15feb5074091
SHA512 7547cbfa0fc206b66f70451b792b574afeb0e98365fa6e0b5000e8553976425c99b5d9d4c5ead0b18d87bd8ab8100bb185fc97363145cbc0d2cc4cf9b3e8d865
SSDEEP 384:MajIf7KxkXqKf/pUZNCgVLH2HfgslPa7pLuLcifqrXODID+ErU36SHG6+AwTlTNv:MKIf7KxkXqKf/pUZNCgVLH2Hfgs9a7pb
TLSH
T1A1720B777C4C9E7B0F94C6C8D8167E4FADB6024A65DD886482FB982A03D4BCF114A1E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 9fa6bf91af2c40e3b71fc579f205f4ad0474fc4ff6416c076a95e970f12580a9
MD5 956468d577bad77f97a50d987bf3e203
SHA1 e8bc21dcf4ea5809081e393133e9b00639dd0f1d
SHA512 3024a3b842099f9be970fa5cd91e8330df86fd87d03d4f8888c87bcd787e7083fac854dea4c97ec5a1c3383596eadc643d86b83d27f8a9f2d78190f3b39cfefd
TLSH
T139B01251C002D541C01703F411C619883924EF10CB15130193E1AB75F86A1904014151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c687.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c687.TMP
Size 96B
SHA256 eda99fbe22cb6973b11b24b6949d3dcce7c4336d97defb565d82488d8ca70dbc
MD5 b81fdc661eb13c9489f511cb76defc3e
SHA1 6ea1ec354bedb9565154cb4f4b11ed8cc10442f4
SHA512 7ca208bf6e8682592870237908de53bab139c5df7f44b82bc33ed246cf0482de3fd7a2b112177a11461a32399c3a179aa4982f6ca7097a21cce80f2d4eeaa535
TLSH
T18DB02228C2032202C00203F02CCAC8C83220FF20C3038323A2E20F23CC202B088202A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 569109db7b5bd38c218c18c241adb032bb88d6695c4b7870ff739a5b07351959
MD5 a282ae1d8fee841b7e7f8bf6d44feafe
SHA1 26bacdff099490f32ce7e857cceaca702582197a
SHA512 9d81e8c20399b317c58641081fc92f8ab1f279e8028171f58288af91cd62fe455a5bfc6ec1623f006142443bda8e010a77968f0681fe1c6cb785452ad0f1aeb0
TLSH
T10BA002A465505002E10053706195934163517C542555031268E02987E9A06964111211
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 197KB
SHA256 edfd5546638e92b39b1f9aa82e66c2925991d37f84a8c6faa8049395cd4c8830
MD5 93145024fe8e2573729d3beba13063e1
SHA1 cc613fed41c52fd3532a2ef9a8998965126ae51f
SHA512 9b79f5301dc950b1bc2d58a2ba36c0aa008fbf58d40de3fb685d38f36aead46e1a735ece2d732923765c398b815ae4ff1f7ebd8d9d4b1d06031506e2f8ca3f61
SSDEEP 6144:+2XC1iMRwOouzcAGrJfIrOk0HOGm/SFyEEx:y3RwO1zMrJArOjuGdF2x
TLSH
T1C41413F55D261EF76CB637E036C2184ACDA6634FE07EADCC62AC261B51C12896B73470
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 195KB
SHA256 a7e0927e18c1a7970df9acd782cb38b0d5804f95d136c48bb00162f306c9782b
MD5 861695d01a3370450e47df6464477361
SHA1 71830fdf804b67125a8cf7d1ce5d0261cacaf97f
SHA512 2e93544493709876fd7159192d9662796bb196a86d5cc8071705693da2158be187f6b40316ee78126592b2f05d4820669a8b3b43af0449700eacc6613dae5747
SSDEEP 6144:N2XC1iMRwOouzcAGrJfIrOk0HOGm/SFyEEx:B3RwO1zMrJArOjuGdF2x
TLSH
T1441412F64E261EF768B636E036C65C4BCD66634DE07EADCC63AC262B118228517A3471
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 196KB
SHA256 0916849111c0375c5a08af39cc223db92221f2de398fb360274eece9ce906465
MD5 8568c94fc7279057bbb36f025f8bc8d9
SHA1 adb1232fc2c568c5ccbc7ffb3fe898a1a96ab5fb
SHA512 56682cca39a59e7510f6ec76bedbdf640290dd8f45af64583ef24febe6a0d8ca24bb457ceb9c37a9cf84589438d83106cc5d052bd02adc819ff5364908a6b844
SSDEEP 6144:42XC1iMRwOouzcAGrJfIrOk0HOGm/SFyEEx:k3RwO1zMrJArOjuGdF2x
TLSH
T1471412B55D261EF76CB637E036C65C0ACDA6634BE07EADCC62AC261B11812896B73470
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 778d634ac1aa1a0fdc8f69f3b83699dbf9a87de73dfb665a90fc42bd9a678c96
MD5 a94facf6a401ea4da5155ec52224f7ba
SHA1 e1b5b4e1922762bf92cef0362162a7315a122351
SHA512 0cfaa45891952b6a4a49b0627e940d2bbb5b61f04148c8540ff47af08091bc0b928fdcc6ccd3d428f1c409aa113cbe925a649cb00fd356ac304dc5f53ac7aa8d
SSDEEP 1536:gucYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3b:j3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T17E9302BA5E2A4AE7957E469176AE7809CE12130D70AFA8CC316C539D21D01C92B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 195KB
SHA256 c3bd1f2630c0d57e5a292724d0a592d1cb867557c8d96cfe3ff4f8d160670d65
MD5 294ecede7c839ec077f2f401478b49f1
SHA1 5ddea09ac871cbf1e6b08890b0ff0042d660d385
SHA512 8e4f4af3fd0021c9e6d7faf53bc9cd1aea0286b3da49da28945487bc6d3df82b3ddc61583929f18b0a8288a66e352761b1841c258ffa11cae590722382ea6087
SSDEEP 6144:+2XC1iMRwOouzcAGrJfIrOk0HOGm/SFyEEx:y3RwO1zMrJArOjuGdF2x
TLSH
T1661412F64E261FF768B636E036C65C4BCD66634DE07E6DCC63AC262B118228517A3471
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 196KB
SHA256 b6f7413fd26a657b7cf5b64a6f195a8934fc94829cc8dc1516e19912d66fb367
MD5 8da5edd03e321e4babef5c157e970577
SHA1 e5b2d18cd778c05df2d7c202f8c1e5b47a32b41a
SHA512 a3395a8f8340aa1af88e2de080a679f2221de99860b0df42e68a0fea59077740f91e19555a426521b5a857249b681d3cdd926b3bae6e98ad668030ead4f82cfd
SSDEEP 6144:k2XC1iMRwOouzcAGrJfIrOk0HOGm/SFyEEx:Q3RwO1zMrJArOjuGdF2x
TLSH
T1D71412B55D261EF76CB637E036C65C0ACDA6634FE07EADCC62AC261B11812896B73470
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 da2745d23be929954ecfd94c3be5fb97ef715b5e72d1bad7780651729f266c6a
MD5 47e3d845f6af23f9308dbf8eb94f8a38
SHA1 c846984db1eefb881e1c43f5d17913da2d21501d
SHA512 10b70b00123a9f7cb946eafaa98a1c9800feab9076564b2ebca055c8bb31444eec2a2175bf294892a80148faeae0478b34cb2f8a672eaddafb7348228b400f50
SSDEEP 6144:xa2XC1iMRwOouzcAGrJfIrOk0HOGm/SFyEEx:xe3RwO1zMrJArOjuGdF2x
TLSH
T1733413B95D221EF728B636E032861C06CCA7A38BE03EBE8C71AC765B55852C65763471
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dffc23e237400efd661d1c30cb24b84d406666a0006e01d47c71dda1c139dede
MD5 d973725326969fa61f4c23d3ae69271c
SHA1 97064cb45ef73fc0983937604b28ed87d3c663cd
SHA512 d14168136aa3f83bccdc1401e1e3b177dd3fceb060f02d3d7a87f8bbc1c7f0f9388307aef3bb0e879d276489965f6c80f9d0b32c40ec3a6dde330f4f98e0e93b
TLSH
T106D0228C8380AC20CBCC88B220ABAB88282AC8208202C3082CB2080C0C822C2300E082
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 329f09584b2d1b595fd09386d31dbe1eec1906f7d450ee40fb405617035e9b3b
MD5 c89978251aec9d90daf9a199726976fa
SHA1 72d52e478c5ea1ddaee134eed8228a6bfada9c3f
SHA512 898671bc521bd5dc24824557f42f33f18007179c03133a4c176d62af1a4afb01dd96179fb320915cfa4fc4d3e62c77cc770436b76ebeb4b092c4a313f9100f39
TLSH
T140D0228CC300A820C3CC88B220ABAB88282AC820820282082CB2080C2C82282300E082
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 840f718afb867f80568fd0e7ef0890da1d84900e0bb63a90ccbf46da0c36cb6a
MD5 5804fd857b01fbb223dd469230af98d5
SHA1 12c02014d0457c3019127882ac1934ccf05569a4
SHA512 a647a611c980abc06b6add2ffde1fd0d97b6d4d914f7d000b7dbe98fc9d10f6da7c399a3b0e50128309f80244c0cc76a6acfacd00cf34f96c0137cbfe4688dc7
SSDEEP 96:sa2viEDWgIsc2b9hUdHWU6W6hfuH9EOx+WVoMfm+uecpYQjsC67JwUhgNVDB:sxvuvs765HW6+WNGYzxhgF
TLSH
T111E1C7536F28687F4CCBE11DBA267B53E2F5502266D5198CEAFC861C049A7CD230781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 26KB
SHA256 05c5630336bd0b2482f22ee575d4e116b62852d2f6c1214ccd1f19c5d214aef4
MD5 5f7ad3dbfcd86d3b786b91e1f23b1654
SHA1 1d4d875a2bc7eab6f4482d356d127f797e52c98d
SHA512 30703ed83f34c7ecf40aaa5a6a98a46c02a3e80c4bea14f6bdd41f7b0a7ee5a395ceafbb55726a7bc6c19e02f1f900084713b677b42c0f931e8bb27d9f205843
SSDEEP 768:LGOGLfJWvFnjP8F1+UoAYDCx9Tuqh0VfUC9xbog/OVY8LlSMdjwroeE:LGOGLfJWvFnjPu1jat8LcEjbeE
TLSH
T155C2FA3B640CCB7E5F801E9DDC5A6F9B3EA802C796988D4047FA954C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 397d05b15df80aa810904072f4bcb5acf6c482be6704c44be01f87067a4e4805
MD5 83bd4d6652857751bc3b0ccbec7e42e8
SHA1 26311e10cb1984a8a101862820e0ec25bff22e25
SHA512 df0066dcdc78272337e8c55774e9778892e286c5e39ec8f8523a8134088982614ebf7efa54766f42a6976e92c91db1ee2f633e807da5331b3855dab76301cc74
SSDEEP 192:zBsNP6TZ0Z+QmiUyiLl7b+jsOVOokM1EqbcS9qKfUO:zBsNP6TCZ6llX+wOjkMqEHUO
TLSH
T15512F93569689C6B4DD6A155F48B36A38FA81077D9853F88E5D85F0C00D779C3B0B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 db5d1ce3c913bf98865d171f5e6b3684e6ecd0811360755ea5744ec639f8fb32
MD5 3c0b6ab31bc4e85836af19249545d934
SHA1 ef748ee00fb6afb6d2d29c314473c0144dd79595
SHA512 989698ee61211854d74994f855d072b961c3c1f8f892e5699a4ec32a220534c77c92b6453f9d90284919019c2598c0a84348ac9af80ffe328365d8a47e325916
SSDEEP 192:YON26TZ0qQmiUykYlab+jsOVOoFo8pgU6:YON26TCmalg+wOjviU6
TLSH
T1F502F93579686CAB8EE29E45F48737238FE8107BD9C52B84D6E85F1D00D775C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ecbbd44daca887ab81d9418bd56c33f0f8b72fbe270d00714de84e790ce20cc2
MD5 3fbe3eb0f4353a8e8646bdc2968cb6cf
SHA1 8acf2509007707aca7eb58ca54a36e7360d2945e
SHA512 1f0ccd590f2183453cc85685e89710fb74762d7724988808ef81d61c1878fa8a359c217ce98de325f9bf9c99b66099c6a427ea73f212c3510b1d9d42116f1c2a
SSDEEP 192:pONe6TZ0FQmiUyuYlab+jsOVOokM1EqbcXFqKfU6:pONe6TCjylg+wOjkMqVfU6
TLSH
T1B912083579689C6B5DD2A155F48733A39FA81077DD866F88E5E88F0C00DB79C3B0B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 8b8451c5c82e6a35bfe40a5429a742f85a4564c29a737fd4d8d5201f1525222c
MD5 ebc97d915d916275938d6761675c50a1
SHA1 774850fad30c5c92e9d1a77c8f18394b7efbb328
SHA512 d8bb086c8476a17920d73111e36a6588ad885760e863f9e68897fad611c5ba93f9a1bb2355cd7ce8eb7d94eca9fc8a7aa895034ef5b6408501d0dd01b279705c
SSDEEP 192:zBsNP6TZ0Z+QmiUyjLl7b+jsOVOokM1EqbcS9qKfUO:zBsNP6TCZ6wlX+wOjkMqEHUO
TLSH
T18212F83669689C6B4D96A155F88B36A38FA81077D9863F88E5D84F0C00D779C3B0B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LangDLL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdD615.tmp\LangDLL.dll
Size 7KB
SHA256 b797e5a7de359c0c934cddef8e9d3a78e6d3d68e6ac83d2ddad915770cbace53
MD5 48125e63f130d69025cd2bbf9f3b0c4b
SHA1 e3923a75ed00cc53e2f0b3c1843598c7c1ede79f
SHA512 5b411fc88035eafee2eed3c4e1b8c14fdb09ed09ca275ec1492d7a72dcf9cf55719dc34e63c00ca64162a455339658efc958dd2abb6dfe8a363f2f24ff3bd5be
SSDEEP 96:BLIwtgI+Wdk6guTxZlx3ojaVgmR6wP3LtrlKVNtEc+InoAhrEoUK3EMbqKh:J89uTvlx4jhaX3Lt/ch4oZ3x
TLSH
T1B5F1C70E6AC010BCFD6FC23A8D3A42157BA1F521076568DF269321553EE4FE76E356C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdD615.tmp\System.dll
Size 23KB
SHA256 4bc489ab81c6f1d7e9cc6c2e8a3157183e7b0ee5199b4c6e8044aa32da2dea1b
MD5 8213548feab7394279d2712fc12126f5
SHA1 1ada5c813c36c66789b256da1ccacd9b85a97b4f
SHA512 3b5f96cca356bbac7a87bd2695e1b95b1c8fb6c3f059e8a9ac11724708c8aaad4f7e3e404a9be1c7354b03414b18123916c2b4772ceb033a91a8c48ee724e2a8
SSDEEP 384:ecybqzYqKbo39DihgonO/U1j/HCD3Zn/MUcD9RSSvUW6OEY3yW:lybqzfko39D6gUOMhKD3ZnkjRSSJ6O
TLSH
T1DAB23C0B3AE5047DE446C13EE6671226F6B27C412B11E4DF2761B13A3E75BF01B39698
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdD615.tmp\nsDialogs.dll
Size 13KB
SHA256 7ecc85cfcc4bde6146ed8e0067341b1a56306f94893702ee772bda8725712aeb
MD5 ff6b5961a43ba8c36434c9e707d4e6a8
SHA1 f73efb0ad4f4e9f5c716df5168f4168c2cb01ad9
SHA512 fc1da79bd1725e240f0eb259e2ae7cdd976e33f8c9b64083c9420d9a64aa2bde9251294d8cfeb70e5b93d73517c26594c04c8ebba80d9529235b02d52b0a72b3
SSDEEP 192:hVoR5bH/o9gAXCI6KW0fnFdFlCaYQZUhU+Cg8++9KdYI:hVQZ/omAh6uvLFlZX++9Kd3
TLSH
T1C252D7132AC100A9FC5BC17B99BB55228ED5F6100B5131DF026662463D72FE57B3D9EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmp-ex0.xpi

Path C:\Users\Admin\AppData\Local\Temp\tmp-ex0.xpi
Size 814KB
SHA256 50424f9de888b5f8cb2636586191a636129fe0eb10a3964e055c90d93d830328
MD5 be39b5b350a0216d93ae6fc4f3af0a02
SHA1 8cb29abbc5bb103e2a3a0883b4071dfaa47f0e39
SHA512 22545d78eb7f3bfe5b98c6314ff898daa3c6057eb85e81ee22e430eed21f4b8a7db3e4d4c258068e6840bdaa7478fbd9edd82bf693c832619f2db3fd2418cb65
SSDEEP 24576:U6Noy7RHaKNi/WLLSkQkMqCzVMr4MR3u6ElLgajislpy:7oaH1mWLrSqCzi53yjiqy
TLSH
T101052367DD418C09D83785BB396BB281C1BA0B9275C8F197AA4633C85588BC16BC3DCF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\addonStartup.json.lz4
Size 2KB
SHA256 1865b927638203d7cd9108716322a10284704fbec046aa792a563b51813dbdfb
MD5 2b07bad52ea6147582eb6c1d4f844288
SHA1 e6c0e1b3efc13305025d70a36d325834d7d88101
SHA512 2cb016958c5518b702f07388c98e3a486f90e26ef432a3cf3b313adc0134ca0b838ab0b9f9e79a145c3ae00eb6c679e914009a20107180b72df0b4c086859596
TLSH
T166514A804C007ECA995180069AE27BAA96AA3C19A388AF00F0D8A13FCDDE48796513DD
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\datareporting\glean\db\data.safe.bin
Size 82B
SHA256 0c6c1246ff1fcbf1ac16dfe53be24ee7891de62a4bfedeeb632faa7caee262a8
MD5 fafab26d61e6b9bc313fa05b3fc05aef
SHA1 d34798881e7916868b10321126ad51ed75dae09d
SHA512 92e04ffe3531b5fa71a51707d7d0e69bfbd9d75eaa57f54f208f0b083701cd8aca591be08d8d6e1e3d4311c647aa94545920ebde4e1c1628dd30cbe86c6ca14b
TLSH
T1C7A004C0C7F0D400FC43373F50004304034D55100571D003C4501310F0375351D35C03
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\datareporting\glean\db\data.safe.tmp
Size 82B
SHA256 ab3444dda5066eb5063be04eb18906e6f558b01ec92f80aab38e2a9ead5b7a84
MD5 e335604ba411753ad562fe9b65ebd9d9
SHA1 a9c01e731003b58e911d0e54ea9b682fa10c91ca
SHA512 c1114b28224a939010d495ab17670c5c43a2f126fe0a6e1b96a09c4396e65d6dcb3d20580b8de9713cd8799fcbc323c33b683f8122b02e02c59efb24510d9cc2
TLSH
T1CDA004C0C7F0D400FC43373F50004304034D55100571D003C4501310F0375351D35C03
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\datareporting\glean\db\data.safe.tmp
Size 82B
SHA256 39447608973367d2f9deccd6b21b3bf4bda73b7405d0d153845b180a5ceae6ef
MD5 765cfb03c5a36cf59417ffe8d584751c
SHA1 536531c854be4b293fe029c06c7b48a452b7d8c0
SHA512 09b1df574279fdd1db7f7a7a342610c4d28b451ffe6aa73b875b08335a43a3de0e8eef5d0411ef8521ccac5e7bbca789941f988abea2a11ead2264735b46cb4b
TLSH
T16BA004C0C7F0D400FC43373F50004304034D55100571D003C4501310F0375351D35C03
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\datareporting\glean\db\data.safe.tmp
Size 82B
SHA256 9934d47707fb909b6149196f695ca44da83dca6280ef5cf374ce80d3267f4e75
MD5 2f8f6019e86cdd4d6c0bf4c31f7a2f08
SHA1 9ebb64b2ee0c23be87300b30fcdcd3c1a1384598
SHA512 e76569de7ae00bc6f4c99e1e1d5d1ef781d7d552067dc30dcd39ccb7c1890e34acff7fda5a9bbbcb9e73fa57c594ffe3b5f2cc460d6f93c5c97a7b97ea95bda7
TLSH
T1AAA004C0C7F0D400FC43373F50004304034D55100571D003C4501310F0375351D35C03
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\datareporting\glean\db\data.safe.tmp
Size 82B
SHA256 b9382d692c3cab8780b86342e5fff6ce78d5b62969767fb57643f4f3b700fc49
MD5 1c2b435851c9e749d7b1488ec1fddcfc
SHA1 85af71ae8ac6549f4f9eba6930d0602e6ef1645a
SHA512 897693f470dc8aad437fc895e4f195ab3717b89a0d5971d7ffbcf961881cfca0b78bb338370f7eda6a6e48fb2f102ce0511f113c2743c7de995149f2f9e2edee
TLSH
T121A004C0C7F0D400FC43373F50004304034D55100571D003C4501310F0375351D35C03
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\datareporting\glean\db\data.safe.tmp
Size 82B
SHA256 84e58efe7002b3979bd085be539f0b77c4e4088cf36871d2064b955cf8e49c41
MD5 d761cff9dabf6f4fe73363c79fcc9afd
SHA1 0c21d46130d5fefa768b28034c87139463b367ea
SHA512 b6f5cb36e9ba3a698045aa5e46f567864bce095b43d5fa0b1cda3893d8a8f196903f35b2971d127a6c41d1e3550ddc40f969c619a403dc30c6b795c4e983fd00
TLSH
T1BEA004C0C7F0D400FC43373F50004304034D55100571D003C4501310F0375351D35C03
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\datareporting\glean\db\data.safe.tmp
Size 286B
SHA256 09ab458ce2f040ac773d40eab08857b2f00dd050ab4f11d9896fe2d6dac69122
MD5 ff8082b858b3269ae499bcf5e76512e0
SHA1 6d497dc7b5dabac93f58f182b4089eb177597e75
SHA512 1dd7c020b2af29fc342878148d54698bbad877b78df9b663008def0798d7b6a80b7c311699859e9383e722411255e68169321a7c5fe559be0abc9a04c2e28dc8
TLSH
T11DD02305D1A04C0CF8815D374BD11FC01B30304244D7FD03667CD2099D1B310796ED07
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\datareporting\glean\db\data.safe.tmp
Size 1KB
SHA256 6b0a846835b081da36057a394d31d9497e3ddc4c9af68d43cd425b3df5af1b8c
MD5 1f8ce9cbf7aac77fe811331b4f496f2b
SHA1 1339cf853c1a65bd998547e5ffbf6a6923cc0002
SHA512 d63c79afd1f5b3bf6a71672b4e79487218ea23f6d3a383b29273c07521ed6ea395c1425346f0a0323bc5c81d4dfbfbaee29f1d60d10c48f511457f6836a3ea5e
TLSH
T15B217B84E6585539E0C8C73BDC965B514F303415E88FBF30312C600C9E5A72932DE83D
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\datareporting\glean\db\data.safe.tmp
Size 1KB
SHA256 9e95338181c4f167779f8ca0b354ef7f9625cfeebec0d8ab7d1ab29390d7d964
MD5 46e745783038b37b40b2acd7d3bf55e6
SHA1 b629782956cc7f7930ad9ece2985e9a0d0d53d94
SHA512 1ebcd3a7a2a4bca1d32cecf804f33061f75c6dcf2ad151f9b46f3e45b46593ccfc23173fb8f08ef462ace1628d127c7319b254a9a493c2558445109b7a7e476b
TLSH
T1FD215984EA585539E088873BDC965B514F303415E88FBF31312C600C9E5A72932DE83D
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\datareporting\glean\db\data.safe.tmp
Size 1KB
SHA256 c00e7a387b0961fca4f8b6bd177ca3aa30538f3da7dd69443c5818ed0d7e70f7
MD5 087cf4da148ca0a2452877508e5de441
SHA1 61d666d744bf97231b20896606fa547d9e4d44d0
SHA512 2c6f3b9c5bc524bf8398a76c718e99402bb874bab93f62e2699afe12237d18690a37d7de145b00da37e70ecf4653f64ef1434c6cae7d7a33d98b2bb167e7fb8b
TLSH
T1E5217B84E6585539E0C8C73BDC925B514F303415E88FBF31312C600C9E5A72932DE83D
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\datareporting\glean\db\data.safe.tmp
Size 1KB
SHA256 c6ba5fb5ffaf89899ebdc81cc9f3f21563779f59e8ba8d6da48e9059d318ef13
MD5 0e827bbcec4422dc2c72565d1bfe53a1
SHA1 64859ed41b31bf4bb7447b11f9d19adcaee66f9f
SHA512 b20a31ec606dd370ead43930defde1686c49549fa3d9dae295fe46b4a45d0c67a457ea4559f11bf915861b8b7237f08914e0793101fb338a4a8c61ce280df1db
TLSH
T169215984EA585539E088873BDC965B514F303415E88FBF30312C600C9E5A72932DE83D
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\datareporting\glean\db\data.safe.tmp
Size 1KB
SHA256 46171f87d84f0cf79ffc234a61a29c91f2fb4e88a2467f13586f70cd1c8318b6
MD5 792ea4fa440485a0ea946d7ba8e40661
SHA1 634595292e6743471be023ff53235a3be48841c3
SHA512 089debdb517d0c74ad4845bd8c8cfb7a8e0f7f5601f2632cb40bb10623d8b774e23688aafe35efed07d96fc9c54619f49f615027159a5e1c9635a5029533cd76
TLSH
T13E217B84E6585539E0C8C73BDC965B514F303415E88FBF31312C600C9E5A72932DE83D
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\datareporting\glean\db\data.safe.tmp
Size 1KB
SHA256 5bd86c410a4abecec613bda6521131f4a27248c709dfccb65942161eb34391be
MD5 ec699ffd35098b659f7b9cab824a849f
SHA1 b1520a0deff2f482ad4eb690ac4c4ae54009b321
SHA512 7f279aabc8aee7271521e67be9e8b2ec1545aa27dce0064b5472814c5abaf25af3e32740b6ef6597e894ce2fe396d018a5bba62be06e028a174b3ab0817870b5
TLSH
T179217B84E6585539E0C8C73BDC925B514F303415E88FBF31312C600C9E5A72932DE83D
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\extensions.json
Size 17KB
SHA256 c1216311478e7ab4b1a3e4c4fd5fc1e22a57818c9be7f624c015f0e068ca6926
MD5 f7df158b9cef017dce09a9bfdbc803e8
SHA1 a573d9cb4b82dc50a1946010df42dffd1351cb83
SHA512 0fcf9f8fa66542943d06fc8701d8077e9e89192e21779df85343afdb6e01fa0b2c8b34dc1d854b2065a4e3d3de800a28cb846e577592a895d63bb9714b2b21e8
SSDEEP 384:Boh67ON1tPcn8TOE/Wfsk2Uj/7GoTeL4HsL4HiL4HEL4HC:BGDI8qh2h74G4w4+4i
TLSH
T16982963859589FB9394A66C75837BC84517D43ABE19C8C36B8AA8F4C11F827C4B7B10F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\prefs-1.js
Size 5KB
SHA256 9bc401f57b38d5821bc671d1ec737fbae83ff47a7bf5faa2de6cd5fb86230cda
MD5 66517c81c12a057c05973c29b3c6f97e
SHA1 86136fa32a8adf1efb4d8aea47971540c85cc037
SHA512 a7a636f90cf7f9d5aae3254b22ff93ae34e92b38861cd8e99d26bc0919fc99077d655ce6e15064009a168a79a54344137edde04b07c8c94f4679328afde82b2c
SSDEEP 96:xHsTnqGqwYtbzvzPzNztxtPpn7Hi28ij6Mi3GCBw8prri8XGS:9RwYtZz7HEMQGCBw8pCA
TLSH
T177C1142C91488F7F68B2377C6C68497196B2053B7BAF78CA10B540C4154CF7882F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\prefs-1.js
Size 5KB
SHA256 a8423ebb6a103e2778d7a07b6fa1344120572ebdb5b029dc9bacc9526b2dd117
MD5 6c5e5e939c87d532f27709327153d82f
SHA1 7af8d3c2142e3e53d5f2517e2f8b9cdd0ec219e7
SHA512 55f4306d1db33d7311efda719fea171919289bac59dc1e57631ecfa20a42f4524bf270782811f46917d6831c7114e347647fec412877531907df03b5273032c9
SSDEEP 96:xHBTnqGqwytbzvzPzNztxtPpn7Hi28ij6Ui3GCBw8p/u:SRwytZz7HEUQGCBw8p2
TLSH
T16DB1232891488F7F68B2377CAC694D7196B2053B7BAF78C610B540C8154CF7882F5AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\prefs-1.js
Size 5KB
SHA256 3d490f4211e76b7b96e93bb0aeb02b8e29e65628b8b0105e251048791525980c
MD5 91bfa7d906129cbb20dae798cc675713
SHA1 f32102d1c8eada626a51d6525c822e05fc5e9eef
SHA512 dffa4624644b68860c6cd6f3352703f7e9c3f11140a5d39b2230facae233ba89c31ee992a39d1d27ad416ec09f776e52e28ed033f9c9386e49a21034a67f0d43
SSDEEP 96:xHBTnqGqwYtbzvzPzNztxtPpn7Hi28ij6Mi3GCBw8pZi8XGS:SRwYtZz7HEMQGCBw8pEA
TLSH
T1FCB1223891488F7F69B6377CAC68497196B2053B7BAF78C610B64084154CF7882F5AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\prefs-1.js
Size 5KB
SHA256 eb47998f694a5fa5e01967fd602502f001fab448488ed04ada77a7c242de1692
MD5 7b7aee6d5afc2b1cf0da4d78850b0191
SHA1 7f139fd78790d7755d84883d4000ce866557a4cd
SHA512 8b8c40e897c942bdc196e88c244ff28b57494d138b47cb87198e803f41b0e88cb8a49efe337e8e0376ee6d6547714c6809176465eef5d5190b974b875009c35e
SSDEEP 96:xH5PTnqGqwYtbzvzPzNztxtPpn7Hi28ij6Mi3GdBw8prri8XGS:PuRwYtZz7HEMQGdBw8pCA
TLSH
T11BC1032C91488F7F69B6377D6C68497152B2053B77AF68CB10B640C4154CF7482FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\prefs.js
Size 795B
SHA256 996dbb8fec5fdb2f311916024201dffa1b13b72cefbc460ee40c4572a9cd5be0
MD5 b7fa4a3dcb2802a37d0f679d7c70870c
SHA1 eb9bc3adb945e995dfe49f92136dc33775cfa5fa
SHA512 c86ac09287caf650f069a61291001b700fe49ff882633d358a023d0dc1d367fdb8ccb90514d36405497d85826c1194611fe4f2e300b3e96db6730dc4e03485a5
TLSH
T15801F1950D444FBF61F53298CC4943D5C3B20675B45FB44026F880491254F3402F7AFB
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\prefs.js
Size 3KB
SHA256 3f4577401856e80b77f09b86730fa485892cc4902fcbbe4f15c7ef4f48ed1ccc
MD5 a13946cb9ccd7775198b0a866746263a
SHA1 33009de13daa300453695de0067bd5ce92f75ec6
SHA512 dad16f49cbcc7b6e4625dac67a86aaf11237ed0d2e2ed1b1f24e502c5e09806eaf371745c6b1fed78365c64a7020874067ab3fdeb5993b5bdb686439d6ee827d
TLSH
T17861312891888F7F68B5376D9C6948B1D3B3047BBBAF788611E54088150CF3887F69DB
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\prefs.js
Size 1KB
SHA256 0ca1e03dcd55bb89417c2cca880f9e7316c8d53a80a5d8d292758a99bdc25eec
MD5 c0a6cc7297d5b6b8a871e2655a67cd96
SHA1 3b88f0644370116f2df8739ff5b40225842b3366
SHA512 deeb7537bc0c9170a406522fca98bde217a8309ec6e9037d1d40aec2c2c1b2c4d54ebadc94f209b47047d5779aebe0b79a3a210b15ae9bc48124e732d8e742c9
TLSH
T1DA419B6586444F7F69B6336CAC1A42B197B34476BBBF68C212B44084150CF3882F69EF
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 616KB
SHA256 43a59427a48aa5ece0246b87bc3304b571b5189c939ab8c6689e651afc93b0a3
MD5 793b8aad457647201859814b31ff92bb
SHA1 d8cb476221f7fc5e36dc1bdb53fe0930cb8bf164
SHA512 35255c3137e7ca64671a3d1db9082a0a5d41bbfd6c295d2a865c0474659a30d71f8860518bcbc6aefef3e9d3a53a1926ad8b8021da15e9b9135496ab10f48723
SSDEEP 3072:XWk+qQnYCIAqdPmiydi5590EhZlWw7IUJhCKTZs/uzA3AAoELQPTV8:3QnD+miyc5n0EhHF7PJR5wYV
TLSH
T129D4FAE314A39267D1721CB3F38292BF3E1D827944AE467D662AD12CD76A8444FE5333
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 704KB
SHA256 ef381a2639d270fc683b5a9fd17a32fd90783b3282982182b4e42c28baba1686
MD5 54207e0f3b440699701394595ec51a88
SHA1 8c2286c7aa3881d1c3777964cd8037be1ed26785
SHA512 0bfd5c9de685a561c9e732e8a3223cd07711756e5323bfce40a4e98d5e1cc3823767cfbbef6cc143f684e1ebd14336c01f40c9016d5d116e608da4492496c091
SSDEEP 6144:YQnD+mMyVnAXEhHF7nJRs53y3xNV/6Ohsywml4or6eHPcHZeHv16uaZs:YQncyVnAXQFvsE3/6gsDml4orNKs
TLSH
T180E428E365A38163C5731CF3F78292AF3E0D857A44AE43BD666A902C971A8445FF5332
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cached-microdesc-consensus.tmp

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\cached-microdesc-consensus.tmp
Size 3.5MB
SHA256 d1eae15f5f30d9614e5af47c5f65b53c67c4d69c72a2d12a001a64c445020642
MD5 75ff6fc45a29852f789ff15d7752a642
SHA1 e1404fdb61d331a5830aa3324190e60648477d3a
SHA512 859327affae69f7683f006d58b67ed104d4fe9e09e547c1fcc33bb8b62f8f65f2696c53cb4b2490b75b3f20349953dcff6afe775bae7d4fa6a4796d26f653e17
SSDEEP 24576:z96xCB9NHJNyy29cOvFQdnwu/21XcwzJggg:B6xwNwyPlpmmQM
TLSH
T1390664EAD7124EEAD22A09DBE510FF3BF33F1715C2486B94296F88F97605085762093D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cached-microdescs.new

Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\cached-microdescs.new
Size 16.1MB
SHA256 b74e4b6d2667ec6bacc12c7e186c8233980f52c172ae67c197aa236fd9207603
MD5 4a58caa29d59f8486b414ad2febdf74c
SHA1 0feab179f127025d96355d32debf7d4b31c195a4
SHA512 829fcdbfb2b87416e678bd65f39be3d175950b422fa50442f1201459a930f38d11ceb872c7034887a8b3986b27fd75fc5a1c7ba3d7ea49583bbcbc6788a28ab2
SSDEEP 24576:b+VIVlV/pVPSG84V08VPVLlVpkX3VY5VcVrHwvVEO2VUa+hmlVl64OVCh5VxsDbu:3Fo7weud7+z2Y
TLSH
T13707AEEA44AA00C15D05A7CDDD2203C3DB144A3E4B5041A176ABF6BB7F732AFC55EA39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

firefox.exe

Path C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
Size 1.7MB
SHA256 0f047defeb6b80000da846331cec2a5153584dac00d30a239296c1b9acb31dc0
MD5 2cd40efce1fa800f8874d156dfefe1fa
SHA1 7f487c23150bb99f786b18fdbbb0c5782c1f7d08
SHA512 fd5260b37ab5ef8d73189c596a244b0de00ecad3af65a821fefc3115a1dc1de3caed3d7d4050e1546529b8cc7056a8993b833b601b7390a60f450dd07dc78a2d
SSDEEP 49152:LKhZgvFKvPv1VV5kHsdA1CyuhanQXXXXXRXXXXXfwwE:mm98kHsdA2p
TLSH
T155857E0FE39502DDDC69D1B1864A5221FD357EB18B90A9CB9B643B212D366F09F3E708
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Tor Browser.lnk

Path C:\Users\Admin\Desktop\Tor Browser\Tor Browser.lnk
Size 829B
SHA256 645eb795a09a2447336d187b169077289a0f806353fb1cbb2aeab62b4a88625b
MD5 5ada6cfddc4282eb71cb60fde3180cdc
SHA1 b501cff2b8689428652d82703e224c61fb1f3f55
SHA512 ee4612d40977f507521721a4f027dc37cee28991a9c9b76ab80cb497b8998c351b2f90b74629698b309ece265ddfee86a00a1b639adbef2dce828f586f020c9b
TLSH
T1C401F48207E71F0BE595C17341B3A778D13379440E4DF14D42C5E2050BB6624D61CF46
MD5 SHA1 SHA512 TLSH

Submit Download

1875cbbd-ec3a-4027-b2ad-e4c2de30a6fe.tmp

Path C:\Users\Admin\Downloads\1875cbbd-ec3a-4027-b2ad-e4c2de30a6fe.tmp
Size 2.0MB
SHA256 d31d082aa896ccda2e23ec2618148ee18aed9b4a79cf9ec549d18947ca66115b
MD5 11def7d12f7c51f591a865b6394c1ed6
SHA1 16bd17e59b429fc9abe926a0127fef11f836536c
SHA512 21a618abcadb92379c8be9dcc3aa66348d2e57895fd6d84304305e54c5f366680d4977e89990604de9d09f0665a05c33ebb12a9f3506273bfc5eff76287cd80d
SSDEEP 49152:NEpPC6ckJbVqQFAIna5NbkgmQ2yytAZmC5+rNfZP2cNhgS/WjuOXixo:1Vk1sWdAkgmQaaJcP2mWjuOIo
TLSH
T174A5232AE3E498A9D4B541783E16C74737717F218795D3DB17A6243EFC2A7C88C322A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/620-1298-0x00007FF8052E0000-0x00007FF8052E1000-memory.dmp

Download

memory/620-1390-0x0000025A17400000-0x0000025A17755000-memory.dmp

Download

memory/620-1297-0x00007FF804DA0000-0x00007FF804DA1000-memory.dmp

Download

memory/620-1299-0x00007FF805F60000-0x00007FF805F61000-memory.dmp

Download

memory/1160-2465-0x000001A57E900000-0x000001A57EC55000-memory.dmp

Download

memory/1940-9755-0x000001C90D800000-0x000001C90DB55000-memory.dmp

Download

memory/3556-4710-0x0000028FDC200000-0x0000028FDC555000-memory.dmp

Download

memory/4028-2171-0x000001BFEB700000-0x000001BFEBA55000-memory.dmp

Download

memory/4044-9466-0x000001C659700000-0x000001C659A55000-memory.dmp

Download

memory/4640-40-0x000001E5050E0000-0x000001E505159000-memory.dmp

Download

memory/4724-8130-0x000002980C100000-0x000002980C455000-memory.dmp

Download

memory/4836-3825-0x0000021F28A00000-0x0000021F28D55000-memory.dmp

Download

memory/4964-8707-0x000001FDFAB00000-0x000001FDFAE55000-memory.dmp

Download

memory/5020-7548-0x000001FC96000000-0x000001FC96355000-memory.dmp

Download

memory/7648-1433-0x000001D6B6AC0000-0x000001D6B6AD0000-memory.dmp

Download

memory/7648-1492-0x000001D6B8C70000-0x000001D6B8C80000-memory.dmp

Download

memory/7976-10313-0x0000019B59800000-0x0000019B59B55000-memory.dmp

Download

memory/8268-9757-0x000002CF4DD00000-0x000002CF4E055000-memory.dmp

Download

memory/8428-5584-0x0000018706200000-0x0000018706555000-memory.dmp

Download

memory/8740-6448-0x0000027989200000-0x0000027989555000-memory.dmp

Download

memory/8948-5868-0x00000171CDB00000-0x00000171CDE55000-memory.dmp

Download

memory/9316-10910-0x000001E447200000-0x000001E447555000-memory.dmp

Download

memory/9352-11018-0x000001DC0E000000-0x000001DC0E355000-memory.dmp

Download

memory/9540-3824-0x0000017543400000-0x0000017543755000-memory.dmp

Download

memory/9768-8416-0x0000017CC2F00000-0x0000017CC3255000-memory.dmp

Download

memory/9924-10325-0x0000024F44600000-0x0000024F44955000-memory.dmp

Download

memory/10068-5005-0x000001BDC6000000-0x000001BDC6355000-memory.dmp

Download